DEBIAN-CVE-2018-14644

An issue has been found in PowerDNS Recursor from 4.0.0 up to and including 4.1.4. A remote attacker sending a DNS query for a meta-type like OPT can lead to a zone being wrongly cached as failing DNSSEC validation. It only arises if the parent zone is signed, and all the authoritative servers fo...

Unspecified Vulnerability in Oracle Sun Systems Products Suite Solaris (CNVD-2019-30946)

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation, of which Solaris is one of the computer operating system components. A security vulnerability exists in the Zones subcomponent of the Solaris component of Oracle Sun Systems Products Suite, version 11.3...

Unspecified Vulnerability in Oracle Sun Systems Products Suite Solaris (CNVD-2019-30944)

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation, of which Solaris is one of the computer operating system components. A security vulnerability exists in the Kernel Zones subcomponent of the Solaris component of Oracle Sun Systems Products Suite, versio...

Oracle Solaris Denial of Service Vulnerability (CNVD-2018-21491)

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation, of which Solaris is one of the computer operating system components. A security vulnerability exists in the Kernel Zones Virtualized NIC Driver subcomponent of version 11.3 of the Solaris component of th...

Oracle Solaris Critical Patch Update : oct2018_SRU11_4_0_0_0

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Remote Administration Daemon RAD. The supported version that is affected is 11.3. Easily exploitable vulnerability...

October 18, 2018—KB4462921 (Preview of Monthly Rollup)

None None...

CVE-2018-3271

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel Zones. The supported version that is affected is 11.3. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris...

CVE-2018-3272

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel Zones Virtualized NIC Driver. The supported version that is affected is 11.3. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Solaris executes t...

CVE-2018-3265

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Zones. The supported version that is affected is 11.3. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Solaris executes to compromise Solaris...

CVE-2018-3272

CVE-2018-3272 affects the Solaris component of Oracle Sun Systems Products Suite, specifically the Kernel Zones Virtualized NIC Driver subcomponent in Solaris 11.3. The vulnerability allows an unauthenticated attacker with logon to the host environment to cause a hang or frequent, repeatable cras...

CVE-2018-3271

CVE-2018-3271 affects Oracle Solaris 11.3 in the Kernel Zones subcomponent. The vulnerability allows a high-privilege attacker who can log on to the Solaris-hosting infrastructure to cause a hang or frequent, complete DoS of Solaris (availability impact). The CVSS3.0 vector is LOCAL, with high at...

Zero Trust Security Architectures - Network Micro-Segmentation

This is Part 2 of a 5-part blog series. Jump to Part 1: Introduction Jump to Part 3: Software Defined Perimeter Jump to Part 4: Identity Aware Proxy Jump to Part 5: Akamai's Approach to Zero Trust Introduction In the previous part of this blog series, we covered an overview of Zero Trust...

SUSE-SU-2018:2576-1 Security update for OpenStack

This update for OpenStack fixes the following issues: The following security issue with openstack-keystone has been fixed: - CVE-2018-14432: Reduce duplication in federated authentication APIs. bsc1102151 Additionally, the following non-security issues have been fixed: openstack-dashboard: - Fetc...

Code injection

On F5 BIG-IP DNS 13.1.0-13.1.0.7, 12.1.3-12.1.3.5, DNS Express / DNS Zones accept NOTIFY messages on the management interface from source IP addresses not listed in the 'Allow NOTIFY From' configuration parameter when the db variable "dnsexpress.notifyport" is set to any value other than the...

Active Directory Reconnaissance: ADRecon

ADRecon is a tool which extracts various artifacts as highlighted below out of an AD environment in a specially formatted Microsoft Excel report that includes summary views with metrics to facilitate analysis. The report can provide a holistic picture of the current state of the target AD...

Security Bulletin: TLS padding vulnerability affects IBM HTTP Server shipped with IBM Presence Zones (CVE-2014-8730)

Summary IBM HTTP Server is shipped as a component of IBM Presence Zones. Information about a security vulnerability affecting IBM HTTP Server has been published in a security bulletin. Vulnerability Details Consult the TLS padding vulnerability affects IBM HTTP Server CVE-2014-8730 security...

May 17, 2018—KB4103720 (OS Build 14393.2273)

None None...

CVE-2018-1262

Cloud Foundry Foundation UAA, versions 4.12.X and 4.13.X, introduced a feature which could allow privilege escalation across identity zones for clients performing offline validation. A zone administrator could configure their zone to issue tokens which impersonate another zone, granting up to adm...

CVE-2018-1262

Cloud Foundry Foundation UAA, versions 4.12.X and 4.13.X, introduced a feature which could allow privilege escalation across identity zones for clients performing offline validation. A zone administrator could configure their zone to issue tokens which impersonate another zone, granting up to adm...

Privilege escalation

Cloud Foundry Foundation UAA, versions 4.12.X and 4.13.X, introduced a feature which could allow privilege escalation across identity zones for clients performing offline validation. A zone administrator could configure their zone to issue tokens which impersonate another zone, granting up to adm...