CVE-2019-11277

Cloud Foundry NFS Volume Service, 1.7.x versions prior to 1.7.11 and 2.x versions prior to 2.3.0, is vulnerable to LDAP injection. A remote authenticated malicious space developer can potentially inject LDAP filters via service instance creation, facilitating the malicious space developer to deny...

CVE-2019-11277 Volume Services is vulnerable to an LDAP injection attack

Cloud Foundry NFS Volume Service, 1.7.x versions prior to 1.7.11 and 2.x versions prior to 2.3.0, is vulnerable to LDAP injection. A remote authenticated malicious space developer can potentially inject LDAP filters via service instance creation, facilitating the malicious space developer to deny...

CVE-2019-11277

The CVE-2019-11277 entry affects Cloud Foundry NFS Volume Service: 1.7.x before 1.7.11 and 2.x before 2.3.0. The vulnerability is LDAP injection in service instance creation, exploitable by a remote authenticated space developer who can inject LDAP filters, potentially leading to service denial o...

September 23, 2019—KB4522009 (OS Build 10240.18334)

None None...

CVE-2019-11277: Volume Services is vulnerable to an LDAP injection attack | Cloud Foundry

Severity High Vendor Cloud Foundry Foundation Description Cloud Foundry NFS Volume Service, 1.7.x versions prior to 1.7.11 and 2.x versions prior to 2.3.0, is vulnerable to LDAP injection. A remote authenticated malicious space developer can potentially inject LDAP filters via service instance...

September 23, 2019—KB4522012 (OS Build 16299.1392)

None None...

September 10, 2019—KB4516055 (Monthly Rollup)

None None...

September 10, 2019—KB4516064 (Security-only update)

None None...

September 10, 2019—KB4516068 (OS Build 15063.2045)

None None...

OPENSUSE-SU-2019:2044-1 Security update for podman, slirp4netns and libcontainers-common

This is a version update for podman to version 1.4.4 bsc1143386. Additional changes by SUSE on top: - Remove fuse-overlayfs because it's currently an unsatisfied dependency on SLE bsc1143386 - Update libpod.conf to use correct infracommand - Update libpod.conf to use better versioned pause...

Security update for podman, slirp4netns and libcontainers-common (moderate)

openSUSE Security Update: Security update for podman, slirp4netns and libcontainers-common Announcement ID: openSUSE-SU-2019:2044-1 Rating: moderate References: 1096726 1123156 1123387 1135460 1136974 1137860 1143386 Cross-References: CVE-2018-15664 CVE-2019-10152 CVE-2019-6778 Affected Products:...

SUSE-SU-2019:2223-1 Security update for podman, slirp4netns and libcontainers-common

This is a version update for podman to version 1.4.4 bsc1143386. Additional changes by SUSE on top: - Remove fuse-overlayfs because it's currently an unsatisfied dependency on SLE bsc1143386 - Update libpod.conf to use correct infracommand - Update libpod.conf to use better versioned pause...

August 17, 2019—KB4517276 (OS Build 10240.18308)

None None...

August 13, 2019—KB4512507 (OS Build 15063.1988)

None None...

August 13, 2019—KB4512489 (Security-only update)

None None...

July 9, 2019—KB4507458 (OS Build 10240.18275)

None None...

Recognizing Security Researchers in 2019

Who’s going to be on the Most Valuable Security Researcher list at Black Hat USA 2019? We’re not announcing the names—yet—but this is how we’ll determine who’s there. How do we define the Most Valuable Security Researchers? The list at Black Hat will be the top tier of researchers based on not ju...

Recognizing Security Researchers in 2019

Who’s going to be on the Most Valuable Security Researcher list at Black Hat USA 2019? We’re not announcing the names—yet—but this is how we’ll determine who’s there. How do we define the Most Valuable Security Researchers? The list at Black Hat will be the top tier of researchers based on not ju...

July 16, 2019—KB4507463 (Preview of Monthly Rollup)

None None...

Through the Years: an Inside Look at Carbon Black Technology

An early Carbon Black customer and Red Canary detection engineer provides perspective on Carbon Black’s technology evolutions. This post was originally published by our partner Red Canary on May 30, 2019. Back in 2013, I was one of the first security professionals to deploy Carbon Black. This was...