[SECURITY] Fedora 27 Update: glibc-2.26-28.fc27

The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important se...

[SECURITY] Fedora 28 Update: glibc-2.27-14.fc28

The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important se...

CVE-2017-18269

An SSE2-optimized memmove implementation for i386 in sysdeps/i386/i686/multiarch/memcpy-sse2-unaligned.S in the GNU C Library aka glibc or libc6 2.21 through 2.27 does not correctly perform the overlapping memory check if the source memory range spans the middle of the address space, resulting in...

Code injection

An SSE2-optimized memmove implementation for i386 in sysdeps/i386/i686/multiarch/memcpy-sse2-unaligned.S in the GNU C Library aka glibc or libc6 2.21 through 2.27 does not correctly perform the overlapping memory check if the source memory range spans the middle of the address space, resulting in...

[SECURITY] Fedora 26 Update: glusterfs-3.10.12-1.fc26

GlusterFS is a distributed file-system capable of scaling to several petabytes. It aggregates various storage bricks over Infiniband RDMA or TCP/IP interconnect into one large parallel network file system. GlusterFS is one of the most sophisticated file systems in terms of features and...

Design/Logic Flaw

The stub component of Absolute Computrace Agent V70.785 executes code from a disk's inter-partition space without requiring a digital signature for that code, which allows attackers to execute code on the BIOS. This allows a privileged local user to achieve persistent control of BIOS behavior,...

CVE-2009-5151

The stub component of Absolute Computrace Agent V70.785 executes code from a disk's inter-partition space without requiring a digital signature for that code, which allows attackers to execute code on the BIOS. This allows a privileged local user to achieve persistent control of BIOS behavior,...

CVE-2009-5150: Improper Access Control

Absolute Computrace Agent V80.845 and V80.866 does not have a digital signature for the configuration block, which allows attackers to set up communication with a web site other than the intended search.namequery.com site by modifying data within a disk's inter-partition space. This allows a...

PT-2018-4022

Name of the Vulnerable Software and Affected Versions Absolute Computrace Agent versions V80.845 through V80.866 Description The issue allows attackers to set up communication with a website other than the intended search.namequery.com site by modifying data within a disk's inter-partition space...

CVE-2018-10561

creationtimestamp| type| source ---|---|--- 2018-05-10 10:42:33+00:00| seen| MISP/5af412ea-4254-4668-b1ea-44bc950d210f 2018-05-10 16:08:26+00:00| published-proof-of-concept| https://t.me/canyoupwnme/3739 2018-06-18 09:04:01+00:00| seen| MISP/5b2774da-6bb4-46c0-8483-43e102de0b81 2019-01-25...

kernel: Stack information leak in the EFS element

A flaw was found in the processing of incoming L2CAP bluetooth commands. Uninitialized stack variables can be sent to an attacker leaking data in kernel address space...

TRIM and PVS: vDisks may Reduce in Size after a Merged Base

After performing a Merged Base operation on a vDisk that is utilizing the VHDX file format, the resultant merged base VHDX file may be smaller than the original base VHDX file. For example, this behavior might occur in situations where files are deleted in a particular vDisk version, and these...

Cisco Prime Service Catalog Denial of Service Vulnerability (CNVD-2018-08940)

Cisco Prime Service Catalog PSC is a service catalog solution from Cisco USA that provides all IT services through a single portal. The solution supports automated ordering of a unified service catalog for computing, networking, storage, and other data center resources. A security vulnerability...

CVE-2018-0285

A vulnerability in service logging for Cisco Prime Service Catalog could allow an authenticated, remote attacker to deny service to the user interface. The vulnerability is due to exhaustion of disk space. An attacker could exploit this vulnerability by performing certain operations that lead to...

CVE-2018-0285

A vulnerability in service logging for Cisco Prime Service Catalog could allow an authenticated, remote attacker to deny service to the user interface. The vulnerability is due to exhaustion of disk space. An attacker could exploit this vulnerability by performing certain operations that lead to...

Design/Logic Flaw

A vulnerability in service logging for Cisco Prime Service Catalog could allow an authenticated, remote attacker to deny service to the user interface. The vulnerability is due to exhaustion of disk space. An attacker could exploit this vulnerability by performing certain operations that lead to...

CVE-2018-0285

CVE-2018-0285 affects Cisco Prime Service Catalog. The issue arises from excessive logging that exhausts disk space, enabling an authenticated, remote attacker to deny service to the user interface. Data from NVD and Cisco advisories confirm the vulnerability is a disk-space exhaustion DoS via lo...

CVE-2018-0285

A vulnerability in service logging for Cisco Prime Service Catalog could allow an authenticated, remote attacker to deny service to the user interface. The vulnerability is due to exhaustion of disk space. An attacker could exploit this vulnerability by performing certain operations that lead to...

CVE-2018-0285: Uncontrolled Resource Consumption

A vulnerability in service logging for Cisco Prime Service Catalog could allow an authenticated, remote attacker to deny service to the user interface. The vulnerability is due to exhaustion of disk space. An attacker could exploit this vulnerability by performing certain operations that lead to...

PT-2018-8726

Name of the Vulnerable Software and Affected Versions: Cisco Prime Service Catalog affected versions not specified Description: A vulnerability in service logging could allow an authenticated, remote attacker to deny service to the user interface due to exhaustion of disk space. The attacker coul...