SUSE SLED12 / SLES12 Security Update : libtirpc (SUSE-SU-2018:2171-1)

This update for libtirpc fixes the following issues: Security issue fixed : - bsc968175: Fix remote crash of RPC services. Bug fixes : - bsc1072183: Send RPC getport call as specified via parameter. Note that Tenable Network Security has extracted the preceding description block directly from the...

SUSE-SU-2018:2171-1 Security update for libtirpc

This update for libtirpc fixes the following issues: Security issue fixed: - bsc968175: Fix remote crash of RPC services. Bug fixes: - bsc1072183: Send RPC getport call as specified via parameter...

RHEL 7 : xmlrpc (RHSA-2018:2317)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:2317 advisory. XML-RPC is a way to make remote procedure calls over the Internet. It converts procedure calls into XML documents, sends them to a remote server usin...

SonicWall Global Management System - XMLRPC set_time_zone Command Injection (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "SonicWall Global Management System XMLRPC settimezone Unath RCE", 'Description' = %q This module exploits a vulnerability in SonicWall Global...

Moderate: Red Hat Security Advisory: xmlrpc security update

An update for xmlrpc is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

xmlrpc: Deserialization of untrusted Java object through <ex:serializable> tag

A flaw was discovered in the Apache XML-RPC ws-xmlrpc library that deserializes untrusted data when enabledForExtensions setting is enabled. A remote attacker could use this vulnerability to execute arbitrary code via a crafted serialized Java object in a element...

shadowbroker

This repository, jasonhan233/shadowbroker, is an offensive tool collection containing exploits and payloads. The repository was initially reported for containing sensitive data, and several files were deleted as a result. The remaining files include a mix of exploit code, payloads, and...

VMSA-2018-0018 : VMware Horizon View Agent, VMware ESXi, Workstation, and Fusion updates resolve multiple security issues

a. VMware Horizon View Agent local information disclosure vulnerability VMware Horizon View Agents contain a local information disclosure vulnerability due to insecure logging of credentials in the vmmsi.log file when an account other than the currently logged on user is specified during...

CVE-2018-6972

VMware ESXi 6.7 before ESXi670-201806401-BG, 6.5 before ESXi650-201806401-BG, 6.0 before ESXi600-201806401-BG and 5.5 before ESXi550-201806401-BG, Workstation 14.x before 14.1.2, and Fusion 10.x before 10.1.2 contain a denial-of-service vulnerability due to NULL pointer dereference issue in RPC...

CVE-2018-6972

VMware ESXi 6.7 before ESXi670-201806401-BG, 6.5 before ESXi650-201806401-BG, 6.0 before ESXi600-201806401-BG and 5.5 before ESXi550-201806401-BG, Workstation 14.x before 14.1.2, and Fusion 10.x before 10.1.2 contain a denial-of-service vulnerability due to NULL pointer dereference issue in RPC...

Null pointer dereference

VMware ESXi 6.7 before ESXi670-201806401-BG, 6.5 before ESXi650-201806401-BG, 6.0 before ESXi600-201806401-BG and 5.5 before ESXi550-201806401-BG, Workstation 14.x before 14.1.2, and Fusion 10.x before 10.1.2 contain a denial-of-service vulnerability due to NULL pointer dereference issue in RPC...

CVE-2018-6972

Summary of CVE-2018-6972 details from provided documents : VMware products — ESXi (versions listed as affected before certain update bundles), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) — are affected by a denial-of-service vulnerability due to a NULL pointer dereference in...

CVE-2018-6972

VMware ESXi 6.7 before ESXi670-201806401-BG, 6.5 before ESXi650-201806401-BG, 6.0 before ESXi600-201806401-BG and 5.5 before ESXi550-201806401-BG, Workstation 14.x before 14.1.2, and Fusion 10.x before 10.1.2 contain a denial-of-service vulnerability due to NULL pointer dereference issue in RPC...

Denial Of Service (DoS)

libvirt.so is vulnerable to denial of service DoS. The attack can be triggered during an RPC connection where an attacker can trigger a use-after-free error through the virNetMessageFree function in rpc/virnetserverclient.c, causing the application to crashing or arbitrary code being executed...

Oracle Solaris Critical Patch Update : jul2018_SRU11_3_32_4_0

This Solaris system is missing necessary patches to address a critical security update : - Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged...

Code injection

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged attacker with network access via RPC to compromise Solaris. While the vulnerability is in Solari...

CVE-2018-2908

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged attacker with network access via RPC to compromise Solaris. While the vulnerability is in Solari...

CVE-2018-2908

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged attacker with network access via RPC to compromise Solaris. While the vulnerability is in Solari...

CVE-2018-2930

CVE-2018-2930 affects the Solaris Cluster component of Oracle Sun Systems, subcomponent “NAS device addition.” Affected versions are 3.3 and 4.3. An unauthenticated attacker with network access via RPC can compromise Solaris Cluster, potentially leading to takeover. CVSS v3.0 base score is 9.8 (C...

CVE-2018-2930

Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite subcomponent: NAS device addition. Supported versions that are affected are 3.3 and 4.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via RPC to compromise Solaris Cluster...