Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Stay Secure with the Latest Linux Advisories

Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
87

Debian DSA-2484-1 Remote Denial of Service: Nut Security Update

Sebastian Pohle discovered that upsd, the server of Network UPS Tools (NUT) is vulnerable to a remote denial of service attack. For the stable distribution (squeeze), this problem has been fixed in . - ------------------------------------------------------------------------- Debian Security Advisory DSA-2484-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Thijs Kinkhorst June 02, 2012 http://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : nut Vulnerability : denial of service Problem type : remote Debian-specific: no CVE ID : CVE-2012-2944 Debian Bug : 675203 Sebastian Pohle discovered that upsd, the server of Network UPS Tools (NUT) is vulnerable to a remote denial of service attack. For the stable distribution (squeeze), this problem has been fixed in version 2.4.3-1.1squeeze2. For the testing distribution (wheezy) and unstable distribution (sid), this problem will be fixed soon. We recommend that you upgrade your nut packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: http://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . A security vulnerability allowing remote denial of service in Network UPS Tools has been addressed in Debian DSA-2484-1. It is essential to update your nut packages immediately.. Debian Security, Nut Remote DoS, Network UPS Tools. . Severity: Critical. LinuxSecurity.com Team

Calendar%202 Jun 02, 2012 Critical Debian
172

Ubuntu 12.04 LTS: USN-1456-1 Moderate Vulnerability in Nut DoS Risk

Nut could be made to crash if it received specially crafted network traffic.. =========================================================================Ubuntu Security Notice USN-1456-1 May 31, 2012 nut vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 12.04 LTS - Ubuntu 11.10 - Ubuntu 11.04 - Ubuntu 10.04 LTS Summary: Nut could be made to crash if it received specially crafted network traffic. Software Description: - nut: Network UPS tools Details: Sebastian Pohle discovered that Nut did not properly validate its input when receiving data over the network. If upsd was configured to allow connections over the network, a remote attacker could exploit this to cause a denial of service (application crash). Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 12.04 LTS: nut-server 2.6.3-1ubuntu1.1 Ubuntu 11.10: nut-server 2.6.1-2ubuntu2.1 Ubuntu 11.04: nut 2.6.0-1ubuntu3.1 Ubuntu 10.04 LTS: nut 2.4.3-1ubuntu3.2 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-1456-1 CVE-2012-2944 Package Information: https://launchpad.net/ubuntu/+source/nut/2.6.3-1ubuntu1.1 https://launchpad.net/ubuntu/+source/nut/2.6.1-2ubuntu2.1 https://launchpad.net/ubuntu/+source/nut/2.6.0-1ubuntu3.1 https://launchpad.net/ubuntu/+source/nut/2.4.3-1ubuntu3.2 . Attention Ubuntu 12.04 LTS users: A security advisory has been issued regarding a vulnerability in nut that can cause crashes with malformed network packets. Update now to reduce risks. Ubuntu Nut Crash, Network UPS Tools, Denial Of Service, Security Notice. . LinuxSecurity.com Team

Calendar%202 May 31, 2012 Ubuntu
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200