Linux - SITE - Advanced Web Factories

/*====== google reCaptcha ======*/

Linux (6)

CentOS/Red Hat Security

Warning: Invalid argument supplied for foreach() in /var/www/vhosts/webfactories.de/httpdocs/modules/mod_jw_srfr/helper.php on line 42

Red Hat Security Advisory 2024-2044-03
Operating System: RedHat ≈ Packet Storm Apr 25, 2024 | 14:19 pm
Red Hat Security Advisory 2024-2044-03 - An update for gnutls is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Issues addressed include an information leakage vulnerability.
Read more...
Red Hat Security Advisory 2024-2038-03
Operating System: RedHat ≈ Packet Storm Apr 25, 2024 | 14:18 pm
Red Hat Security Advisory 2024-2038-03 - An update for tigervnc is now available for Red Hat Enterprise Linux 8.8 Extended Update Support.
Read more...
Red Hat Security Advisory 2024-2036-03
Operating System: RedHat ≈ Packet Storm Apr 25, 2024 | 14:17 pm
Red Hat Security Advisory 2024-2036-03 - An update for tigervnc is now available for Red Hat Enterprise Linux 9.0 Extended Update Support.
Read more...
Red Hat Security Advisory 2024-2033-03
Operating System: RedHat ≈ Packet Storm Apr 24, 2024 | 15:03 pm
Red Hat Security Advisory 2024-2033-03 - An update for libreswan is now available for Red Hat Enterprise Linux 9.
Read more...
Red Hat Security Advisory 2024-2005-03
Operating System: RedHat ≈ Packet Storm Apr 24, 2024 | 15:02 pm
Red Hat Security Advisory 2024-2005-03 - An update for linux-firmware is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, and Red Hat Enterprise Linux 8.2 Update Services for SAP[…]
Read more...
Red Hat Security Advisory 2024-1997-03
Operating System: RedHat ≈ Packet Storm Apr 24, 2024 | 15:01 pm
Red Hat Security Advisory 2024-1997-03 - An update for gnutls is now available for Red Hat Enterprise Linux 8.8 Extended Update Support. Issues addressed include an information leakage vulnerability.
Read more...
Red Hat Security Advisory 2024-1994-03
Operating System: RedHat ≈ Packet Storm Apr 24, 2024 | 15:00 pm
Red Hat Security Advisory 2024-1994-03 - An update for the container-tools:rhel8 module is now available for Red Hat Enterprise Linux 8.6 Extended Update Support.
Read more...
The Product Security Blog has moved!
Red Hat Security Blog Blog Posts Mar 19, 2019 | 19:38 pm
Red Hat Product Security has joined forces with other security teams inside Red Hat to publish our content in a common venue using the Security channel of the Red Hat Blog.This move provides a wider variety of important Security topics,[…]
Read more...
New Red Hat Product Security OpenPGP key
Red Hat Security Blog Blog Posts Aug 22, 2018 | 13:30 pm
Red Hat Product Security has transitioned from using its old 1024-bit DSA OpenPGP key to a new 4096-bit RSA OpenPGP key.This was done to improve the long-term security of our communications with our customers and also to meet current key[…]
Read more...
SPECTRE Variant 1 scanning tool
Red Hat Security Blog Blog Posts Jul 18, 2018 | 13:30 pm
As part of Red Hat's commitment to product security we have developed a tool internally that can be used to scan for variant 1 SPECTRE vulnerabilities. As part of our commitment to the wider user community, we are introducing this[…]
Read more...
Red Hat’s disclosure process
Red Hat Security Blog Blog Posts Jul 10, 2018 | 13:00 pm
Last week, a vulnerability (CVE-2018-10892) that affected CRI-O, Buildah, Podman, and Docker was made public before some affected upstream projects were notified. We regret that this was not handled in a way that lives up to our own standards around[…]
Read more...
Join us in San Francisco at the 2018 Red Hat Summit
Red Hat Security Blog Blog Posts Apr 23, 2018 | 14:30 pm
