Security Bulletin: NVIDIA SHIELD TV – October 2018

NVIDIA has released a software security update for SHIELD TV. This update addresses issues that may lead to information disclosure or escalation of privileges. To protect your system, download and install this software update. Go to NVIDIA Product Security. Details This section summarizes the...

Important: postgresql93, postgresql94, postgresql95

Issue Overview: A vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to properly reset its internal state between connections. If an affected version of libpq were used with "host" or "hostaddr" connection parameters from untrusted input, attackers could...

2018-08 Dynamic Cumulative Update for Windows 10 Version 1803 for x86-based Systems (KB4343909)

ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...

Fresh Spectre Variants Come to Light

Two new speculative execution bugs have earned researchers a $100,000 bug bounty from Intel. MIT’s Vladimir Kiriansky and independent researcher Carl Waldspurger uncovered what they call Spectre1.1 and a subset, Spectre1.2, collectively referred to as Variant 4 of Spectre by Intel and ARM. Like t...

Security Bulletin: NVIDIA SHIELD TV Software Security Updates for Multiple Vulnerabilities

NVIDIA SHIELD TV vulnerabilities may lead to code execution, denial of service, escalation of privileges, or information disclosure Go to NVIDIA Product Security. Vulnerability Details This section summarizes the potential vulnerabilities. Descriptions use CWE™ and risk assessments follow the CVS...

Lenovo System Update Buffer Overflow Vulnerability

Lenovo System Update is a set of automatic system update tools from the Chinese company Lenovo Lenovo, which includes device driver updates, Windows system patch updates and more. A buffer overflow vulnerability exists in MapDrv C:\Program Files\Lenovo\System Update\mapdrv.exe in versions prior t...

CVE-2018-9063

MapDrv C:\Program Files\Lenovo\System Update\mapdrv.exe In Lenovo System Update versions earlier than 5.07.0072 contains a local vulnerability where an attacker entering very large user ID or password can overrun the program's buffer, causing undefined behaviors, such as execution of arbitrary...

CVE-2018-9063

MapDrv C:\Program Files\Lenovo\System Update\mapdrv.exe In Lenovo System Update versions earlier than 5.07.0072 contains a local vulnerability where an attacker entering very large user ID or password can overrun the program's buffer, causing undefined behaviors, such as execution of arbitrary...

Design/Logic Flaw

MapDrv C:\Program Files\Lenovo\System Update\mapdrv.exe In Lenovo System Update versions earlier than 5.07.0072 contains a local vulnerability where an attacker entering very large user ID or password can overrun the program's buffer, causing undefined behaviors, such as execution of arbitrary...

CVE-2018-9063

MapDrv C:\Program Files\Lenovo\System Update\mapdrv.exe In Lenovo System Update versions earlier than 5.07.0072 contains a local vulnerability where an attacker entering very large user ID or password can overrun the program's buffer, causing undefined behaviors, such as execution of arbitrary...

CVE-2018-9063

CVE-2018-9063 affects Lenovo System Update’s MapDrv (C:\Program Files\Lenovo\System Update\mapdrv.exe). Versions prior to 5.07.0072 contain a local buffer overflow by entering very large user ID or password, leading to undefined behavior and potential arbitrary code execution. The exploit is loca...

CVE-2018-9063

MapDrv C:\Program Files\Lenovo\System Update\mapdrv.exe In Lenovo System Update versions earlier than 5.07.0072 contains a local vulnerability where an attacker entering very large user ID or password can overrun the program's buffer, causing undefined behaviors, such as execution of arbitrary...

Buffer Overflow in Lenovo System Update Drive Mapping Utility - Lenovo Support US

No description provided...

[SECURITY] [DLA 1327-1] thunderbird security update

Package : thunderbird Version : 1:52.7.0-1deb7u1 CVE ID : CVE-2018-5125 CVE-2018-5127 CVE-2018-5129 CVE-2018-5144 CVE-2018-5145 CVE-2018-5146 Multiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code, denial of service or information disclosure. Fo...

Security Bulletin: NVIDIA SHIELD TV Security Updates for Multiple Vulnerabilities

NVIDIA SHIELD TV security updates for vulnerabilities that may lead to denial of service, information disclosure, or escalation of privileges Vulnerability Details The following sections summarize the potential vulnerabilities. Descriptions use CWE™ and risk assessments follow CVSS. CVE-2017-6282...

[SECURITY] [DLA 1265-1] krb5 security update

Package : krb5 Version : 1.10.1+dfsg-5+deb7u9 CVE ID : CVE-2013-1418 CVE-2014-5351 CVE-2014-5353 CVE-2014-5355 CVE-2016-3119 CVE-2016-3120 Debian Bug : 728845 762479 773226 778647 819468 832572 Kerberos, a system for authenticating users and services on a network, was affected by several...

HPSBHF03573 rev. 15 - Side-Channel Analysis Method

Potential Security Impact Elevation of Privilege/Information Disclosure Source: HP, HP Product Security Response Team PSRT Reported by: Google Project Zero VULNERABILITY SUMMARY An industry-wide vulnerability, known as side channel analysis method, has been disclosed with modern CPUs using...

Security Bulletin: NVIDIA SHIELD TV Security Updates for CPU Speculative Side Channel Vulnerabilities

NVIDIA SHIELD TV Response to CPU Speculative Side Channel Vulnerabilities - CVE-2017-5753, CVE-2017-5715, CVE-2017-5754 Bulletin Summary NVIDIA is providing an initial security update to mitigate aspects of Google Project Zero's January 3, 2018, publication of novel information disclosure attacks...

[SECURITY] [DLA 1212-1] otrs2 security update

Package : otrs2 Version : 3.3.18-1deb7u2 CVE ID : CVE-2017-15864 CVE-2017-16664 CVE-2017-16854 CVE-2017-16921 Four vulnerabilities were discovered in the Open Ticket Request System which could result in information disclosure or the execution of arbitrary shell commands by logged-in agents. For...

Design/Logic Flaw

Lenovo System Update formerly ThinkVantage System Update before 5.07.0013 allows local users to submit commands to the System Update service SUService.exe and gain privileges by launching signed Lenovo executables...