Ubuntu 18.04 LTS : Yubico PIV Tool vulnerabilities (USN-4276-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4276-1 advisory. It was discovered that libykpiv, a supporting library of the Yubico PIV Tool and YubiKey PIV Manager, mishandled specially crafted input. An attacker wit...

Applied ThreadFix: Fire Bullets, Then Cannonballs – AppSec Edition

The concept of "firing bullets and then cannonballs" comes from the book Great By Choice by Jim Collins and Morten T. Hansen. The idea works a little like this: first fire your "bullets" - low-cost, low-risk, low-distraction experiments to figure out what will work. This allows you to calibrate...

USN-4276-1: Yubico PIV Tool vulnerabilities

It was discovered that libykpiv, a supporting library of the Yubico PIV Tool and YubiKey PIV Manager, mishandled specially crafted input. An attacker with a custom-made, malicious USB device could potentially execute arbitrary code on a computer running the Yubico PIV Tool or Yubikey PIV Manager...

Kubernetes: Kubelet resource exhaustion attack via metric label cardinality explosion from unauthenticated requests

Report Submission Form Summary: Malicious clients can potentially DOS a kubelet by sending a high amount of specially crafted requests to the kubelet's HTTP server. For each request the kubelet updates/sets 3 metrics: - kubelethttprequeststotal Counter - kubelethttprequestsdurationseconds Histogr...

Friday Squid Blogging: Squidfall Safety

Watchmen supporting material. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...

[SECURITY] Fedora 29 Update: kernel-tools-5.3.11-100.fc29

This package contains the tools/ directory from the kernel source and the supporting documentation...

[SECURITY] Fedora 30 Update: kernel-tools-5.3.11-200.fc30

This package contains the tools/ directory from the kernel source and the supporting documentation...

[SECURITY] Fedora 31 Update: kernel-tools-5.3.7-300.fc31

This package contains the tools/ directory from the kernel source and the supporting documentation...

[SECURITY] Fedora 30 Update: kernel-tools-5.3.6-200.fc30

This package contains the tools/ directory from the kernel source and the supporting documentation...

[SECURITY] Fedora 31 Update: kernel-tools-5.3.6-300.fc31

This package contains the tools/ directory from the kernel source and the supporting documentation...

[SECURITY] Fedora 31 Update: kernel-tools-5.3.4-300.fc31

This package contains the tools/ directory from the kernel source and the supporting documentation...

[SECURITY] Fedora 29 Update: kernel-tools-5.2.17-100.fc29

This package contains the tools/ directory from the kernel source and the supporting documentation...

[SECURITY] Fedora 29 Update: kernel-tools-5.2.11-100.fc29

This package contains the tools/ directory from the kernel source and the supporting documentation...

[SECURITY] Fedora 30 Update: kernel-tools-5.2.11-200.fc30

This package contains the tools/ directory from the kernel source and the supporting documentation...

[SECURITY] Fedora 29 Update: kernel-tools-5.0.19-200.fc29

This package contains the tools/ directory from the kernel source and the supporting documentation...

[SECURITY] Fedora 28 Update: kernel-tools-5.0.9-100.fc28

This package contains the tools/ directory from the kernel source and the supporting documentation...

[SECURITY] Fedora 29 Update: kernel-tools-5.0.9-200.fc29

This package contains the tools/ directory from the kernel source and the supporting documentation...

[SECURITY] Fedora 29 Update: kernel-tools-5.0.6-200.fc29

This package contains the tools/ directory from the kernel source and the supporting documentation...

Security Bulletin: Security vulnerability is identified in the WebSphere Application Server where the Rational Asset Manager is deployed (CVE-2018-1996)

Summary In the WebSphere Application Server Admin console where the Rational Asset Manager is deployed, a potential security vulnerability is observed due to improper TLS configuration. Information about this security vulnerability affecting WebSphere Application Server is published in the...

Rocket.Chat: Guest Privilege Escalation to admin group

The vulnerability allowed a guest user to escalate privileges to the admin group. The guest user first added themselves to the bot group, which had the "manage-own-integrations" permission. Using this, the user created a malicious integration script that added the user to the admin group. The...