This year’s Red Hat Summit will be held on May 8-10 in beautiful San Francisco, USA.Product Security will be joining many Red Hat security experts in presenting and assisting subscribers and partners at the show.Here is a sneak peek at[…]
Read more...
Certificate Transparency and HTTPS
Red Hat Security Blog Blog Posts Apr 17, 2018 | 15:00 pm
Google has announced that on April 30, 2018, Chrome will:“...require that all TLS server certificates issued after 30 April, 2018 be compliant with the Chromium CT Policy. After this date, when Chrome connects to a site serving a publicly-trusted certificate[…]
Read more...
Let's talk about PCI-DSS
Red Hat Security Blog Blog Posts Feb 28, 2018 | 14:30 pm
For those who aren’t familiar with Payment Card Industry Data Security Standard (PCI-DSS), it is the standard that is intended to protect our credit card data as it flows between systems and is stored in company databases.PCI-DSS requires that all[…]
Read more...
Security is from Mars, Developers are from Venus…...or ARE they?
Red Hat Security Blog Blog Posts Nov 16, 2017 | 15:00 pm
It is a tale as old as time.Developers and security personnel view each other withsuspicion.The perception is that a vast gulf of understanding and ability lies between the two camps.“They can’t possibly understand what it is to do my job!”[…]
Read more...
Abuse of RESTEasy Default Providers in JBoss EAP
Red Hat Security Blog Blog Posts Oct 18, 2017 | 13:30 pm
Red Hat JBoss Enterprise Application Platform (EAP) is a commonly used host for Restful webservices. A powerful but potentially dangerous feature of Restful webservices on JBoss EAP is the ability to accept any media type. If not configured to accept[…]
Read more...
Kernel Stack Protector and BlueBorne
Red Hat Security Blog Blog Posts Sep 12, 2017 | 11:51 am
Today, a security issue called BlueBorne was disclosed, a vulnerability that could be used to attack sensitive systems via the Bluetooth protocol. Specifically, BlueBorne is a flaw where a remote (but physically quite close) attacker could get root on a[…]
Read more...
The RHSA notifications you want, right in your Inbox
Red Hat Security Blog Blog Posts May 17, 2017 | 13:30 pm
Red Hat Product Security takes pride in the quality and timeliness of its Security Advisories and all the accompanying information we publish for every erratum and vulnerability that we track and fix in our products.There are many ways in which[…]
Read more...
Security Scoring and Grading for Container Images
Red Hat Security Blog Blog Posts Apr 25, 2017 | 16:26 pm
We have just rolled out an update to the interface of the Red Hat Container Catalog that attempts to answer to the question of whether or not a particular container image available in the Container Catalog can be considered secure.In[…]
Read more...
Join us at Red Hat Summit 2017
Red Hat Security Blog Blog Posts Apr 19, 2017 | 13:30 pm
As you’ve probably heard, this year’s Red Hat Summit is in Boston May 2-4. Product Security is looking forward to taking over multiple sessions and activities over the course of those 3 days, and we wanted to give you a[…]
Read more...
Customer security awareness: alerting you to vulnerabilities that are of real risk
Red Hat Security Blog Blog Posts Mar 22, 2017 | 13:30 pm
Every day we are bombarded with information. Something is always happening somewhere to someone and unfortunately it's rarely good. Looking at this through the lens of information security, NOT getting the right details at the appropriate time could be the[…]
Read more...
Red Hat Product Security Risk Report 2016
Red Hat Security Blog Blog Posts Mar 7, 2017 | 14:39 pm
At Red Hat, our dedicated Product Security team analyzes threats and vulnerabilities against all our products and provides relevant advice and updates through the Red Hat Customer Portal. Customers can rely on this expertise to help them quickly address the[…]
