CVE-2018-17076

GPP through 2.25 will try to use more memory space than is available on the stack, leading to a segmentation fault or possibly unspecified other impact via a crafted file...

[SECURITY] Fedora 28 Update: glusterfs-4.1.4-1.fc28

GlusterFS is a distributed file-system capable of scaling to several petabytes. It aggregates various storage bricks over Infiniband RDMA or TCP/IP interconnect into one large parallel network file system. GlusterFS is one of the most sophisticated file systems in terms of features and...

[SECURITY] Fedora 27 Update: glibc-2.26-30.fc27

The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important se...

Ubiquiti Inc.: Resource Consumption DOS on Edgemax v1.10.6

Resource consumption Denial of service. 1: The request below shows that when you feed the beaker.session.id cookie variable a payload of 250 characters or more, the web management portal will produce an error page showing full path disclosure and more as shown in screenshots error1.png and...

How to Clear the Cache on Your Mac

Have you ever wondered why your Mac is running slow? Does it freeze when performing even just the simplest of tasks? Does it take a while to launch and switch programs? Everybody has gone through this excruciating pain at least once. Even though the Mac is known to be a high-performance machine, ...

DEBIAN-CVE-2018-16510

An issue was discovered in Artifex Ghostscript before 9.24. Incorrect exec stack handling in the "CS" and "SC" PDF primitives could be used by remote attackers able to supply crafted PDFs to crash the interpreter or possibly have unspecified other impact...

Unable to publish image, out of disk space, ELM console reports "No free mft record for $MFT: No space left on device"

When publishing an image, the task fails with the message, "A failure occurred while publishing the Layered Image: An error occurred while compositing the layer or image. Please check the available disk space on the local storage or the size of the target image." Also, in the ELM console, you mig...

PT-2018-2152

Name of the Vulnerable Software and Affected Versions TeNIX versions affected versions not specified Description The issue is related to the lack of an authentication procedure in the pnp-receive.sh service of the TeNIX operating system used in МФК1500 and МФК3000 programmable logic controllers...

Unable to Publish Image with Citrix AppLayering 4.13

When we attempt to a publish image we encounter the below error on the ELM console: A failure occurred while publishing the Layered Image: An error occurred while compositing the layer or image. Please check the available disk space on the local storage or the size of the target image...

SUSE-SU-2018:2472-1 Security update for the Linux Kernel (Live Patch 1 for SLE 15)

This update for the Linux Kernel 4.12.14-253 fixes several issues. The following security issues were fixed: - CVE-2018-5390: Linux kernel versions 4.9+ can be forced to make very expensive calls to tcpcollapseofoqueue and tcppruneofoqueue for every incoming packet which can lead to a denial of...

Citrix App Layering - Management Appliance or ELM is out of disk space, what can you delete?

You may get e-mail or system, task notifications from the MA or ELM you are running out of disk space. 2. You may have an unresponsive Unidesk Management Console, To verify 1. 1.open ALMC gui 2. Login as root and use the "df" command to determine that you are out of space. -Unidesk sample-...

SUSE-SU-2018:2358-1 Security update for the Linux Kernel (Live Patch 29 for SLE 12 SP1)

This update for the Linux Kernel 3.12.74-606496 fixes several issues. The following security issues were fixed: - CVE-2018-3646: Local attackers in virtualized guest systems could use speculative code patterns on hyperthreaded processors to read data present in the L1 Datacache used by other...

DEBIAN-CVE-2018-5392

mingw-w64 version 5.0.4 by default produces executables that opt in to ASLR, but are not compatible with ASLR. ASLR is an exploit mitigation technique used by modern Windows platforms. For ASLR to function, Windows executables must contain a relocations table. Despite containing the "Dynamic base...

ShopsN open source online store full web system suffers from SQL injection vulnerability (CNVD-2018-17332)

ShopsN free version of the B2C e-commerce is a product of Shanghai Yisu Network Technology Co., Ltd. a full-featured enterprise-class commercial standards in line with the real allow free commercial use of open source online store full network system. ShopsN v2.3.3 official version of the existen...

Security Bulletin: OpenStack Cinder/Glance/Nova vulnerabilities affect IBM Cloud Manager with OpenStack (CVE-2015-5162)

Summary IBM Cloud Manager has addressed vulnerabilities in OpenStack Nova/Glance/Cinder. Vulnerability Details CVEID: CVE-2015-5162 DESCRIPTION: OpenStack Cinder, Glance and Nova are vulnerable to a denial of service, caused by the failure to limit qemu-img calls by the image parser. By using a...

Complex Malvertising Scheme Impacts Multiple Levels of Web Economy

UPDATE A sprawling malvertising campaign that leverages the AdsTerra legitimate online advertising company has been uncovered, involving at least 10,000 compromised websites and driving legions of web visitors around the world to exploit kits. AdsTerra, one of the largest ad networks out there,...

The Poor Cybersecurity of US Space Assets

Good policy paper summary here on the threats, current state, and potential policy solutions for the poor security of US space systems...

NetSpectre — New Remote Spectre Attack Steals Data Over the Network

A team of security researchers has discovered a new Spectre attack that can be launched over the network, unlike all other Spectre variants that require some form of local code execution on the target system. Dubbed "NetSpectre," the new remote side-channel attack, which is related to Spectre...

NetSpectre — New Remote Spectre Attack Steals Data Over the Network

A team of security researchers has discovered a new Spectre attack that can be launched over the network, unlike all other Spectre variants that require some form of local code execution on the target system. Dubbed "NetSpectre ," the new remote side-channel attack, which is related to Spectre...

PT-2018-3520

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.17.10 Description: The issue is related to a use-after-free error in the try merge free space function of the Linux kernel, specifically when mounting a crafted btrfs image. This occurs due to a lack of chunk...