Threat Source newsletter for Sept. 24, 2020

Newsletter compiled by Jon Munshaw. Good afternoon, Talos readers. After months years? in beta, an official release candidate is out now for Snort 3. Stay tuned for an officially official release in about a month. In other Snort rules, we also have a deep dive into our detection and prevention of...

UBUNTU-CVE-2020-14148

The Server-Server protocol implementation in ngIRCd before 26rc2 allows an out-of-bounds access, as demonstrated by the IRCNJOIN function...

Linux kernel buffer overflow vulnerability (CNVD-2020-35957)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A buffer overflow vulnerability exists in the way mremap handles DAX Huge Pages in versions of Linux kernel after 4.5-rc1. An attacker can exploit this vulnerability t...

UBUNTU-CVE-2020-11523

libfreerdp/gdi/region.c in FreeRDP versions 1.0 through 2.0.0-rc4 has an Integer Overflow...

PT-2020-8679 · Argo · Argo

Name of the Vulnerable Software and Affected Versions: Argo versions prior to v1.5.0-rc1 Description: The issue allows authenticated Argo users to submit API calls to retrieve secrets and other manifests stored within git. Recommendations: For versions prior to v1.5.0-rc1, update to version...

exiv2: Infinite loop in Exiv2::Jp2Image::encodeJp2Header resulting in a denial of service

There is an infinite loop in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack...

wildfly-core: Cross-site scripting (XSS) in JBoss Management Console

A cross-site scripting XSS vulnerability was found in the JBoss Management Console versions before 7.1.6.CR1, 7.1.6.GA. Users with roles that can create objects in the application can exploit this to attack other privileged users...

CVE-2018-8784

FreeRDP prior to version 2.0.0-rc4 contains a Heap-Based Buffer Overflow in function zgfxdecompresssegment that results in a memory corruption and probably even a remote code execution...

DEBIAN-CVE-2018-19215

Netwide Assembler NASM 2.14rc16 has a heap-based buffer over-read in expandmmacparams in asm/preproc.c for the special cases of the % and $ and ! characters...

PT-2018-13536 · Owasp · Owasp Modsecurity Core Rule Set

Name of the Vulnerable Software and Affected Versions: OWASP ModSecurity Core Rule Set versions prior to 3.1.0-rc4 Description: A SQL injection bypass issue exists, allowing attackers to bypass security controls. This is achieved by using a special syntax ab, where a is a special function name,...

ISC BIND Release Candidate Denial of service - Ver2 (CVE-2011-0414)

A denial-of-service vulnerability exists in ISC BIND Release Candidate. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

Trovebox PHP Authentication Bypass Vulnerability

Trovebox is an open source image sharing and management platform. album view is one of the album view component. An authentication bypass vulnerability exists in the album view component in Trovebox 4.0.0-rc6 and earlier versions. An attacker can exploit this vulnerability by sending an HTTP...

PYSEC-2017-53

Cross-site scripting XSS vulnerability in Plone 3.3.0 through 3.3.6, 4.0.0 through 4.0.10, 4.1.0 through 4.1.6, 4.2.0 through 4.2.7, 4.3.x before 4.3.7, and 5.0rc1...

VulnCheck KEV: CVE-2009-3103

Array index error in the SMBv2 protocol implementation in srv2.sys in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2, and Windows 7 RC allows remote attackers to execute arbitrary code or cause a denial of service system crash via an & ampersand character in a...

dnsmasq -- remotely exploitable buffer overflow in release candidate

Simon Kelley reports: Anyone running 2.73rc6 or 2.73rc7 should be aware that there's a remotely exploitable buffer overflow in those trees. I just tagged 2.73rc8, which includes the fix. Corrections from second URL...

UBUNTU-CVE-2014-2828

The V3 API in OpenStack Identity Keystone 2013.1 before 2013.2.4 and icehouse before icehouse-rc2 allows remote attackers to cause a denial of service CPU consumption via a large number of the same authentication method in a request, aka "authentication chaining."...

Dolibarr Multiple Script URI XSS

The version of Dolibarr on the remote host fails to properly sanitize parameters in 'index.php' before using them to generate dynamic HTML. By tricking someone into clicking on a specially crafted link, an attacker may be able exploit this issue to inject arbitrary HTML and script code in a user'...

Mageia 1 Beta 2 released [ Testing Edition ]

Mageia 1 Beta 2 released Testing Edition Three weeks after the first beta arrived, the Mageia development team has announced the release of the second beta for version 1.0 of its Mandriva Linux fork. According to the project roadmap, Mageia 1 Beta 2 will be followed by a release candidate on 17 M...

New BIND Bug Can Cause Remote Server DoS

There is a severe vulnerability in the widely deployed BIND DNS software that can allow an attacker to force a remote server to freeze and stop processing requests. The bug is in several recent versions of the BIND software. BIND is a very popular DNS package that’s maintained by the Internet...

Mandriva Update for wine MDVA-2010:211 (wine)

Check for the Version of wine OpenVAS Vulnerability Test Mandriva Update for wine MDVA-2010:211 wine Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...