Read more...
Do you know where that open source came from?
Red Hat Security Blog Blog Posts Feb 8, 2017 | 14:30 pm
Last year, while speaking at RSA, a reporter asked me about container provenance. This wasn’t the easiest question to answer because there is a lot of nuance around containers and what’s inside them. In response, I asked him if he[…]
Read more...
Deprecation of Insecure Algorithms and Protocols in RHEL 6.9
Red Hat Security Blog Blog Posts Jan 3, 2017 | 14:30 pm
Cryptographic protocols and algorithms have a limited lifetime—much like everything else in technology. Algorithms that provide cryptographic hashes and encryption as well as cryptographic protocols have a lifetime after which they are considered either too risky to use or plain[…]
Read more...
Evolution of the SSL and TLS protocols
Red Hat Security Blog Blog Posts Nov 16, 2016 | 14:30 pm
The Transport Layer Security (TLS) protocol is undoubtedly the most widely used protocol on the Internet today. If you have ever done an online banking transaction, visited a social networking website, or checked your email, you have most likely used[…]
Read more...
From There to Here (But Not Back Again)
Red Hat Security Blog Blog Posts Oct 24, 2016 | 13:30 pm
Red Hat Product Security recently celebrated our 15th anniversary this summer and while I cannot claim to have been with Red Hat for that long (although I’m coming up on 8 years myself), I’ve watched the changes from the “0day”[…]
Read more...
Happy 15th Birthday Red Hat Product Security
Red Hat Security Blog Blog Posts Oct 17, 2016 | 13:30 pm
This summer marked 15 years since we founded a dedicated Product Security team for Red Hat.While we often publish information in this blog about security technologies and vulnerabilities, we rarely give an introspection into the team itself.So I’d like, if[…]
Read more...
Redefining how we share our security data.
Red Hat Security Blog Blog Posts Jun 23, 2016 | 13:30 pm
Red Hat Product Security has long provided various bits of machine-consumable information to customers and users via our Security Data page.Today we are pleased to announce that we have made it even easier to access and parse this data through[…]
Read more...
The Answer is always the same: Layers of Security
Red Hat Security Blog Blog Posts May 25, 2016 | 13:30 pm
There is a common misperception that now that containers support seccomp we no longer need SELinux to help protect our systems.WRONG.The big weakness in containers is the container possesses the ability to interact with the host kernel and the host[…]
Read more...
CVE-2016-3710: QEMU: out-of-bounds memory access issue
Red Hat Security Blog Blog Posts May 11, 2016 | 13:30 pm
Quick Emulator (aka QEMU) is an open source systems emulator. It emulates various processors and their accompanying hardware peripherals like disc, serial ports, NIC et al. A serious vulnerability of out-of-bounds r/w access through the Video Graphics Array (VGA) emulator[…]
Read more...
Red Hat Product Security Risk Report: 2015
Red Hat Security Blog Blog Posts Apr 20, 2016 | 13:30 pm
This report takes a look at the state of security risk for Red Hat products for calendar year 2015. We look at key metrics, specific vulnerabilities, and the most common ways users of Red Hat products were affected by security[…]
Read more...
Go home SSLv2, you’re DROWNing
Red Hat Security Blog Blog Posts Mar 1, 2016 | 13:00 pm
The SSLv2 protocol had its 21st birthday last month, but it’s no cause to celebrate with an alcohol beverage, since the protocol was already deprecated when it turned 18.Announced today is an attack called DROWN that takes advantage of systems[…]
Read more...

