openSUSE: Security Advisory for dropbear (openSUSE-SU-2016:1891-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : dropbear (openSUSE-2016-918)

This update for dropbear fixes four security issues bnc990363 : - A format string injection vulnerability allowed remotes attacker to run arbitrary code as root if specific usernames including '%' symbols could be created on the target system. If a dbclient user can control usernames or host...

openSUSE Security Update : dropbear (openSUSE-2016-912)

This update for dropbear fixes four security issues bnc990363 : - A format string injection vulnerability allowed remotes attacker to run arbitrary code as root if specific usernames including '%' symbols could be created on the target system. If a dbclient user can control usernames or host...

Syslog Server 'npriority' Field Remote Denial of Service Vulnerability

Syslog Server is a syslog server for Windows. A security vulnerability exists in syslog Server's failure to handle the contents of the npriority field. Allowing an attacker to pass constructed packets could cause the server to crash...

Syslog Server 1.2.3 Denial Of Service

Title: Syslog Server "npriority" field remote Denial of Service vulnerability Software : Syslog Server Software Version : Syslog Server 1.2.3 Vendor: https://sourceforge.net/p/syslog-server/ Vulnerability Published : 2016-07-02 Vulnerability Update Time : Status : Impact : MediumCVSS2 Base : 5.0,...

Cisco IOS-XE Fragmented Packet Resource Consumption Vulnerability

A vulnerability in the packet reassembly subsystem of Cisco IOS-XE could allow an unauthenticated, remote attacker to consume CPU resources which may lead to a denial of service DoS condition. The vulnerability is due to an error message that is triggered to the console and the syslog when a...

PT-2016-7957

Name of the Vulnerable Software and Affected Versions vtun versions prior to 3.0.3 Description A vulnerability was found in the vtun package. When a SIGHUP is sent to a vtun client process and it cannot connect to the remote server, vtun attempts to reconnect without a sleep period between each...

openSUSE Security Update : apparmor (openSUSE-2016-491)

This update for apparmor updates some profiles. It is specifically required for the Samba security update. profile updates : - sbin.syslog-ng - usr.sbin.identd - usr.sbin.nscd allows nscd paranoia mode - usr.sbin.smbd - usr.sbin.smbldap-useradd - apache2.d/phpsysinfo updated abstractions : - aspe...

Syslog Detection (TCP)

Binary data 3987.prm...

Device / Application Detection via Syslog

Binary data 7187.pasl...

Syslog Detection (UDP)

Binary data 3986.prm...

Deluge of Apple Patches Fix Vulnerabilities in OS X, iOS, Safari, and More

In addition to fixing the serious crypto vulnerabilities in iMessage that surfaced yesterday, Apple also deployed patches for nearly all of its products, including Safari, OS X, iOS, Apple TV’s tvOS, and watchOS. The iOS update, 9.3, is arguably the most pressing given the cryptographic issue dug...

The vulnerabilities in operating systems such as Mac OS X and iOS allow attackers to trigger service failures or increase their privileges.

The vulnerability of the syslog component in operating systems such as Mac OS X and iOS arises due to buffer overflow. Exploiting this vulnerability can allow an attacker to increase their privileges or cause a service failure memory corruption...

CVE-2016-1722

syslog in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors...

CVE-2016-1722

CVE-2016-1722 is a memory-corruption vulnerability in Apple’s syslog subsystem affecting iOS <9.2.1, OS X <10.11.3, and tvOS

PT-2016-1190

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.2.1 Apple OS X versions prior to 10.11.3 Apple tvOS versions prior to 9.1.1 Description The issue is related to the syslog component in the affected operating systems, caused by a buffer overflow. This can be...

CVE-2016-1722: Improper Restriction of Operations within the Bounds of a Memory Buffer

syslog in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors...

About the security content of tvOS 9.1.1 - Apple Support

For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To learn more about Apple Product Security, see the Apple Product Security website. For information about...

About the security content of tvOS 9.1.1

About the security content of tvOS 9.1.1 This document describes the security content of tvOS 9.1.1. For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To...

Apple iOS syslog Handling Arbitrary Code Execution Vulnerability

Apple iOS is Apple's operating system for several smart devices. There is a security vulnerability in Apple iOS syslog handling that allows an attacker to gain ROOT privileges...