CVE-2018-6124

Type confusion in ReadableStreams in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page...

Fedora 28 : icecast (2018-d4349a7ba3)

This release fixes buffer overflows in URL authentication code CVE-2018-18820, a crash in htpasswd authentication if no filename is set, a crash on xsltApplyStylesheet error, and a crash on malformed Opus streams. It also corrects global listener counter. It stops displaying hashed user passwords...

Fedora 29 : icecast (2018-b881073c43)

This release fixes buffer overflows in URL authentication code CVE-2018-18820, a crash in htpasswd authentication if no filename is set, a crash on xsltApplyStylesheet error, and a crash on malformed Opus streams. It also corrects global listener counter. It stops displaying hashed user passwords...

IBM Event Streams Privilege Acquisition Vulnerability

IBM Event Streams is a set of event streaming platform based on Apache Kafka project from IBM, USA. The platform is mainly used for Apache Kafka deployment, authentication and encrypted communication and other functions. A security vulnerability exists in IBM Event Streams. A remote attacker can...

CVE-2018-1833

IBM Event Streams 2018.3.0 could allow a remote attacker to submit an API request with a fake Host request header. An attacker, who has already gained authorised access via the CLI, could exploit this vulnerability to spoof the request header. IBM X-Force ID: 150507...

CVE-2018-1833

CVE-2018-1833 affects IBM Event Streams 2018.3.0. A remote attacker with prior CLI access can submit an API request using a forged Host header to spoof the request. The impact is limited to header spoofing as described in the IBM/X-Force context; no exploitation details beyond header manipulation...

CVE-2018-1833

IBM Event Streams 2018.3.0 could allow a remote attacker to submit an API request with a fake Host request header. An attacker, who has already gained authorised access via the CLI, could exploit this vulnerability to spoof the request header. IBM X-Force ID: 150507...

Cross site request forgery (csrf)

IBM Event Streams 2018.3.0 could allow a remote attacker to submit an API request with a fake Host request header. An attacker, who has already gained authorised access via the CLI, could exploit this vulnerability to spoof the request header. IBM X-Force ID: 150507...

CVE-2018-1833

IBM Event Streams 2018.3.0 could allow a remote attacker to submit an API request with a fake Host request header. An attacker, who has already gained authorised access via the CLI, could exploit this vulnerability to spoof the request header. IBM X-Force ID: 150507...

CVE-2018-1833: Undefined Security Weakness

IBM Event Streams 2018.3.0 could allow a remote attacker to submit an API request with a fake Host request header. An attacker, who has already gained authorised access via the CLI, could exploit this vulnerability to spoof the request header. IBM X-Force ID: 150507...

PT-2018-14411

Name of the Vulnerable Software and Affected Versions IBM Event Streams version 2018.3.0 Description The issue allows a remote attacker to submit an API request with a fake Host request header. This can be exploited by an attacker who has already gained authorized access via the CLI to spoof the...

The vulnerability of the Libvirt virtualization management library, related to a bug that leads to excessive memory consumption, allows a hacker to trigger a service failure.

The vulnerability of the Libvirt virtualization management library is related to an error that causes excessive memory consumption when processing large data streams by QEMU. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Security Bulletin: IBM Event Streams is affected by cURL vulnerabilities

Summary IBM Event Streams is affected by the following vulnerabilities in the included cURL application. Vulnerability Details CVEID: CVE-2018-16840 DESCRIPTION: cURL is vulnerable to a denial of service, caused by a heap use-after-free flaw in the Curlclose function. By sending a specially-craft...

Security Bulletin: Potential redirection to external site when using the the IBM Event Streams API (CVE-2018-1833)

Summary There is a potential for IBM Event Streams API calls involving a paginated response to be redirected to an external site after the first page has been retrieved when subsequent pages are requested. Vulnerability Details CVEID: CVE-2018-1833 DESCRIPTION: IBM Event Streams could allow a...

Security Bulletin: Potential MITM attack in Apache CXF used by IBM Event Streams (CVE-2018-8039)

Summary There is a potential man-in-the-middle attack in Apache CXF used by IBM Event Streams CVE-2018-8039 Vulnerability Details CVEID: CVE-2018-8039 DESCRIPTION: Apache CXF could allow a remote attacker to conduct a man-in-the-middle attack. The TLS hostname verification does not work correctly...

Shenzhen Qiaoan Wireless Camera has information leakage vulnerability

Shenzhen Qiaoan Technology Co., Ltd. as a surveillance camera R&D manufacturer, produces and sells Qiaoan Surveillance, Qiaoan Surveillance Camera, Qiaoan Webcam, Qiaoan Hard Disk Recorder, Qiaoan Dome Camera and so on. There is an information leakage vulnerability in Joan's wireless cameras...

Security Bulletin: A Security Vulnerability Has Been Identified In IBM Cloud Private shipped with IBM Event Streams CVE-ID: CVE-2018-1002105

Summary IBM Cloud Private is shipped with IBM Event Streams. Information about a security vulnerability affecting IBM Cloud Private has been published in a security bulletin. Vulnerability Details Refer to the security bulletin listed in the Remediation/Fixes section Affected Products and Version...

Security Bulletin: Vulnerabilities in IBM SDK, Java Technology Edition Quarterly CPU which includes Oracle Apr 2018 CPU

Summary There are vulnerabilities in IBM SDK, Java Technology Edition Quarterly CPU which includes Oracle Apr 2018 CPU used by IBM Streams. IBM Streams has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2018-2800 DESCRIPTION: An unspecified vulnerability in Oracle Java SE related...

[SECURITY] Fedora 27 Update: icecast-2.4.4-1.fc27

Icecast is a streaming media server which currently supports Ogg Vorbis and MP3 audio streams. It can be used to create an Internet radio station or a privately running jukebox and many things in between. It is very versatile in that new formats can be added relatively easily and supports open...

Fedora 27 : icecast (2018-f3d995c6a8)

This release fixes buffer overflows in URL authentication code CVE-2018-18820, a crash in htpasswd authentication if no filename is set, a crash on xsltApplyStylesheet error, and a crash on malformed Opus streams. It also corrects global listener counter. It stops displaying hashed user passwords...