in die Vergleichsliste

Schreiben Sie den ersten Kommentar!

Schlagwörter:

Publiziert in: Linux

Debian Security

Warning: Invalid argument supplied for foreach() in /var/www/vhosts/webfactories.de/httpdocs/modules/mod_jw_srfr/helper.php on line 42

Debian Security Advisory 5673-1
Operating System: Debian ≈ Packet Storm Apr 23, 2024 | 16:10 pm
Debian Linux Security Advisory 5673-1 - Charles Fol discovered that the iconv() function in the GNU C library is prone to a buffer overflow vulnerability when converting strings to the ISO-2022-CN-EXT character set, which may lead to denial of service[…]
Read more...
Debian Security Advisory 5672-1
Operating System: Debian ≈ Packet Storm Apr 23, 2024 | 15:59 pm
Debian Linux Security Advisory 5672-1 - Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in denial of service or information disclosure.
Read more...
Debian Security Advisory 5671-1
Operating System: Debian ≈ Packet Storm Apr 23, 2024 | 15:51 pm
Debian Linux Security Advisory 5671-1 - Several vulnerabilities have been discovered in the OpenJDK Java runtime, which may result in denial of service or information disclosure.
Read more...
Debian Security Advisory 5670-1
Operating System: Debian ≈ Packet Storm Apr 23, 2024 | 15:48 pm
Debian Linux Security Advisory 5670-1 - Multiple security issues were discovered in Thunderbird, which could result in denial of service or the execution of arbitrary code.
Read more...
Debian Security Advisory 5667-1
Operating System: Debian ≈ Packet Storm Apr 22, 2024 | 16:22 pm
Debian Linux Security Advisory 5667-1 - Several security vulnerabilities have been discovered in the Tomcat servlet and JSP engine.
Read more...
Debian Security Advisory 5668-1
Operating System: Debian ≈ Packet Storm Apr 22, 2024 | 12:11 pm
Debian Linux Security Advisory 5668-1 - Security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.
Read more...
Debian Security Advisory 5669-1
Operating System: Debian ≈ Packet Storm Apr 22, 2024 | 11:30 am
Debian Linux Security Advisory 5669-1 - It was discovered that insufficient restriction of unix daemon sockets in the GNU Guix functional package manager could result in sandbox bypass.
Read more...
Debian Security Advisory 5664-1
Operating System: Debian ≈ Packet Storm Apr 18, 2024 | 15:54 pm
Debian Linux Security Advisory 5664-1 - Jetty 9 is a Java based web server and servlet engine. It was discovered that remote attackers may leave many HTTP/2 connections in ESTABLISHED state (not closed), TCP congested and idle. Eventually the server[…]
Read more...
Debian Security Advisory 5663-1
Operating System: Debian ≈ Packet Storm Apr 18, 2024 | 15:17 pm
Debian Linux Security Advisory 5663-1 - Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code or clickjacking.
Read more...
Debian Security Advisory 5655-2
Operating System: Debian ≈ Packet Storm Apr 17, 2024 | 15:50 pm
Debian Linux Security Advisory 5655-2 - The update of cockpit released in DSA 5655-1 did not correctly build binary packages due to unit test failures when building against libssh 0.10.6. This update corrects that problem.
Read more...
Debian Security Advisory 5662-1
Operating System: Debian ≈ Packet Storm Apr 17, 2024 | 15:49 pm
Debian Linux Security Advisory 5662-1 - Multiple vulnerabilities have been discovered in the Apache HTTP server, which may result in HTTP response splitting or denial of service.
Read more...
Debian Security Advisory 5661-1
Operating System: Debian ≈ Packet Storm Apr 16, 2024 | 14:12 pm
