Moderate: Red Hat Security Advisory: kernel-rt security, and enhancement update

Updated kernel-rt packages that fix two security issues and add one enhancement are now available for Red Hat Enterprise MRG 2. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Memory leak vulnerability in multiple Huawei products (CNVD-2018-12787)

Huawei IPS Module and so on are products of Huawei, China.Huawei IPS Module is an IPS security appliance.NGFW Module is a firewall appliance.NIP6300 and so on are next-generation intrusion prevention systems. A memory leak vulnerability exists in several Huawei products, where the system fails to...

CVE-2018-6832

Stack-based buffer overflow in the getSWFlag function in Foscam Cameras C1 Lite V3, and C1 V3 with firmware 2.82.2.33 and earlier, FI9800P V3, FI9803P V4, FI9851P V3, and FI9853EP V2 2.84.2.33 and earlier, FI9816P V3, FI9821EP V2, FI9821P V3, FI9826P V3, and FI9831P V3 2.81.2.33 and earlier, C1, ...

Security Advisory - Memory Leak Vulnerability on Several Products

There is a memory leak vulnerability on several products. The software does not release allocated memory properly when processing Protal questionnaire. A remote attacker could send a lot questionnaires to the device, successful exploit could cause the device to reboot since running out of memory...

Siemens SICLOCK TC Product Denial of Service Vulnerability

The SICROCK product line offers components for synchronizing plant and system time. A denial of service vulnerability exists in Siemens SICLOCK TC products. An attacker with network access privileges could cause a denial of service condition by sending certain packets to the device, which could...

PT-2018-16569

Name of the Vulnerable Software and Affected Versions SICLOCK TC100 All versions SICLOCK TC400 All versions Description A vulnerability has been identified that could allow an attacker with network access to cause a Denial-of-Service condition by sending certain packets to the device. This could...

CVE-2018-4851: Improper Input Validation

A vulnerability has been identified in SICLOCK TC100 All versions and SICLOCK TC400 All versions. An attacker with network access to the device could cause a Denial-of-Service condition by sending certain packets to the device, causing potential reboots of the device. The core functionality of th...

Amazon Linux AMI : kernel (ALAS-2018-1044)

A NULL pointer dereference issue was found in the Linux kernel. If the close and fchownat system calls share a socket file descriptor as an argument, then the two calls can race and trigger a NULL pointer dereference leading to a system crash and a denial of service.CVE-2018-12232 C Tenable Netwo...

Intelbras NCLOUD 300 Wi-Fi Router Privilege Escalation

The vulnerabilities of the components ExportSettings.sh /cgi-bin/ExportSettings.sh, updateWPS /goform/updateWPS, RebootSystem /goform/RebootSystem, and vpnBasicSettings /goform/vpnBasicSettings of the Intelbras NCLOUD 300 Wi-Fi router software are related to the use of pre-installed registration...

Google Home and Chromecast DOWN? Reboot them to Fix the Glitch

If your Google Home, Home Mini and/or Google Chromecast streaming stick were not working properly, you are not alone. Google Home, Home Mini, and Chromecast were down globally for many users for several hours, leaving a lot of people with trouble watching TV, controlling smart home gadgets, and...

CVE-2018-5527

On BIG-IP 13.1.0-13.1.0.7, a remote attacker using undisclosed methods against virtual servers configured with a Client SSL or Server SSL profile that has the SSL Forward Proxy feature enabled can force the Traffic Management Microkernel tmm to leak memory. As a result, system memory usage...

CVE-2018-5527

On BIG-IP 13.1.0-13.1.0.7, a remote attacker using undisclosed methods against virtual servers configured with a Client SSL or Server SSL profile that has the SSL Forward Proxy feature enabled can force the Traffic Management Microkernel tmm to leak memory. As a result, system memory usage...

Memory corruption

On BIG-IP 13.1.0-13.1.0.7, a remote attacker using undisclosed methods against virtual servers configured with a Client SSL or Server SSL profile that has the SSL Forward Proxy feature enabled can force the Traffic Management Microkernel tmm to leak memory. As a result, system memory usage...

TP-Link TL-WA850RE Denial of Service Vulnerability (CNVD-2018-12045)

TP-Link TL-WA850RE Wi-Fi Range Extender is a wireless network signal extender from China P&L TP-LINK. A security vulnerability exists in the TP-Link TL-WA850RE Wi-Fi Range Extender using firmware version TL-WA850REv5180228. A remote attacker can exploit the vulnerability to cause a denial of...

Intex Router N-150 Arbitrary File Upload

Exploit Title:aa Intex Router N-150 - Arbitrary File Upload Date: 2018-06-23 Exploit Author: Samrat Das Version: N-150 CVE : N/A Category: Router Firmware 1. Description The firmware allows malicious files to be uploaded without any checking of extensions and allows filed to be uploaded. 2. Proof...

PT-2018-8505

Name of the Vulnerable Software and Affected Versions Allen-Bradley L30ERMS safety devices versions v30 and earlier Description The issue is caused by improperly implemented option-field processing in the TCP/IP stack, leading to a denial of service when a crafted TCP packet is received, resultin...

Design/Logic Flaw

TP-Link TL-WA850RE Wi-Fi Range Extender with hardware version 5 allows remote attackers to cause a denial of service reboot via data/reboot.json...

Input Validation Vulnerability in Multiple Rockwell Automation Products

Rockwell Automation Allen-Bradley Compact GuardLogix 5370 controller and so on are programmable logic controller products of Rockwell Rockwell Automation. An input validation vulnerability exists in several Rockwell Automation products. An attacker could exploit this vulnerability to cause a deni...

Insteon Hub Reboot Task Denial Of Service Vulnerability

Summary An exploitable denial of service vulnerability exists in Insteon Hub running firmware version 1012. Leftover demo functionality allows for arbitrarily rebooting the device without authentication. An attacker can send an UDP packet to trigger this vulnerability. Tested Versions Insteon Hub...

Security Bulletin: Vulnerabilities in RequisitePro GSKit Component (CVE-2014-0963)

Summary A vulnerability in IBM Rational RequisitePro in relation to TLS Record Processing has been discovered related to TLS 1.0 and later which can result in high CPU utilization that requires a system reboot to resolve. Vulnerability Details | Subscribe to My Notifications to be notified of...