The ext4_fill_super function in fs/ext4/super.c in the Linux kernel through 4.9.8 does not properly validate meta block groups, which allows physically proximate attackers to cause a denial of service (out-of-bounds read and system crash) via a crafted ext4 image.
Monthly Archives: February 2017
Windows SMB Zero-Day Exploit Released in the Wild after Microsoft delayed the Patch
Last weekend a security researcher publically disclosed a zero-day vulnerability in Windows 10, Windows 8.1 and Server editions after Microsoft failed to patch it in the past three months.
The zero-day memory corruption flaw resides in the implementation of the SMB (server message block) network file sharing protocol that could allow a remote, unauthenticated attacker to crash systems with
GLSA 201702-02: RTMPDump: Multiple vulnerabilities
CVE-2016-10098
An issue was discovered on SendQuick Entera and Avera devices before 2HF16. Multiple Command Injection vulnerabilities allow attackers to execute arbitrary system commands.
CVE-2017-5137
An issue was discovered on SendQuick Entera and Avera devices before 2HF16. An attacker could request and download the SMS logs from an unauthenticated perspective.
CVE-2017-5136
An issue was discovered on SendQuick Entera and Avera devices before 2HF16. The application failed to check the access control of the request which could result in an attacker being able to shutdown the system.
Anonymous Hacker took down over 10,000 Dark Web Sites; Leaked User Database
Dark Web is right now going through a very rough time.
Just two days ago, a hacker group affiliated with Anonymous broke into the servers of Freedom Hosting II and took down more than 10,000 Tor-based .onion dark websites with an alarming announcement to its visitors, which said:
“Hello, Freedom Hosting II, you have been hacked.”
Freedom Hosting II is the single largest host of underground
sshrc-0.6.1-1.fc25
Update to 0.6.1
redis-3.2.7-1.fc24
Upstream 3.2.7 (important security fix)
—-
Security fix for CVE-2013-7458
redis-3.2.7-1.fc25
Upstream 3.2.7 (important security fix)