Debian Linux Security Advisory 5661-1 - Multiple security issues were found in PHP, a widely-used open source general purpose scripting language which could result in secure cookie bypass, XXE attacks or incorrect validation of password hashes.
Read more...
Debian Security Advisory 5660-1
Operating System: Debian ≈ Packet Storm Apr 16, 2024 | 14:10 pm
Debian Linux Security Advisory 5660-1 - Multiple security issues were found in PHP, a widely-used open source general purpose scripting language which could result in secure cookie bypass, XXE attacks or incorrect validation of password hashes.
Read more...
Debian Security Advisory 5659-1
Operating System: Debian ≈ Packet Storm Apr 15, 2024 | 16:30 pm
Debian Linux Security Advisory 5659-1 - Bartek Nowotarski discovered that Apache Traffic Server, a reverse and forward proxy server, was susceptible to denial of service via HTTP2 continuation frames.
Read more...
Debian Security Advisory 5658-1txt
Operating System: Debian ≈ Packet Storm Apr 15, 2024 | 16:07 pm
Debian Linux Security Advisory 5658-1 - Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks.
Read more...
Debian Security Advisory 5657-1
Operating System: Debian ≈ Packet Storm Apr 15, 2024 | 15:59 pm
Debian Linux Security Advisory 5657-1 - Several vulnerabilities were discovered in the Xorg X server, which may result in privilege escalation if the X server is running privileged or denial of service.
Read more...
Debian Security Advisory 5656-1
Operating System: Debian ≈ Packet Storm Apr 12, 2024 | 14:48 pm
Debian Linux Security Advisory 5656-1 - Security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.
Read more...
Debian Security Advisory 5655-1
Operating System: Debian ≈ Packet Storm Apr 5, 2024 | 18:32 pm
Debian Linux Security Advisory 5655-1 - It was discovered that Cockpit, a web console for Linux servers, was susceptible to arbitrary command execution if an administrative user was tricked into opening an sosreport file with a malformed filename.
Read more...
Debian Security Advisory 5654-1
Operating System: Debian ≈ Packet Storm Apr 4, 2024 | 14:30 pm
Debian Linux Security Advisory 5654-1 - Security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure.
Read more...
Debian Security Advisory 5653-1
Operating System: Debian ≈ Packet Storm Apr 3, 2024 | 19:55 pm
Debian Linux Security Advisory 5653-1 - Claudio Bozzato discovered multiple security issues in gtkwave, a file waveform viewer for VCD (Value Change Dump) files, which may result in the execution of arbitrary code if malformed files are opened.
Read more...
Debian Security Advisory 5652-1
Operating System: Debian ≈ Packet Storm Apr 2, 2024 | 19:01 pm
Debian Linux Security Advisory 5652-1 - A directory traversal vulnerability was discovered in py7zr, a library and command-line utility to process 7zip archives.
Read more...
Debian Security Advisory 5651-1
Operating System: Debian ≈ Packet Storm Apr 1, 2024 | 14:31 pm
Debian Linux Security Advisory 5651-1 - Two security issues were discovered in MediaWiki, a website engine for collaborative work, which could result in cross-site scripting or denial of service.
Read more...
Linux nf_tables Local Privilege Escalation
Operating System: Debian ≈ Packet Storm Apr 1, 2024 | 14:22 pm
A use-after-free vulnerability exists in the Linux kernel netfilter: nf_tables component. This is a universal local privilege escalation proof of concept exploit working on Linux kernels between 5.14 and 6.6, including Debian, Ubuntu, and KernelCTF.
Read more...

