DEBIAN-CVE-2020-13988

An issue was discovered in Contiki through 3.0. An Integer Overflow exists in the uIP TCP/IP Stack component when parsing TCP MSS options of IPv4 network packets in uipprocess in net/ipv4/uip.c...

RHEL 8 : librabbitmq (RHSA-2020:4445)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4445 advisory. The librabbitmq packages provide an Advanced Message Queuing Protocol AMQP client library that allows you to communicate with AMQP servers using...

The vulnerability of the IPv6 traffic processing service of Cisco Small Business 250 Series, Cisco Small Business 350 Series, Cisco Small Business 350X Series, and Cisco Small Business 550X Series routers allows a attacker to cause a service failure.

The vulnerability of the IPv6 traffic processing service of Cisco Small Business 250 Series, Cisco Small Business 350 Series, Cisco Small Business 350X Series, and Cisco Small Business 550X Series routers is related to IPv6 traffic processing errors. Exploiting this vulnerability can allow a...

kernel: some ipv6 protocols not encrypted over ipsec tunnel

A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tunnels over IPv6. When an encrypted tunnel is created between two hosts, the kernel isn't correctly routing tunneled data over the encrypted link; rather sending the data...

Travel Management System 1.0 Remote Code Execution Exploit

Exploit for php platform in category web applications Exploit Title: Travel Management System v1.0 - Unauthenticated Remote Code Execution Exploit Author: Adeeb Shah @hyd3sec & Bobby Cooke boku Vulnerability Discovery: Adeeb Shah @hyd3sec Date: August 10, 2020 Vendor Homepage:...

Cisco StarOS Denial of Service Vulnerability (CNVD-2020-47969)

Cisco StarOS is a set of virtualization operating system of the American Cisco Cisco. An input validation error vulnerability exists in the IPv6 implementation of Cisco StarOS, which arises from the program's failure to adequately validate incoming IPv6 traffic. A remote attacker could exploit th...

SUSE SLED15 / SLES15 Security Update : freetds (SUSE-SU-2020:1417-2)

This update for freetds to 1.1.36 fixes the following issues : Security issue fixed : CVE-2019-13508: Fixed a heap overflow that could have been caused by malicious servers sending UDT types over protocol version 5.0 bsc1141132. Non-security issues fixed : Enabled Kerberos support Version update ...

ALPINE-CVE-2020-14422

Lib/ipaddress.py in Python through 3.8.3 improperly computes hash values in the IPv4Interface and IPv6Interface classes, which might allow a remote attacker to cause a denial of service if an application is affected by the performance of a dictionary containing IPv4Interface or IPv6Interface...

SUSE SLES15 Security Update : freetds (SUSE-SU-2020:1417-1)

This update for freetds to 1.1.36 fixes the following issues : Security issue fixed : CVE-2019-13508: Fixed a heap overflow that could have been caused by malicious servers sending UDT types over protocol version 5.0 bsc1141132. Non-security issues fixed : Enabled Kerberos support Version update ...

MQTT Resource Management Error Vulnerability

MQTT Message Queuing Telemetry Transport is an ISO standard ISO/IEC PRF 20922 based on the Publish/Subscribe paradigm of messaging protocols, which works on the TCP/IP family of protocols, and is designed for remote devices with low hardware performance and poor network conditions. It works on th...

openSUSE Security Update : freetds (openSUSE-2020-741)

This update for freetds to 1.1.36 fixes the following issues : Security issue fixed : - CVE-2019-13508: Fixed a heap overflow that could have been caused by malicious servers sending UDT types over protocol version 5.0 bsc1141132. Non-security issues fixed : - Enabled Kerberos support - Version...

Security update for freetds (moderate)

openSUSE Security Update: Security update for freetds Announcement ID: openSUSE-SU-2020:0741-1 Rating: moderate References: 1141132 Cross-References: CVE-2019-13508 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for freetds ...

IPv4 only clusters susceptible to MitM attacks via IPv6 rogue router advertisements

CVSS Rating: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L 6.0 Medium A cluster configured to use an affected container networking implementation is susceptible to man-in-the-middle MitM attacks. By sending “rogue” router advertisements, a malicious container can reconfigure the host to redirect...

HTTP/2: flood using PING frames results in unbounded memory growth

A flaw was found in HTTP/2. Using PING frames and queuing of response PING ACK frames, a flood attack could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability...

Linux: SSH Subsystem

Subsystem: Configures an external subsystem e.g. file transfer daemon. Arguments should be a subsystem name and a command with optional arguments to execute upon subsystem request. The command sftp-server implements the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be...

Linux: SSH RSAAuthentication

RSAAuthentication: Specifies whether pure RSA authentication is allowed. This option applies to protocol version 1 only. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Linux: SSH Ciphers

Ciphers: Specifies the ciphers allowed for protocol version 2. Multiple ciphers must be comma-separated. Note: This check fails if any algorithms are found that are not specified in the VT preferences. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a...

Linux: SSH PubkeyAuthentication

sshd reads configuration data from /etc/ssh/sshdconfig or the file specified with -f on the command line. The file contains keyword-argument pairs, one per line. Lines starting with SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and...

HTTP/2: request for large response leads to denial of service

A vulnerability was found in HTTP/2. An attacker can open a HTTP/2 window so the peer can send without constraint. The TCP window remains closed so the peer cannot write the bytes on the wire. The attacker then sends a stream of requests for a large response object. Depending on how the server's...

HTTP/2: flood using SETTINGS frames results in unbounded memory growth

A flaw was found in HTTP/2. Using SETTINGS frames and queuing of SETTINGS ACK frames, a flood could occur resulting in unbounded memory growth. The highest threat from this vulnerability is to system availability...