Arbitrary Code Execution

DEBIAN is vulnerable to arbitrary code execution. A heap-based buffer overflow has been discovered in the RPC protocol used by p11-kit server/remote commands and the client library when the remote entity supplies a serialized byte array in a CKATTRIBUTE, the receiving entity may not allocate...

[slackware-security] p11-kit

New p11-kit packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/p11-kit-0.23.22-i586-1slack14.2.txz: Upgraded. Fix memory-safety issues that affect the RPC protocol. For more information, see:...

p11-kit -- Multiple vulnerabilities

The p11-glue project reports: CVE-2020-29363: Out-of-bounds write in p11rpcbuffergetbytearrayvalue functionA heap-based buffer overflow has been discovered in the RPC protocol used by p11-kit server/remote commands and the client library. When the remote entity supplies a serialized byte array in...

Microsoft Windows Task Scheduler Security Feature Bypass Vulnerability

Compass Security identified a security feature bypass vulnerability in Microsoft Windows. Due to the absence of integrity verification requirements for the RPC protocol and in particular the Task Scheduler, a man-in-the-middle attacker can relay his victim's NTLM authentication to a target of his...

Microsoft Windows Task Scheduler Security Feature Bypass

COMPASS SECURITY ADVISORY https://www.compass-security.com/research/advisories/ Product: Windows Task Scheduler Vendor: Microsoft CSNC ID: CSNC-2010-001 CVE ID: CVE-2020-1113 Subject: Security Feature Bypass Risk: High Effect: Remotely exploitable Authors: Sylvain Heiniger Date: 14.05.2020...

UBUNTU-CVE-2020-7218

HashiCorp Nomad and Nonad Enterprise up to 0.10.2 HTTP/RPC services allowed unbounded resource usage, and were susceptible to unauthenticated denial of service. Fixed in 0.10.3...

Apache Spark RPC Protocol deserialization vulnerability analysis-vulnerability warning-the black bar safety net

Front a burst of Spark official release of the title for the CVE-2018-17190: Unsecured Apache Spark standalone executes user code of the security Bulletin. The announcement indicated the vulnerability affects version to full version, and does not indicate a repaired version, only the relevant...

How to tap the RPC vulnerability, Part 1-the vulnerability warning-the black bar safety net

One, Foreword 2018 Year 8 months late, and one researcher（SandboxEscaper open a Windows local privilege escalation 0day vulnerabilities. On the Internet public after less than two weeks time, the vulnerability has already been malware attacks by using reference ESET articles published in. This...

UBUNTU-CVE-2017-12133

Use-after-free vulnerability in the clntudpcall function in sunrpc/clntudp.c in the GNU C Library aka glibc or libc6 before 2.26 allows remote attackers to have unspecified impact via vectors related to error path...

SUSE SLES11 Security Update : Salt (SUSE-SU-2017:1581-1)

This update for salt provides version 2016.11.4 and brings various fixes and improvements : - Adding a salt-minion watchdog for RHEL6 and SLES11 systems sysV to restart salt-minion in case of crashes during upgrade. - Fix format error. bsc1043111 - Fix ownership for whole master cache directory...

CVE-2015-7599

Wind River VxWorks CVE-2015-7599: Integer overflow in _authenticate (svc_auth.c) when RPC is enabled, enabling remote DoS and potential code execution. Affected versions: VxWorks 5.5–6.9.4.1. Public references in the connected docs show an RPC DoS exploit module (vxworks_rpc_dos) targeting VxWork...

CVE-2015-7599

Integer overflow in the authenticate function in svcauth.c in Wind River VxWorks 5.5 through 6.9.4.1, when the Remote Procedure Call RPC protocol is enabled, allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a username and password...

CentOS Update for libsmbclient CESA-2016:0611 centos6

Check the version of libsmbclient SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882457";...

CentOS Update for samba3x CESA-2016:0613 centos5

Check the version of samba3x SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882456";...

Scientific Linux Security Update : samba3x on SL5.x i386/x86_64 (20160412) (Badlock)

Security Fixes : - Multiple flaws were found in Samba's DCE/RPC protocol implementation. A remote, authenticated attacker could use these flaws to cause a denial of service against the Samba server high CPU load or a crash or, possibly, execute arbitrary code with the permissions of the user...

CentOS 6 : samba (CESA-2016:0611) (Badlock)

An update for samba is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

RedHat Update for samba RHSA-2016:0611-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RedHat Update for samba3x RHSA-2016:0613-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 5 : samba3x (RHSA-2016:0624) (Badlock)

An update for samba3x is now available for Red Hat Enterprise Linux 5.6 Long Life and Red Hat Enterprise Linux 5.9 Long Life. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

RHEL 6 : jasperreports-server-pro (RHSA-2014:0037)

An updated jasperreports-server-pro package that fixes two security issues, several bugs, and adds various enhancements is now available. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give...