FreeBSD : FreeBSD -- jail_remove(2) fails to kill all jailed processes (31ad2f10-7711-11eb-b87a-901b0ef719ab)

Due to a race condition in the jailremove2 implementation, it may fail to kill some of the processes. Impact : A process running inside a jail can avoid being killed during jail termination. If a jail is subsequently started with the same root path, a lingering jailed process may be able to explo...

Session Invalidation Failure

telegram has session invalidation failure. The Terminate Session feature in the Telegram application fails to invalidate a recently active session...

FreeBSD -- jail_remove(2) fails to kill all jailed processes

Problem Description: Due to a race condition in the jailremove2 implementation, it may fail to kill some of the processes. Impact: A process running inside a jail can avoid being killed during jail termination. If a jail is subsequently started with the same root path, a lingering jailed process...

The vulnerability in the function of epan/dissectors/packet-tcp.c in the Wireshark software allows a hacker to cause an unexpected termination of the application.

The vulnerability in the epan/dissectors/packet-tcp.c part of the Wireshark software relates to the lack of integrity checks. Exploiting this vulnerability can allow a remote attacker to cause the application to terminate abnormally...

CVE-2021-27351

The Terminate Session feature in the Telegram application through 7.2.1 for Android, and through 2.4.7 for Windows and UNIX, fails to invalidate a recently active session...

CVE-2021-26712

Incorrect access controls in ressrtp.c in Sangoma Asterisk 13.38.1, 16.16.0, 17.9.1, and 18.2.0 and Certified Asterisk 16.8-cert5 allow a remote unauthenticated attacker to prematurely terminate secure calls by replaying SRTP packets...

CVE-2021-26712

Incorrect access controls in ressrtp.c in Sangoma Asterisk 13.38.1, 16.16.0, 17.9.1, and 18.2.0 and Certified Asterisk 16.8-cert5 allow a remote unauthenticated attacker to prematurely terminate secure calls by replaying SRTP packets...

PT-2021-2300 · Adobe · Magento

Name of the Vulnerable Software and Affected Versions: Magento versions 2.4.1 and earlier Magento versions 2.4.0-p1 and earlier Magento versions 2.3.6 and earlier Description: The issue is related to the lack of automatic termination of all sessions after a password change, which could allow a...

openSUSE Security Update : openssh (openSUSE-2020-2298)

This update for openssh fixes the following issues : - CVE-2020-14145: Fixed a potential information leak during host key exchange bsc1173513. - Supplement libgtk-3-0 instead of libX11-6 to avoid installation on a textmode install bsc1142000 - Fixed an issue where oracle cluster with cluvfy using...

Apple macOS buffer overflow vulnerability (CNVD-2021-30566)

Apple macOS is a specialized operating system developed by Apple for Mac computers. A buffer overflow vulnerability exists in Apple macOS, which can be exploited by an attacker to cause an unexpected system termination or corruption of kernel memory...

UBUNTU-CVE-2020-36329

A flaw was found in libwebp in versions before 1.0.1. A use-after-free was found due to a thread being killed too early. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

Code injection

An attacker can craft and send an OpenNamespace message to port 4241 with valid session-id that triggers an unhandled exception in CFTLDManager::HandleRequest function in RnaDaSvr.dll, resulting in process termination. Observed in FactoryTalk Linx 6.11. All versions of FactoryTalk Linx are affect...

CVE-2020-5801

An attacker can craft and send an OpenNamespace message to port 4241 with valid session-id that triggers an unhandled exception in CFTLDManager::HandleRequest function in RnaDaSvr.dll, resulting in process termination. Observed in FactoryTalk Linx 6.11. All versions of FactoryTalk Linx are affect...

CVE-2020-5802

An attacker-controlled memory allocation size can be passed to the C++ new operator in RnaDaSvr.dll by sending a specially crafted ConfigureItems message to TCP port 4241. This will cause an unhandled exception, resulting in termination of RSLinxNG.exe. Observed in FactoryTalk 6.11. All versions ...

The vulnerability of the Junos operating system’s kernel allows a attacker to trigger an emergency shutdown of the application.

The vulnerability of the Junos operating system’s kernel is related to the improper release of memory before deleting the last reference. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause an unexpected termination of the application...

Security update for openssh (moderate)

openSUSE Security Update: Security update for openssh Announcement ID: openSUSE-SU-2020:2298-1 Rating: moderate References: 1115550 1139398 1142000 1148566 1173513 1174162 Cross-References: CVE-2020-14145 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability and has 5 fixe...

SUSE SLED15 / SLES15 Security Update : openssh (SUSE-SU-2020:3866-1)

This update for openssh fixes the following issues : CVE-2020-14145: Fixed a potential information leak during host key exchange bsc1173513. Supplement libgtk-3-0 instead of libX11-6 to avoid installation on a textmode install bsc1142000 Fixed an issue where oracle cluster with cluvfy using 'scp'...

Collaborative innovation on display in Microsoft’s insider risk management strategy

The disrupted work environment, in which enterprises were forced to find new ways to enable their workforce to work remotely, changed the landscape for operations as well as security. One of the top areas of concern is managing insider risks, a complex undertaking even before the pandemic, and ev...

SUSE-SU-2020:3866-1 Security update for openssh

This update for openssh fixes the following issues: - CVE-2020-14145: Fixed a potential information leak during host key exchange bsc1173513. - Supplement libgtk-3-0 instead of libX11-6 to avoid installation on a textmode install bsc1142000 - Fixed an issue where oracle cluster with cluvfy using...

Apple macOS 缓冲区错误漏洞

Apple macOS is a specialized operating system developed by Apple for Mac computers. A buffer overflow vulnerability exists in Apple macOS, which can be exploited by an attacker to cause an unexpected system termination or corruption of kernel memory...