sssd bug fix and enhancement update

An update is available for sssd. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The System Security Services Daemon SSSD service provides a set of daemons to...

Unbreakable Enterprise kernel security update

5.4.17-2136.302.6.1 - rds/ib: Use both iova and key in freemr socket call aru kolappan Orabug:33667276 5.4.17-2136.302.6 - Revert fs: align IOCB flags with RWF flags Prasad Singamsetty Orabug: 33627551 5.4.17-2136.302.5 - Revert drm: Initialize struct drmcrtcstate.novblank from device settings...

SavingsAccount withdrawAll and switchStrategy can freeze user funds by ignoring possible strategy liquidity issues

Handle hyh Vulnerability details Impact Full withdrawal and moving funds between strategies can lead to wrong accounting if the corresponding market has tight liquidity, which can be the case at least for AaveYield. That is, as the whole amount is required to be moved at once from Aave, both...

The vulnerability of UniFi switch microprogramming software, related to uncontrolled resource consumption, allows a intruder to trigger a service failure.

The vulnerability of the microprogramming software of UniFi switches is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

Dell Networking OS10 Authentication Bypass Vulnerability (CNVD-2021-99661)

Dell Networking OS10 is a Linux-based network switch operating system from Dell DELL U.S.A. An authentication bypass vulnerability exists in Dell Networking OS10 version with Smart Fabric services enabled by October 2021. An unauthenticated, remote attacker could exploit the vulnerability to gain...

Huawei product memory leak vulnerability

Huawei CloudEngine is a data center switch from Huawei, a Chinese company. Huawei products are vulnerable to a memory leak that could be exploited by an attacker to cause a memory exhaustion...

Huawei CloudEngine 安全漏洞

Huawei CloudEngine is a data center switch from Huawei, a Chinese company. Huawei products are vulnerable to a memory leak that could be exploited by an attacker to cause a memory exhaustion...

CVE-2021-44527

A vulnerability found in UniFi Switch firmware Version 5.43.35 and earlier allows a malicious actor who has already gained access to the network to perform a Deny of Service DoS attack on the affected switch.This vulnerability is fixed in UniFi Switch firmware 5.76.6 and later...

CVE-2021-44527

A vulnerability found in UniFi Switch firmware Version 5.43.35 and earlier allows a malicious actor who has already gained access to the network to perform a Deny of Service DoS attack on the affected switch.This vulnerability is fixed in UniFi Switch firmware 5.76.6 and later...

CVE-2021-44527

A vulnerability found in UniFi Switch firmware Version 5.43.35 and earlier allows a malicious actor who has already gained access to the network to perform a Deny of Service DoS attack on the affected switch.This vulnerability is fixed in UniFi Switch firmware 5.76.6 and later...

Design/Logic Flaw

A vulnerability found in UniFi Switch firmware Version 5.43.35 and earlier allows a malicious actor who has already gained access to the network to perform a Deny of Service DoS attack on the affected switch.This vulnerability is fixed in UniFi Switch firmware 5.76.6 and later...

CVE-2021-44527

A vulnerability found in UniFi Switch firmware Version 5.43.35 and earlier allows a malicious actor who has already gained access to the network to perform a Deny of Service DoS attack on the affected switch.This vulnerability is fixed in UniFi Switch firmware 5.76.6 and later...

CVE-2021-44527

CVE-2021-44527 affects UniFi Switch firmware versions 5.43.35 and earlier, enabling a network-armed attacker who already has access to trigger a Denial of Service on the affected switch. The issue is resolved in UniFi Switch firmware 5.76.6 and later. The available documents describe the vulnerab...

UniFi Switch 资源管理错误漏洞

The Ubiquiti UniFi Switch is a switch from Ubiquiti USA. The UniFi Switch suffers from a resource management error vulnerability that originates from a malicious actor who has gained network access to perform a denial of service DoS attack against the affected switch...

The vulnerability of Cisco Small Business 220 Series Smart Switch microprogramming software lies in the lack of protection for service data. This allows a hacker to gain access to confidential login credentials or alter user passwords within the user account.

The vulnerability of the microprogrammed software of Cisco Small Business 220 Series Smart Switches lies in the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to gain access to login credentials or reconfigure passwords in the user account...

Vulnerabilities remedied in Dell PowerEdge VRTX and X-Series firmware

Dell has fixed vulnerabilities in VRTX switch module firmware. By exploiting these vulnerabilities, an unauthenticated malicious person remotely retrieve another user's login credentials retrieve another user's login credentials and thereby gain elevated privileges. It is also it is possible to...

In libexpat before 2.2.8 crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.

...

firefly-iii 跨站请求伪造漏洞

firefly-iii is a free and open source personal finance manager. firefly-iii suffers from a cross-site request forgery vulnerability, which can be exploited by attackers via /transactions/link/switch/id...

PT-2021-17907 · Xen +1 · Xen +1

Name of the Vulnerable Software and Affected Versions: Xen versions prior to 4.14 Description: The issue arises when grant table v2 status pages are de-allocated as a guest switches back from v2 to v1, potentially allowing a guest to retain access to a page that was freed and perhaps re-used for...

GSD-2021-1002276 cfg80211: call cfg80211_stop_ap when switch from P2P_GO type

cfg80211: call cfg80211stopap when switch from P2PGO type This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.82 by commit...