in die Vergleichsliste

Schreiben Sie den ersten Kommentar!

Schlagwörter:

Publiziert in: Linux

Ubuntu Security

Ubuntu Security Notice USN-6750-1
Operating System: Ubuntu ≈ Packet Storm Apr 25, 2024 | 14:28 pm
Ubuntu Security Notice 6750-1 - Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, obtain[…]
Read more...
Ubuntu Security Notice USN-6743-3
Operating System: Ubuntu ≈ Packet Storm Apr 25, 2024 | 14:27 pm
Ubuntu Security Notice 6743-3 - Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system.
Read more...
Ubuntu Security Notice USN-6657-2
Operating System: Ubuntu ≈ Packet Storm Apr 25, 2024 | 14:26 pm
Ubuntu Security Notice 6657-2 - USN-6657-1 fixed several vulnerabilities in Dnsmasq. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Elias Heftrig, Haya Schulmann, Niklas Vogel, and Michael Waidner discovered that Dnsmasq incorrectly handled validating[…]
Read more...
Ubuntu Security Notice USN-6749-1
Operating System: Ubuntu ≈ Packet Storm Apr 25, 2024 | 14:25 pm
Ubuntu Security Notice 6749-1 - It was discovered that FreeRDP incorrectly handled certain context resets. If a user were tricked into connecting to a malicious server, a remote attacker could use this issue to cause FreeRDP to crash, resulting in[…]
Read more...
Ubuntu Security Notice USN-6747-1
Operating System: Ubuntu ≈ Packet Storm Apr 24, 2024 | 15:20 pm
Ubuntu Security Notice 6747-1 - Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains,[…]
Read more...
Ubuntu Security Notice USN-6742-2
Operating System: Ubuntu ≈ Packet Storm Apr 24, 2024 | 15:19 pm
Ubuntu Security Notice 6742-2 - Daniele Antonioli discovered that the Secure Simple Pairing and Secure Connections pairing in the Bluetooth protocol could allow an unauthenticated user to complete authentication without pairing credentials. A physically proximate attacker placed between two Bluetooth[…]
Read more...
Ubuntu Security Notice USN-6746-1
Operating System: Ubuntu ≈ Packet Storm Apr 23, 2024 | 16:02 pm
Ubuntu Security Notice 6746-1 - It was discovered that Google Guest Agent and Google OS Config Agent incorrectly handled certain JSON files. An attacker could possibly use this issue to cause a denial of service.
Read more...
GitLens Git Local Configuration Execution
Operating System: Ubuntu ≈ Packet Storm Apr 23, 2024 | 15:58 pm
GitKraken GitLens versions prior to 14.0.0 allow an untrusted workspace to execute git commands. A repo may include its own .git folder including a malicious config file to execute arbitrary code. Tested against VSCode 1.87.2 with GitLens 13.6.0 on Ubuntu[…]
Read more...
Ubuntu Security Notice USN-6728-3
Operating System: Ubuntu ≈ Packet Storm Apr 23, 2024 | 15:54 pm
Ubuntu Security Notice 6728-3 - USN-6728-1 fixed vulnerabilities in Squid. The fix for CVE-2023-5824 caused Squid to crash in certain environments on Ubuntu 20.04 LTS and was disabled in USN-6728-2. The problematic fix for CVE-2023-5824 has now been corrected and[…]
Read more...
Visual Studio Code Execution
Operating System: Ubuntu ≈ Packet Storm Apr 23, 2024 | 15:53 pm
This Metasploit module creates a vsix file which can be installed in Visual Studio Code as an extension. At activation/install, the extension will execute a shell or two. Tested against VSCode 1.87.2 on Ubuntu 22.04.
Read more...
Ubuntu Security Notice USN-6744-2
Operating System: Ubuntu ≈ Packet Storm Apr 23, 2024 | 15:43 pm
Ubuntu Security Notice 6744-2 - USN-6744-1 fixed a vulnerability in Pillow. This update provides the corresponding updates for Pillow in Ubuntu 20.04 LTS. Hugo van Kemenade discovered that Pillow was not properly performing bounds checks when processing an ICC file,[…]
