[SECURITY] Fedora 29 Update: ming-0.4.9-0.1.20181112git5009802.fc29

Ming is a library for generating Macromedia Flash files .swf, written in C, and includes useful utilities for working with .swf files...

Unspecified Vulnerability in GNU Binutils (CNVD-2019-22416)

GNU Binutils GNU Binary Utilities or binutils is a set of programming language utility programs developed by the GNU Project. The programs are primarily designed to work with target files in a variety of formats, and provide connectors, assemblers, and other tools for target files and archives.Th...

[SECURITY] Fedora 29 Update: elfutils-0.176-1.fc29

Elfutils is a collection of utilities, including stack to show backtraces, nm for listing symbols from object files, size for listing the section sizes of an object or archive file, strip for discarding symbols, readelf to see the raw ELF file structures, elflint to check for well-formed ELF file...

[SECURITY] Fedora 28 Update: ghostscript-9.26-1.fc28

This package provides useful conversion utilities based on Ghostscript soft ware, for converting PS, PDF and other document formats between each other. Ghostscript is a suite of software providing an interpreter for Adobe Syste ms' PostScript PS and Portable Document Format PDF page description...

This Week in Security News: Cloud Risks and Container Vulnerability

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn about this year’s current uses and emerging risks of the cloud. Also, find out what new vulnerability was found in containers. Read on...

The vulnerability of the read_reloc function in the GNU Binutils development environment allows a hacker to trigger a service failure.

The vulnerability of the readreloc function in the reloc.c programming tool of the GNU Binutils is related to memory addressing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the bfd_elf32_swap_phdr_in function in the GNU Binutils development environment allows a attacker to trigger a service failure.

The vulnerability of the bfdelf32swapphdrin function in the GNU Binutils development toolset is related to buffer overflows due to the lack of restrictions on the number of headers. Exploiting this vulnerability could allow an attacker to cause a service failure...

[SECURITY] Fedora 29 Update: ghostscript-9.26-1.fc29

This package provides useful conversion utilities based on Ghostscript soft ware, for converting PS, PDF and other document formats between each other. Ghostscript is a suite of software providing an interpreter for Adobe Syste ms' PostScript PS and Portable Document Format PDF page description...

[SECURITY] Fedora 29 Update: binutils-2.31.1-17.fc29

Binutils is a collection of binary utilities, including ar for creating, modifying and extracting from archives, as a family of GNU assemblers, gprof for displaying call graph profile data, ld the GNU linker, nm for listing symbols from object files, objcopy for copying and translating object...

Chafer APT Takes Aim at Diplomats in Iran with Improved Custom Malware

UPDATE An Iran-linked APT known as Chafer has been spotted targeting various entities based in Iran with an enhanced version of a custom malware that takes a very unique approach to communication by using the Microsoft Background Intelligent Transfer Service BITS mechanism over HTTP. Meanwhile th...

UPDATE: Buscador Version 2.0

PenTestIT RSS Feed I briefly mentioned about Buscador in my previous post titled - List of Operating Systems for OSINT Open-Source Intelligence. A few days ago, an updated - Buscador Version 2.0 was made available by the author. This post is about the changes made in the latest version. What is...

The vulnerability of the file2strvec function in the command-line utilities of procps-ng allows a attacker to escalate their privileges and execute arbitrary code.

The vulnerability of the file2strvec function in the procps-ng command-line utilities is related to integer overflow. Exploiting this vulnerability allows a remote attacker to escalate privileges and execute arbitrary code...

GNU Binutils Buffer Overflow Vulnerability (CNVD-2019-01856)

GNU Binutils also known as GNU Binary Utilities or binutils is a group of programming language utility programs developed by the GNU Project to work with target files in a variety of formats, with connectors, assemblers, and other tools for target files and archives.GNU libiberty is one of the GN...

DEBIAN-CVE-2018-20671

loadspecificdebugsection in objdump.c in GNU Binutils through 2.31.1 contains an integer overflow vulnerability that can trigger a heap-based buffer overflow via a crafted section size...

GNU Binutils Memory Leak Vulnerability (CNVD-2019-00955)

GNU Binutils also known as GNU Binary Utilities or binutils is a group of programming language utility programs developed by the GNU Project to work with target files in a variety of formats, with connectors, assemblers, and other tools for target files and archives.GNU libiberty is one of the GN...

CVE-2018-20230

An issue was discovered in PSPP 1.2.0. There is a heap-based buffer overflow at the function readbytesinternal in utilities/pspp-dump-sav.c, which allows attackers to cause a denial of service application crash or possibly have unspecified other impact...

CVE-2018-20230: Out-of-bounds Write

An issue was discovered in PSPP 1.2.0. There is a heap-based buffer overflow at the function readbytesinternal in utilities/pspp-dump-sav.c, which allows attackers to cause a denial of service application crash or possibly have unspecified other impact...

[SECURITY] Fedora 29 Update: net-snmp-5.8-3.fc29

SNMP Simple Network Management Protocol is a protocol used for network management. The NET-SNMP project includes various SNMP tools: an extensible agent, an SNMP library, tools for requesting or setting information from SNMP agents, tools for generating and handling SNMP traps, a version of the...

Russian Hackers Haven't Stopped Probing the US Power Grid

Researchers warn that utilities hackers don't need to cause blackouts to do damage...

SUSE SLED12 / SLES12 Security Update : procps (SUSE-SU-2018:2451-2)

This update for procps fixes the following security issues : CVE-2018-1122: Prevent local privilege escalation in top. If a user ran top with HOME unset in an attacker-controlled directory, the attacker could have achieved privilege escalation by exploiting one of several vulnerabilities in the...