SUSE SLED12 / SLES12 Security Update : systemd (SUSE-SU-2020:0331-1)

This update for systemd fixes the following issues : CVE-2020-1712 bscbsc1162108 Fix a heap use-after-free vulnerability, when asynchronous Polkit queries were performed while handling Dbus messages. A local unprivileged attacker could have abused this flaw to crash systemd services or potentiall...

SUSE SLES15 Security Update : rmt-server (SUSE-SU-2020:0278-1)

This update for rmt-server to version 2.5.2 fixes the following issues : Security issue fixed : CVE-2019-18904: Fixed a denial of service in the offline migration bsc1160922. Non-security issue fixed : Relaxed systemd units dependencies bsc1160673 Added more verbose error reporting for SCC API...

SUSE SLES15 Security Update : rmt-server (SUSE-SU-2020:0260-1)

This update for rmt-server to version 2.5.2 fixes the following issues : Security issue fixed : CVE-2019-18904: Fixed a denial of service in the offline migration bsc1160922. Non-security issue fixed : Relaxed systemd units dependencies bsc1160673 Added more verbose error reporting for SCC API...

SUSE-SU-2020:0260-1 Security update for rmt-server

This update for rmt-server to version 2.5.2 fixes the following issues: Security issue fixed: - CVE-2019-18904: Fixed a denial of service in the offline migration bsc1160922. Non-security issue fixed: - Relaxed systemd units dependencies bsc1160673 - Added more verbose error reporting for SCC API...

CVE-2020-7053

In the Linux kernel 4.14 longterm through 4.14.165 and 4.19 longterm through 4.19.96 and 5.x before 5.2, there is a use-after-free write in the i915ppgttclose function in drivers/gpu/drm/i915/i915gemgtt.c, aka CID-7dc40713618c. This is related to i915gemcontextdestroyioctl in...

Carel pCOWeb HVAC Insecure Credential Storage

Advisory: Unsafe Storage of Credentials in Carel pCOWeb HVAC The Carel pCOWeb card stores password hashes in the file "/etc/passwd", allowing privilege escalation by authenticated users. Additionally, plaintext copies of the passwords are stored. Details ======= Product: HVAC units using the OEM...

Amazon Linux 2 : libvirt (ALAS-2019-1274) (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)

Uncacheable memory on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. CVE-2019-11091 Modern Intel microprocessors implement hardware-level micro-optimizations to improve the...

How to get the Organization Units (OU) and Hosts from Microsoft Active Directory using Python ldap3

I recently figured out how to work with Microsoft Active Directory using Python 3. I wanted to get a hierarchy of Organizational Units OUs and all the network hosts associated with these OUs to search for possible anomalies. If you are not familiar with AD, here is a good thread about the...

Cisco IOS XR Software Intermediate System-to-Intermediate System Denial of Service Vulnerability

A vulnerability in the implementation of Intermediate System–to–Intermediate System IS–IS routing protocol functionality in Cisco IOS XR Software could allow an unauthenticated attacker who is in the same IS-IS area to cause a denial of service DoS condition. The vulnerability is due to incorrect...

PT-2019-3069 · Cisco · Cisco Ios Xr

Name of the Vulnerable Software and Affected Versions: Cisco IOS XR Software versions prior to Release 6.6.3 Description: A vulnerability in the implementation of the Intermediate System-to-Intermediate System IS-IS routing protocol functionality could allow an unauthenticated attacker who is in...

PT-2019-4073 · Linux +9 · Linux +9

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Intel CPUs affected versions not specified AMD CPUs affected versions not specified ARM CPUs affected versions not specified Linux affected versions not specified Description: An information disclosure...

CVE-2019-10132

CVE-2019-10132 affects libvirt 4.1.0 and later, specifically the virtlockd-admin.socket and virtlogd-admin.socket systemd units. A missing SocketMode configuration parameter allows any host user to connect via virtlockd-admin-sock or virtlogd-admin-sock and perform administrative tasks on the vir...

CVE-2019-10132

A vulnerability was found in libvirt = 4.1.0 in the virtlockd-admin.socket and virtlogd-admin.socket systemd units. A missing SocketMode configuration parameter allows any user on the host to connect using virtlockd-admin-sock or virtlogd-admin-sock and perform administrative tasks against the...

hardware: Microarchitectural Data Sampling Uncacheable Memory (MDSUM)

Uncacheable memory on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access...

Buffer Overflow Vulnerability in Multiple Qualcomm Products (CNVD-2019-13770)

The Qualcomm MDM9650 and others are a central processing unit CPU product of Qualcomm Incorporated USA. The buffer overflow vulnerability exists in multiple Qualcomm products and originates when a networked system or product performs an operation in memory without properly validating the data...

Schweitzer Engineering Laboratories Communications Processor Communications Processor Detection

Binary data 755331.prm...

Omron CJ1W-PH41U Position Controller Detection

Binary data 755981.prm...

The vulnerability in the implementation of SMS processing functions in Cisco IOS and Cisco IOS XE operating systems allows a hacker to induce a service failure.

The vulnerability of the SMS processing function in Cisco IOS and Cisco IOS XE operating systems exists due to errors in the processing of SMS Protocol Data Units PDUs, which are encoded using a specific set of symbols. Exploiting this vulnerability can allow an attacker to cause service failures...

CVE-2019-1747

A vulnerability in the implementation of the Short Message Service SMS handling functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a denial of service DoS condition on an affected device. The vulnerability is due to improper...

CVE-2019-1747

CVE-2019-1747 affects Cisco IOS and IOS XE SMS handling. The issue arises from improper processing of SMS PDUs encoded with a special character set, enabling an unauthenticated, remote attacker to trigger a denial-of-service on affected devices. Exploitation would crash the wireless WAN (WWAN) ce...