Read more...
Ubuntu Security Notice USN-6744-1
Operating System: Ubuntu ≈ Packet Storm Apr 23, 2024 | 15:36 pm
Ubuntu Security Notice 6744-1 - Hugo van Kemenade discovered that Pillow was not properly performing bounds checks when processing an ICC file, which could lead to a buffer overflow. If a user or automated system were tricked into processing a[…]
Read more...
Ubuntu Security Notice USN-6738-1
Operating System: Ubuntu ≈ Packet Storm Apr 23, 2024 | 15:35 pm
Ubuntu Security Notice 6738-1 - Fabian Bäumer, Marcus Brinkmann, and Joerg Schwenk discovered that LXD incorrectly handled the handshake phase and the use of sequence numbers in SSH Binary Packet Protocol. If a user or an automated system were tricked[…]
Read more...
Ubuntu Security Notice USN-6743-1
Operating System: Ubuntu ≈ Packet Storm Apr 22, 2024 | 10:11 am
Ubuntu Security Notice 6743-1 - Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system.
Read more...
Ubuntu Security Notice USN-6742-1
Operating System: Ubuntu ≈ Packet Storm Apr 22, 2024 | 09:22 am
Ubuntu Security Notice 6742-1 - Daniele Antonioli discovered that the Secure Simple Pairing and Secure Connections pairing in the Bluetooth protocol could allow an unauthenticated user to complete authentication without pairing credentials. A physically proximate attacker placed between two Bluetooth[…]
Read more...
Ubuntu Security Notice USN-6741-1
Operating System: Ubuntu ≈ Packet Storm Apr 19, 2024 | 20:22 pm
Ubuntu Security Notice 6741-1 - Daniele Antonioli discovered that the Secure Simple Pairing and Secure Connections pairing in the Bluetooth protocol could allow an unauthenticated user to complete authentication without pairing credentials. A physically proximate attacker placed between two Bluetooth[…]
Read more...
Ubuntu Security Notice USN-6740-1
Operating System: Ubuntu ≈ Packet Storm Apr 19, 2024 | 19:22 pm
Ubuntu Security Notice 6740-1 - Wei Chen discovered that a race condition existed in the TIPC protocol implementation in the Linux kernel, leading to a null pointer dereference vulnerability. A local attacker could use this to cause a denial of[…]
Read more...
Ubuntu Security Notice USN-6739-1
Operating System: Ubuntu ≈ Packet Storm Apr 19, 2024 | 19:11 pm
Ubuntu Security Notice 6739-1 - It was discovered that a race condition existed in the instruction emulator of the Linux kernel on Arm 64-bit systems. A local attacker could use this to cause a denial of service. Wei Chen discovered[…]
Read more...
Ubuntu Security Notice USN-6737-1
Operating System: Ubuntu ≈ Packet Storm Apr 18, 2024 | 15:29 pm
Ubuntu Security Notice 6737-1 - Charles Fol discovered that the GNU C Library iconv feature incorrectly handled certain input sequences. An attacker could use this issue to cause the GNU C Library to crash, resulting in a denial of service,[…]
Read more...
Ubuntu Security Notice USN-6729-2
Operating System: Ubuntu ≈ Packet Storm Apr 18, 2024 | 15:28 pm
Ubuntu Security Notice 6729-2 - USN-6729-1 fixed several vulnerabilities in Apache. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Orange Tsai discovered that the Apache HTTP Server incorrectly handled validating certain input. A remote[…]
Read more...
Ubuntu Security Notice USN-6726-2
Operating System: Ubuntu ≈ Packet Storm Apr 17, 2024 | 15:46 pm
Ubuntu Security Notice 6726-2 - Pratyush Yadav discovered that the Xen network backend implementation in the Linux kernel did not properly handle zero length data request, leading to a null pointer dereference vulnerability. An attacker in a guest VM could[…]
Read more...

