CVE-2019-17348

CVE-2019-17348 affects the Xen hypervisor (up to 4.11.x) and is triggered on x86 PV guests. The root cause is an incompatibility between Process Context Identifiers (PCID) and shadow-pagetable switching, allowing a local x86 PV guest to cause a Denial of Service or potentially gain privileges. Pu...

The vulnerability of the performance optimization function in Lazy FPU context switching of Intel Core processors lies in the lack of protection for service data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the performance optimization function in Lazy FPU context switching of Intel Core processors is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the MPLS OAM service implementation in the Cisco IOS XR operating system allows a attacker to cause a service failure.

The vulnerability of the MPLS OAM service implementation in the Cisco IOS XR operating system exists due to insufficient verification of input data. Exploiting this vulnerability can allow attackers to cause service failures by sending specially crafted MPLS OAM packets...

CVE-2019-1846

A vulnerability in the Multiprotocol Label Switching MPLS Operations, Administration, and Maintenance OAM implementation of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers could allow an unauthenticated, adjacent attacker to trigger a denial of service DoS condition o...

Design/Logic Flaw

A vulnerability in the Multiprotocol Label Switching MPLS Operations, Administration, and Maintenance OAM implementation of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers could allow an unauthenticated, adjacent attacker to trigger a denial of service DoS condition o...

DEBIAN-CVE-2019-10050

A buffer over-read issue was discovered in Suricata 4.1.x before 4.1.4. If the input of the decode-mpls.c function DecodeMPLS is composed only of a packet of source address and destination address plus the correct type field and the right number for shim, an attacker can manipulate the control...

Mitsubishi QD75P1N Position Controller Detection

Binary data 754897.prm...

Mitsubishi QD75D4N Position Controller Detection

Binary data 754893.prm...

Mitsubishi QD75D2N Position Controller Detection

Binary data 754892.prm...

CVE-2019-0043

In MPLS environments, receipt of a specific SNMP packet may cause the routing protocol daemon RPD process to crash and restart. By continuously sending a specially crafted SNMP packet, an attacker can repetitively crash the RPD process causing prolonged denial of service. No other Juniper Network...

CVE-2019-1750

A vulnerability in the Easy Virtual Switching System VSS of Cisco IOS XE Software on Catalyst 4500 Series Switches could allow an unauthenticated, adjacent attacker to cause the switches to reload. The vulnerability is due to incomplete error handling when processing Cisco Discovery Protocol CDP...

Race condition

A vulnerability in the Easy Virtual Switching System VSS of Cisco IOS XE Software on Catalyst 4500 Series Switches could allow an unauthenticated, adjacent attacker to cause the switches to reload. The vulnerability is due to incomplete error handling when processing Cisco Discovery Protocol CDP...

Cisco IOS XE Catalyst 4500 Denial of Service Vulnerability

Cisco IOS XE is a modular operating system based on the Linux kernel. A denial of service vulnerability exists in the Simple Virtual Switching System VSS of the Cisco IOS XE software on Catalyst 4500 series switches, which stems from a failure to perform a complete processing error when handling...

CVE-2019-1750 Cisco IOS XE Software Catalyst 4500 Cisco Discovery Protocol Denial of Service Vulnerability

A vulnerability in the Easy Virtual Switching System VSS of Cisco IOS XE Software on Catalyst 4500 Series Switches could allow an unauthenticated, adjacent attacker to cause the switches to reload. The vulnerability is due to incomplete error handling when processing Cisco Discovery Protocol CDP...

CVE-2019-1750 Cisco IOS XE Software Catalyst 4500 Cisco Discovery Protocol Denial of Service Vulnerability

A vulnerability in the Easy Virtual Switching System VSS of Cisco IOS XE Software on Catalyst 4500 Series Switches could allow an unauthenticated, adjacent attacker to cause the switches to reload. The vulnerability is due to incomplete error handling when processing Cisco Discovery Protocol CDP...

Cisco IOS XE Software Catalyst 4500 Cisco Discovery Protocol Denial of Service Vulnerability

A vulnerability in the Easy Virtual Switching System VSS of Cisco IOS XE Software on Catalyst 4500 Series Switches could allow an unauthenticated, adjacent attacker to cause the switches to reload. The vulnerability is due to incomplete error handling when processing Cisco Discovery Protocol CDP...

[SECURITY] Fedora 29 Update: gdm-3.30.3-1.fc29

GDM, the GNOME Display Manager, handles authentication-related backend functionality for logging in a user and unlocking the user's session after it's been locked. GDM also provides functionality for initiating user-switc hing, so more than one user can be logged in at the same time. It handles...

The vulnerability of the Lazy FPU context switching function in Intel processors allows a hacker to gain access to protected information.

The vulnerability of the Lazy FPU context switching function in Intel processors is related to insufficient protection of data in the FPU registers of the processor. Exploiting this vulnerability can allow an attacker to access protected information...

Fedora 28 : xen (2018-d3cb6f113c)

Speculative register leakage from lazy FPU context switching XSA-267, CVE-2018-3665 fix for change in iasl output Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and forma...

Keybase: Local privilege escalation bug using Keybase redirector on macOS

There's a local privilege escalation bug in the latest version of Keybase for macOS. The issue is in the process of launching keybase-redirector. The process works as follows: 1. Copy keybase-redirector binary to a root-only location 2. Check its signature 3. Launch the binary Code ref. Note the...