ViaBTC Exchange Server Integer Overflow Vulnerability (CNVD-2018-20071)

ViaBTC Exchange Server is a dedicated backend engine for cryptocurrency trading. An integer overflow vulnerability exists in the utils/utwssvr.c file in versions of ViaBTC Exchange Server prior to 2018-08-21. An attacker could exploit this vulnerability to cause memory corruption...

EulerOS 2.0 SP2 : yum-utils (EulerOS-SA-2018-1319)

According to the version of the yum-utils packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - yum-utils: reposync: improper path validation may lead to directory traversal CVE-2018-10897 Note that Tenable Network Security has extracted th...

EulerOS 2.0 SP3 : yum-utils (EulerOS-SA-2018-1320)

According to the version of the yum-utils packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - yum-utils: reposync: improper path validation may lead to directory traversal CVE-2018-10897 Note that Tenable Network Security has extracted th...

CVE-2018-17570

utils/utwssvr.c in ViaBTC Exchange Server before 2018-08-21 has an integer overflow leading to memory corruption...

CVE-2018-17568

utils/utrpc.c in ViaBTC Exchange Server before 2018-08-21 has an integer overflow leading to memory corruption...

Security Bulletin: A vulnerability in yum-utils affects PowerKVM

Summary PowerKVM is affected by a vulnerability in yum-utils. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2018-10897 DESCRIPTION: reposync could allow a remote attacker to traverse directories on the system, caused by the improper sanitation of paths in remote...

CVE-2018-17568: Integer Overflow or Wraparound

utils/utrpc.c in ViaBTC Exchange Server before 2018-08-21 has an integer overflow leading to memory corruption...

PT-2018-14059

Name of the Vulnerable Software and Affected Versions ViaBTC Exchange Server versions prior to 2018-08-21 Description The issue is related to an integer overflow in the utils/ut rpc.c file, which can lead to memory corruption. Recommendations For versions prior to 2018-08-21, update to a version...

CVE-2018-17570: Integer Overflow or Wraparound

utils/utwssvr.c in ViaBTC Exchange Server before 2018-08-21 has an integer overflow leading to memory corruption...

PT-2018-14062

Name of the Vulnerable Software and Affected Versions ViaBTC Exchange Server versions prior to 2018-08-21 Description The issue is related to an integer overflow in the utils/ut ws svr.c file, which can lead to memory corruption. Recommendations For versions prior to 2018-08-21, update to a versi...

Important: Red Hat Security Advisory: Red Hat Virtualization security, bug fix, and enhancement update

An update for redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Remote Code Execution

Overview react-dev-utils on Windows is vulnerable to remote code execution. Recommendation Update to one of the follow versions, depending on the release line that you are using. - 1.0.4 - 2.0.2 - 3.1.2 - 4.2.2 - 5.0.2 - 6.0.0-next.a671462c References -...

Amazon Linux 2 : yum-utils (ALAS-2018-1063)

A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repository configuration files. If an attacker controls a repository, they may be able to copy files outside of the destination directory on the targeted system via path...

Important: yum-utils

Issue Overview: A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repository configuration files. If an attacker controls a repository, they may be able to copy files outside of the destination directory on the targeted system...

CentOS 6 : yum-utils (CESA-2018:2284)

An update for yum-utils is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Amazon Linux AMI : yum-utils (ALAS-2018-1057)

A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repository configuration files. If an attacker controls a repository, they may be able to copy files outside of the destination directory on the targeted system via path...

CentOS 7 : yum-utils (CESA-2018:2285)

An update for yum-utils is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

yum security update

CentOS Errata and Security Advisory CESA-2018:2285 An update for yum-utils is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...

Important: yum-utils

Issue Overview: A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repository configuration files. If an attacker controls a repository, they may be able to copy files outside of the destination directory on the targeted system...

Scientific Linux Security Update : yum-utils on SL7.x (noarch) (20180730)

Security Fixes : - yum-utils: reposync: improper path validation may lead to directory traversal CVE-2018-10897 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid111497; scriptversion"1.5";...