in die Vergleichsliste

Schreiben Sie den ersten Kommentar!

Schlagwörter:

Publiziert in: Linux

FreeBSD Security

py-matrix-synapse -- weakness in auth chain indexing allows DoS
FreeBSD VuXML Apr 24, 2024 | 00:00 am

Read more...
ruby -- Arbitrary memory address read vulnerability with Regex search
FreeBSD VuXML Apr 23, 2024 | 00:00 am

Read more...
sdl2_sound -- multiple vulnerabilities
FreeBSD VuXML Apr 22, 2024 | 00:00 am

Read more...
chromium -- multiple security fixes
FreeBSD VuXML Apr 21, 2024 | 00:00 am

Read more...
jenkins -- Terrapin SSH vulnerability in Jenkins CLI client
FreeBSD VuXML Apr 19, 2024 | 00:00 am

Read more...
electron{27,28,29} -- multiple vulnerabilities
FreeBSD VuXML Apr 18, 2024 | 00:00 am

Read more...

in die Vergleichsliste

Schreiben Sie den ersten Kommentar!

Schlagwörter:

Publiziert in: Linux

Fedora Security

Glibc Tunables Privilege Escalation
Operating System: Fedora ≈ Packet Storm Dec 21, 2023 | 14:20 pm
A buffer overflow exists in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. It has been dubbed Looney Tunables. This issue allows an local attacker to use maliciously crafted GLIBC_TUNABLES when launching binaries with SUID[…]
Read more...
GNOME Files 43.4 Privilege Escalation
Operating System: Fedora ≈ Packet Storm Aug 8, 2023 | 15:54 pm
GNOME Files version 43.4 (nautilus) on Fedora 37 will extract zip archives with setuid files for other user identifiers that can be leveraged to escalate privileges.
Read more...
Apache Tomcat Privilege Escalation
Operating System: Fedora ≈ Packet Storm Mar 14, 2023 | 14:39 pm
This Metasploit module exploits a vulnerability in RedHat based systems where improper file permissions are applied to /usr/lib/tmpfiles.d/tomcat.conf for Apache Tomcat versions before 7.0.54-8. The configuration files in tmpfiles.d are used by systemd-tmpfiles to manage temporary files including their creation.[…]
Read more...
Sequoia: A Deep Root In Linux's Filesystem Layer
Operating System: Fedora ≈ Packet Storm Jul 21, 2021 | 16:10 pm
Qualys discovered a size_t-to-int conversion vulnerability in the Linux kernel's filesystem layer: by creating, mounting, and deleting a deep directory structure whose total path length exceeds 1GB, an unprivileged local attacker can write the 10-byte string "//deleted" to an offset[…]
Read more...
Fedora / Gnome fscaps Issue
Operating System: Fedora ≈ Packet Storm Jun 22, 2021 | 19:20 pm
Fedora with Gnome has an issue where it is not using fscaps safely.
Read more...
netkit-telnet 0.17 Remote Code Execution
Operating System: Fedora ≈ Packet Storm Mar 5, 2020 | 20:57 pm
netkit-telnet version 0.17 telnetd on Fedora 31 BraveStarr remote code execution exploit.
Read more...
vReliable Datagram Sockets (RDS) rds_page_copy_user Privilege Escalation
Operating System: Fedora ≈ Packet Storm Dec 23, 2019 | 21:02 pm
This Metasploit module exploits a vulnerability in the rds_page_copy_user function in net/rds/page.c (RDS) in Linux kernel versions 2.6.30 to 2.6.36-rc8 to execute code as root (CVE-2010-3904). This module has been tested successfully on Fedora 13 (i686) kernel version 2.6.33.3-85.fc13.i686.PAE and[…]
Read more...
Grub2 grub2-set-bootflag Environment Corruption
Operating System: Fedora ≈ Packet Storm Nov 27, 2019 | 23:02 pm
Grub2 has grub2-set-bootflag setuid in the new Fedora release and has the ability to corrupt the environment.
Read more...
SystemTap 1.3 MODPROBE_OPTIONS Privilege Escalation
Operating System: Fedora ≈ Packet Storm Apr 19, 2019 | 13:28 pm
This Metasploit module attempts to gain root privileges by exploiting a vulnerability in the staprun executable included with SystemTap version 1.3. The staprun executable does not clear environment variables prior to executing modprobe, allowing an arbitrary configuration file to be[…]
Read more...
Linux Nested User Namespace idmap Limit Local Privilege Escalation
Operating System: Fedora ≈ Packet Storm Nov 28, 2018 | 01:51 am
This Metasploit module exploits a vulnerability in Linux kernels 4.15.0 to 4.18.18, and 4.19.0 to 4.19.1, where broken uid/gid mappings between nested user namespaces and kernel uid/gid mappings allow elevation to root (CVE-2018-18955). The target system must have unprivileged user[…]
Read more...

in die Vergleichsliste

Schreiben Sie den ersten Kommentar!

Schlagwörter:

Publiziert in: Linux

SuSE Security

Warning: Invalid argument supplied for foreach() in /var/www/vhosts/webfactories.de/httpdocs/modules/mod_jw_srfr/helper.php on line 42

in die Vergleichsliste

Schreiben Sie den ersten Kommentar!

Schlagwörter:

Publiziert in: Linux

Webserver Literatur

Das Freelancer Portal my-werbung.de ist eine Projektbörse, die sich auf Werbeprojekte und Werbedienstleistungen spezialisiert hat. Werbedienstleistungen aller Art werden von kreativen Firmen, Freiberuflern und Agenturen übernommen.

If you are looking for a quality web agency in Bordeaux in France, we recommand you to contact CréaSites Sud Ouest The will make a good to work for your website and they can help you too about SEO !

Benefit from fantastic savings on LGA Airport Limo Service NYC , just by taking a look at http://www.nycairportslimo.com

If you are looking for Milwaukee software development then learn more .
Learn more about New Haven CT Taxi and Car Service EWR Airport ctairlink at http://ctairlink.com

Visit https://earnwith.me to find out more regarding online sales pro review

Learn more about New Haven CT Taxi and Car Service EWR Airport ctairlink at http://ctairlink.com

kostenlose anzeige

Go to top