Collaborate Disseminate
The Security Considerations section of RFC7540 discusses some of the considerations needed for HTTP/2 connections as they demand more resources to operate than HTTP/1.1 connections. While it generally covers expected behavior considerations,how to miti… Continue reading VU#605641: HTTP/2 implementations do not robustly handle abnormal traffic and resource exhaustion
Cylance PROTECT is an endpoint protection system. It contains an antivirus functionality that uses a machine learning algorithm(specifically,a neural network)to classify executables as malicious or benign. Security researchers isolated properties of th… Continue reading VU#489481: Cylance Antivirus Products Susceptible to Concatenation Bypass
The process file system(/proc)in Oracle Solaris 11 and Solaris 10 provides a self/alias that refers to the current executing process’s PID subdirectory with state information about the process. Protection mechanisms for/proc in Solaris 11/10 did not pr… Continue reading VU#790507: Oracle Solaris vulnerable to arbitrary code execution via /proc/self
The stack protection feature provided in the LLVM Arm backend is an optional mitigating feature used to protect against buffer overflows. It works by adding a cookie value between local variables and the stack frame return address. The compiler stores … Continue reading VU#129209: LLVMs Arm stack protection feature can be rendered ineffective
CVE-2019-11477:SACK Panic(Linux>=2.6.29). A sequence of specifically crafted selective acknowledgements(SACK)may trigger an integer overflow,leading to a denial of service or possible kernel failure(panic). CVE-2019-11478:SACK Slowness(Linux Continue reading VU#905115: Multiple TCP Selective Acknowledgement (SACK) and Maximum Segment Size (MSS) networking vulnerabilities may cause denial-of-service conditions in Linux and FreeBSD kernels
In Windows a session can be locked,which presents the user with a screen that requires authentication to continue using the session. Session locking can happen over RDP in the same way that a local session can be locked. CWE-288:Authentication Bypass U… Continue reading VU#576688: Microsoft Windows RDP can bypass the Windows lock screen
CVE-2018-5404:The Quest Kace System Management(K1000)Appliance allows an authenticated,remote attacker with least privileges(‘User Console Only’ role)to potentially exploit multiple Blind SQL Injection vulnerabilities to retrieve sensitive information … Continue reading VU#877837: Multiple vulnerabilities in Quest Kace System Management Appliance
Task Scheduler is a set of Microsoft Windows components that allows for the execution of scheduled tasks. The front-end components of Task Scheduler,such as schtasks.exe,are interfaces that allow for users to view,create,and modify scheduled tasks. The… Continue reading VU#119704: Microsoft Windows Task Scheduler SetJobFileSecurityByName privilege escalation vulnerability
CVE-2019-1649:Secure Boot Tampering,also known as Thrangrycat The logic that handles Cisco’s Secure Boot improperly checks an area of code that manages the Field Programmable Gate Array(FPGA). The secure boot feature is a proprietary FPGA based impleme… Continue reading VU#400865: Cisco Trust Anchor module (TAm) improperly checks code and Cisco IOS XE web UI does not sanitize user input
PrinterLogic versions up to and including 18.3.1.96 are vulnerable to multiple attacks. The PrinterLogic agent,running as SYSTEM,does not validate the PrinterLogic Management Portal’s SSL certificate,validate PrinterLogic update packages,or sanitize we… Continue reading VU#169249: PrinterLogic Print Management Software fails to validate SSL certificates or the integrity of software updates.