SUSE-SU-2017:3288-1 Security update for the Linux Kernel (Live Patch 4 for SLE 12 SP2)

This update for the Linux Kernel 4.4.38-93 fixes several issues. The following security issues were fixed: - CVE-2017-16939: The XFRM dump policy implementation in net/xfrm/xfrmuser.c kernel allowed local users to gain privileges or cause a denial of service use-after-free via a crafted SORCVBUF...

SUSE-SU-2017:3292-1 Security update for the Linux Kernel (Live Patch 2 for SLE 12 SP2)

This update for the Linux Kernel 4.4.21-84 fixes several issues. The following security issues were fixed: - CVE-2017-16939: The XFRM dump policy implementation in net/xfrm/xfrmuser.c kernel allowed local users to gain privileges or cause a denial of service use-after-free via a crafted SORCVBUF...

SUSE-SU-2017:3296-1 Security update for the Linux Kernel (Live Patch 9 for SLE 12 SP2)

This update for the Linux Kernel 4.4.59-9224 fixes several issues. The following security issues were fixed: - CVE-2017-1000405: Problematic use of pmdmkdirty in the touchpmd function allowed users to overwrite read-only huge pages e.g. the zero huge page and sealed shmem files bsc1070307. -...

CVE-2017-11480: Improper Resource Shutdown or Release

Packetbeat versions prior to 5.6.4 are affected by a denial of service flaw in the PostgreSQL protocol handler. If Packetbeat is listening for PostgreSQL traffic and a user is able to send arbitrary network traffic to the monitored port, the attacker could prevent Packetbeat from properly logging...

App Layering - Shutdown for Finalize Error, "A RunOnce script is outstanding"

In any layer, when creating it, you must double-click on the Shutdown for Finalize script, where we determine that there are no pending Windows operations that need to complete before we finalize. When you run this, you may see this: Layer Finalize is BLOCKED, The outstanding items are: 'a RunOnc...

Apache Karaf Local Denial of Service Vulnerability

Apache Karaf is the United States Apache Apache Software Foundation for the deployment of applications and components of a lightweight OSGi Java Dynamic Modular System container. A local denial of service vulnerability exists in Apache Karaf. A local attacker could exploit this vulnerability by...

Denial Of Service (DoS)

karaf is susceptible to denial of service DoS attacks. It does not prevent a local attacker from invoking the shutdown command to all listening high ports, leading to the karaf server shutting down...

Authentication flaw

Apache Karaf before 4.0.10 enables a shutdown port on the loopback interface, which allows local users to cause a denial of service shutdown by sending a shutdown command to all listening high ports...

CVE-2014-0219

Apache Karaf before 4.0.10 enables a shutdown port on the loopback interface, which allows local users to cause a denial of service shutdown by sending a shutdown command to all listening high ports...

CVE-2014-0219

Apache Karaf before 4.0.10 enables a shutdown port on the loopback interface, which allows local users to cause a denial of service shutdown by sending a shutdown command to all listening high ports...

CVE-2014-0219

Apache Karaf before 4.0.10 enables a shutdown port on the loopback interface, which allows local users to cause a denial of service shutdown by sending a shutdown command to all listening high ports...

PT-2017-5779

Name of the Vulnerable Software and Affected Versions: Apache Karaf versions prior to 4.0.10 Description: The issue allows local users to cause a denial of service by sending a shutdown command to all listening high ports, as a shutdown port is enabled on the loopback interface. Recommendations:...

CVE-2014-0219: Improper Input Validation

Apache Karaf before 4.0.10 enables a shutdown port on the loopback interface, which allows local users to cause a denial of service shutdown by sending a shutdown command to all listening high ports...

Apache ActiveMQ 'CVE-2014-3576' Denial of Service Vulnerability - Windows

Apache ActiveMQ is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:activemq";...

A week in security (October 30 – November 5)

Last week on our blog, we told you what to expect at the upcoming Irisscon security conference in Dublin. We gave you a quick introduction into the why and how of analyzing malware based on their API calls. And we issued a warning about some lesser-known cybercrimes. Plus we explained why emergin...

SAP Point of Sale Xpress Server Authentication Bypass Vulnerability

SAP Point of Sale POS is the German SAP SAP company's set of sales management system. Xpress Server is one of the Xpress server. A security vulnerability exists in the Xpress Server in SAP POS, which stems from the program's failure to require authentication. An attacker could use this...

CVE-2017-15293

Xpress Server in SAP POS does not require authentication for file read and erase operations, daemon shutdown, terminal read operations, or certain attacks on credentials. This is SAP Security Note 2520064...

Authentication flaw

Xpress Server in SAP POS does not require authentication for file read and erase operations, daemon shutdown, terminal read operations, or certain attacks on credentials. This is SAP Security Note 2520064...

CVE-2017-15293

Xpress Server in SAP POS does not require authentication for file read and erase operations, daemon shutdown, terminal read operations, or certain attacks on credentials. This is SAP Security Note 2520064...

CVE-2017-15293: Improper Authentication

Xpress Server in SAP POS does not require authentication for file read and erase operations, daemon shutdown, terminal read operations, or certain attacks on credentials. This is SAP Security Note 2520064...