5655 matches found
Intel (Skylake Kaby Lake) - PortSmash CPU SMT Side-Channel
Intel Skylake Kaby Lake - PortSmash CPU SMT Side-Channel Summary This is a proof-of-concept exploit of the PortSmash microarchitecture attack, tracked by CVE-2018-5407. Setup Prerequisites A CPU featuring SMT e.g. Hyper-Threading is the only requirement. This exploit code should work out of the b...
Yi Technology Home Camera 27US TimeSync Code Execution Vulnerability
Summary An exploitable firmware downgrade vulnerability exists in the time syncing functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted packet can cause a buffer overflow, resulting in code execution. An attacker can intercept and alter network traffic to trigger this vulnerability...
SUSE-SU-2018:3467-1 Security update for smt
SMT was updated to version 3.0.38. Following security issue was fixed: - CVE-2018-12472: Harden hostname check during sibling check by forcing double reverse lookup bsc1104076 Following non security issues were fixed: - Add migration path check when registration sharing is enabled - Fix sibling...
Voice of the Customer: Walmart embraces the cloud with Azure Active Directory
Todays post was written by Sue Bohn, partner director of Program Management and Ben Byford and Gerald Corson, senior directors of Identity and Access Management at Walmart. Greetings! Im Sue Bohn, partner director of Program Management at Microsoft. Im an insatiable, lifelong learner and I lead t...
CVE-2018-0473
A vulnerability in the Precision Time Protocol PTP subsystem of Cisco IOS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition of the Precision Time Protocol. The vulnerability is due to insufficient processing of PTP packets. An attacker could explo...
Design/Logic Flaw
A vulnerability in the Precision Time Protocol PTP subsystem of Cisco IOS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition of the Precision Time Protocol. The vulnerability is due to insufficient processing of PTP packets. An attacker could explo...
CVE-2018-0473 Cisco IOS Software Precision Time Protocol Denial of Service Vulnerability
A vulnerability in the Precision Time Protocol PTP subsystem of Cisco IOS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition of the Precision Time Protocol. The vulnerability is due to insufficient processing of PTP packets. An attacker could explo...
CVE-2018-17972: Concurrent Execution using Shared Resource with Improper Synchronization
An issue was discovered in the procpidstack function in fs/proc/base.c in the Linux kernel through 4.18.11. It does not ensure that only root may inspect the kernel stack of an arbitrary task, allowing a local attacker to exploit racy stack unwinding and leak kernel task stack contents...
CVE-2018-9069: Concurrent Execution using Shared Resource with Improper Synchronization
In some Lenovo IdeaPad consumer notebook models, a race condition in the BIOS flash device locking mechanism is not adequately protected against, potentially allowing an attacker with administrator access to alter the contents of BIOS...
[SECURITY] Fedora 27 Update: ntp-4.2.8p12-1.fc27
The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package includes ntpd a daemon which continuously adjusts system time and utilities used to query and configure the ntpd daemon. Perl scripts are in the ntp-perl package, ntpdate is in...
Cisco IOS Software Precision Time Protocol Denial of Service Vulnerability
A vulnerability in the Precision Time Protocol PTP subsystem of Cisco IOS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition of the Precision Time Protocol. The vulnerability is due to insufficient processing of PTP packets. An attacker could explo...
Cloudflare Embraces Google Roughtime, Giving Internet Security a Boost
Syncing clocks online is vital to web security...
[SECURITY] Fedora 29 Update: nspr-4.20.0-1.fc29
NSPR provides platform independence for non-GUI operating system facilities. These facilities include threads, thread synchronization, normal file and network I/O, interval timing and calendar time, basic memory management malloc and free and shared library linking...
CVE-2017-18302: Concurrent Execution using Shared Resource with Improper Synchronization
In Snapdragon Automobile ,Mobile in version MSM8996AU, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, SnapdragonHighMed2016, a crafted HLOS client can modify the structure in memory passed to a QSEE...
September 20, 2018âKB4457133 (Preview of Monthly Rollup)
None None...
Error : "An error occurred while building your environment...". Synchronization State of WEM Agents Has a Red "X"
After upgrading WEM from 4.2 to 4.4, WEM agents are failing to connect to the WEM server with the following error: "An error occurred while building your environment. Agent processing will now stop. Please contact your Administrator." Issue only occurs when connections are going through Load...
CVE-2018-11827
In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, improper validation of array index in WMA roam synchronization handler can lead to OOB write...
CVE-2018-11827: Improper Validation of Array Index
In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, improper validation of array index in WMA roam synchronization handler can lead to OOB write...
CVE-2018-16976: Concurrent Execution using Shared Resource with Improper Synchronization
Gitolite before 3.6.9 does not in certain configurations involving @all or a regex properly restrict access to a Git repository that is in the process of being migrated until the full set of migration steps has been completed. This can allow valid users to obtain unintended access...
Citrix Policy - Does applying same policies on different priorities append the policy settings?
Question : Citrix Policy - Does applying same policies on different priorities append the policy settings? Answer : No, applying same policy however different settings in them will not append it, however, it will replace the policy altogether. An example: We have defined the following policy twic...