Denial of Service Vulnerability in Various Siemens SIMATIC Products

SIMATIC WinCC, SIMATIC PCS 7, SIMATIC BATCH, etc. are industrial automation products of Siemens, Germany. A denial of service vulnerability exists in several Siemens SIMATIC products, which can be exploited by attackers to cause a denial of service condition in the remote and local communication...

Amazon Linux AMI : kernel (ALAS-2018-939) (Meltdown) (Spectre)

An updated kernel release for Amazon Linux has been made available which prevents speculative execution of indirect branches within the kernel. This release incorporates latest stable open source Linux security improvements to address CVE-2017-5715 within the kernel and builds upon previously...

PVS Target device boot up stuck at "Starting Windows" or "virtual disk found"

PVS Target device boot up stuck at 'Starting Windows' forever. Most of the time reboot the problem VM from the hypervisor the VM can boot up without issue. Also we could see the PVS Target device boot up stuck at 'vDisk found'...

Denial of Service Vulnerability in Moxa NPort5110 TCP/IP Stack

Moxa NPort5110 is an industrial-grade serial server manufactured by Moxa Taiwan for serial device networking. A denial of service vulnerability exists in the Moxa NPort5110 TCP/IP stack. Sending 1-2 UDP length anomaly messages to the NPort5110's UDP port 161 SNMP can cause the NPort5110's TCP/IP...

StoreFront 2.5 not loading apps

Storefront URL when logging in doesn't load any applications and just comes up after logging in with "Spinning wheel" Issue is fixed by rebooting the Storefront servers every time it happens. Also sometimes "Cannot complete you request" error comes after login...

Siemens SIMATIC NET PCSoftware Denial of Service Vulnerability

SIMATIC NET is an open and multifaceted communication system provided by Siemens at the industrial control level. A denial of service vulnerability exists in Siemens SIMATIC NET PCSoftware. An attacker can exploit the vulnerability by sending specially crafted packets to ports...

Microprogramming software for Siemens SIPROTEC 4 relay protection microprocessors

The vulnerability of the software of the Siemens SIPROTEC 4 relay protection micro-processor terminal allows a remote attacker to cause a malfunction of the micro-processor terminal by sending a specially crafted UDP packet to port 50000. This causes the micro-processor terminal to cease...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix two security issues and several bugs are now available for Red Hat Enterprise Linux 6.6 Extended Update Support. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give...

Rockwell Automation MicroLogix 1200 EtherNetIP Protocol Stack Denial of Service Vulnerability

The Rockwell Automation PLC Micro Logix 1200 is a controller with integrated processor, power supply, and embedded input and output points. The Rockwell Automation PLC Micrologix 1200 uses the EthernetIP protocol for industrial control communications. Setting the value of the length field of the...

Scientific Linux Security Update : kernel on SL7.x x86_64 (20151208)

It was found that the x86 ISA Instruction Set Architecture is prone to a denial of service attack inside a virtualized environment in the form of an infinite loop in the microcode due to the way sequential delivering of benign exceptions such as AC alignment check exception and DB debug exception...

Scientific Linux Security Update : kernel on SL7.x x86_64 (20151103)

A flaw was found in the way the Linux kernel's VFS subsystem handled file system locks. A local, unprivileged user could use this flaw to trigger a deadlock in the kernel, causing a denial of service on the system. CVE-2014-8559, Moderate A buffer overflow flaw was found in the way the Linux...

CentOS 7 : kernel (CESA-2015:1978)

Updated kernel packages that fix two security issues, several bugs, and add one enhancement are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detaile...

Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20150813)

Two flaws were found in the way the Linux kernel's networking implementation handled UDP packets with incorrect checksum values. A remote attacker could potentially use these flaws to trigger an infinite loop in the kernel, resulting in a denial of service on the system, or cause a denial of...

Scientific Linux Security Update : kernel on SL7.x x86_64 (20150805)

An integer overflow flaw was found in the way the Linux kernel's netfilter connection tracking implementation loaded extensions. An attacker on a local network could potentially send a sequence of specially crafted packets that would initiate the loading of a large number of extensions, causing t...

MS15-0 6 8-Windows Hyper-V remote code execution vulnerability-vulnerability warning-the black bar safety net

! /Article/UploadPic/2015-7/2 0 1 5 7 1 9 1 6 1 4 3 8 1 2 3. png Overview Microsoft THE the release of the security update patches related to Windows operating system vulnerabilities, if in a station by Hyper－V technology to create the virtual machine, there is a proven and there are special...

CentOS 6 : kernel (CESA-2015:1081)

Updated kernel packages that fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix one security issue and three bugs are now available for Red Hat Enterprise Linux 6.4 Advanced Update Support. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...

Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20150421)

A flaw was found in the way seunshare, a utility for running executables under a different security context, used the capnglock functionality of the libcap-ng library. The subsequent invocation of suid root binaries that relied on the fact that the setuid system call, among others, also sets the...

Scientific Linux Security Update : kernel on SL7.x x86_64 (20150305)

A flaw was found in the way the Linux kernel's XFS file system handled replacing of remote attributes under certain conditions. A local user with access to XFS file system mount could potentially use this flaw to escalate their privileges on the system. CVE-2015-0274, Important It was found that...

RedHat Update for kernel RHSA-2014:1143-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...