rasdaemon bug fix and enhancement update

An update is available for rasdaemon. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The rasdaemon packages provide a RAS Reliability, Availability and...

rasdaemon bug fix and enhancement update

The rasdaemon packages provide a RAS Reliability, Availability and Serviceability logging tool, which records memory errors, using the EDAC tracing events. Bug Fixes and Enhancements: RFE latest rasdaemon hardware check for ROME and MILAN BZ1975506...

CVE-2021-29364

A buffer overflow vulnerability in Formats!ReadRASW+0x1001 of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file...

PT-2021-7273

Name of the Vulnerable Software and Affected Versions Windows Point-to-Point Protocol PPP affected versions not specified Description The issue is related to a vulnerability in the implementation of the Point-to-Point Protocol PPP that allows for the sending of a specially crafted request to the...

Siemens JT2Go RAS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing ...

CVE-2020-28394

A vulnerability has been identified in JT2Go All versions V13.1.0.1, Teamcenter Visualization All versions V13.1.0.1. Affected applications lack proper validation of user-supplied data when parsing of RAS files. This could result in a memory access past the end of an allocated buffer. An attacker...

CVE-2020-28394

A vulnerability has been identified in JT2Go All versions V13.1.0.1, Teamcenter Visualization All versions V13.1.0.1. Affected applications lack proper validation of user-supplied data when parsing of RAS files. This could result in a memory access past the end of an allocated buffer. An attacker...

Design/Logic Flaw

A vulnerability has been identified in JT2Go All versions V13.1.0.1, Teamcenter Visualization All versions V13.1.0.1. Affected applications lack proper validation of user-supplied data when parsing of RAS files. This could result in a memory access past the end of an allocated buffer. An attacker...

PT-2021-11516

Name of the Vulnerable Software and Affected Versions: JT2Go versions prior to 13.1.0.1 Teamcenter Visualization versions prior to 13.1.0.1 Description: A vulnerability has been identified in the affected applications, where they lack proper validation of user-supplied data when parsing RAS files...

CVE-2020-28394: Out-of-bounds Read

A vulnerability has been identified in JT2Go All versions V13.1.0.1, Teamcenter Visualization All versions V13.1.0.1. Affected applications lack proper validation of user-supplied data when parsing of RAS files. This could result in a memory access past the end of an allocated buffer. An attacker...

CVE-2021-1999

CVE-2021-1999 affects Oracle ZFS Storage Appliance Kit (Oracle Systems) in the RAS subsystems with version 8.8. The vulnerability allows a high-privilege attacker who has local logon to compromise the kit, requiring user interaction. Attacks can lead to unauthorized creation, deletion, or modific...

CVE-2021-1999

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems component: RAS subsystems. The supported version that is affected is 8.8. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle ZFS Storage Appliance Kit...

CVE-2021-1999: Undefined Security Weakness

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems component: RAS subsystems. The supported version that is affected is 8.8. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle ZFS Storage Appliance Kit...

PT-2021-1912

Name of the Vulnerable Software and Affected Versions Oracle ZFS Storage Appliance Kit version 8.8 Description The issue is related to inadequate access control in the RAS subsystems component, allowing a high-privileged attacker with logon access to the infrastructure to compromise the system...

CVE-2020-35710

Parallels Remote Application Server RAS 18 allows remote attackers to discover an intranet IP address because submission of the login form even with blank credentials provides this address to the attacker's client for use as a "host" value. In other words, after an attacker's web browser sent a...

Design/Logic Flaw

Parallels Remote Application Server RAS 18 allows remote attackers to discover an intranet IP address because submission of the login form even with blank credentials provides this address to the attacker's client for use as a "host" value. In other words, after an attacker's web browser sent a...

CVE-2020-35710

Parallels Remote Application Server (RAS) 18 is affected. The issue allows remote attackers to discover an intranet IP address because, after submitting the login form (even with blank credentials), the attacker's client receives the host IP via a second request to RASHTML5Gateway/socket.io conta...

PT-2020-17399

Name of the Vulnerable Software and Affected Versions Parallels Remote Application Server RAS version 18 Description The issue allows remote attackers to discover an intranet IP address. This occurs because submission of the login form, even with blank credentials, provides the intranet IP addres...

CVE-2020-35710: Exposure of Sensitive Information to an Unauthorized Actor

Parallels Remote Application Server RAS 18 allows remote attackers to discover an intranet IP address because submission of the login form even with blank credentials provides this address to the attacker's client for use as a "host" value. In other words, after an attacker's web browser sent a...

Microsoft Issues Emergency Security Updates for Windows 8.1 and Server 2012 R2

Microsoft has issued an emergency out-of-band software update for Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2 systems to patch two new recently disclosed security vulnerabilities. Tracked as CVE-2020-1530 and CVE-2020-1537, both flaws reside in the Remote Access Service RAS in a way i...