Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found -5 articles for you...
99
security advisorydenial of servicecriticalSlackware 15.0: 2024-044-01 Critical: Bind Denial Of Service
New bind packages are available for Slackware 15.0 and -current to fix security issues. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [slackware-security] bind (SSA:2024-044-01) New bind packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: +--------------------------+ patches/packages/bind-9.16.48-i586-1_slack15.0.txz: Upgraded. This update fixes bugs and security issues: Specific DNS answers could cause a denial-of-service condition due to DNS validation taking a long time. Query patterns that continuously triggered cache database maintenance could exhaust all available memory on the host running named. Restore DNS64 state when handling a serve-stale timeout. Specific queries could trigger an assertion check with nxdomain-redirect enabled. Speed up parsing of DNS messages with many different names. For more information, see: https://kb.isc.org/docs/cve-2023-50387 https://www.cve.org/CVERecord?id=CVE-2023-50387 https://kb.isc.org/docs/cve-2023-6516 https://www.cve.org/CVERecord?id=CVE-2023-6516 https://kb.isc.org/docs/cve-2023-5679 https://www.cve.org/CVERecord?id=CVE-2023-5679 https://kb.isc.org/docs/cve-2023-5517 https://www.cve.org/CVERecord?id=CVE-2023-5517 https://kb.isc.org/docs/cve-2023-4408 https://www.cve.org/CVERecord?id=CVE-2023-4408 (* Security fix *) +--------------------------+ Where to find the new packages: +-----------------------------+ Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating FTP and rsync hosting to the Slackware project! :-) Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you. Updated package for Slackware 15.0: Updated package for Slackware x86_64 15.0: Updated package for Slackware -current: Updated package for Slackware x86_64 -current: MD5 signatures: +-------------+ Slackware 15.0 package: 688d05942acae07ca040a07057f107af bind-9.16.48-i586-1_slack15.0.txz Slackware x86_64 15.0 package: 72ec1aa452c6b37046e74b90797be3e8 bind-9.16.48-x86_64-1_slack15.0.txz Slackware -current package: 8e3c11dba6a01af76aa89531c2e2d62a n/bind-9.18.24-i586-1.txz Slackware x86_64 -current package: 8a9d10f4a4f1501ffc7f087dec4e281e n/bind-9.18.24-x86_64-1.txz Installation instructions: +------------------------+ Upgrade the package as root: # upgradepkg bind-9.16.48-i586-1_slack15.0.txz Then, restart the name server: # /etc/rc.d/rc.bind restart +-----+ . A fresh bind update has been released for Slackware 15.0 to resolve urgent security vulnerabilities and improve the reliability of DNS services.. Slackware Bind Security Update, Slackware 15.0 Security, DNS Denial Of Service, Bind Package Upgrade. . Severity: Critical. LinuxSecurity.com Team
Feb 13, 2024
•Critical
Slackware
89
security advisorydenial of serviceFedoraFedora: Moderate Update 2009-8324 Addresses Squid DoS Vulnerabilities
Fixes several denial of service issues which could allow an attacker to stop the Squid service. CVE-2009-2621, CVE-2009-2622. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2009-8324 2009-08-07 04:35:58 -------------------------------------------------------------------------------- Name : squid Product : Fedora 11 Version : 3.0.STABLE18 Release : 1.fc11 URL : http://www.squid-cache.org Summary : The Squid proxy caching server Description : Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DNS lookups, supports non-blocking DNS lookups, and implements negative caching of failed requests. Squid consists of a main server program squid, a Domain Name System lookup program (dnsserver), a program for retrieving FTP data (ftpget), and some management and client tools. -------------------------------------------------------------------------------- Update Information: Fixes several denial of service issues which could allow an attacker to stop the Squid service. CVE-2009-2621, CVE-2009-2622 -------------------------------------------------------------------------------- ChangeLog: * Tue Aug 4 2009 Henrik Nordstrom - 7:3.0.STABLE18-1 - Update to 3.0.STABLE18 * Sat Aug 1 2009 Henrik Nordstrom - 7:3.0.STABLE17-3 - Squid Bug #2728: regression: assertion failed: http.cc:705: "!eof" * Mon Jul 27 2009 Henrik Nordstrom - 7:3.0.STABLE17-1 - Bug #514014, update to 3.0.STABLE17 fixing the denial of service issues mentioned in Squid security advisory SQUID-2009_2. * Wed Jul 1 2009 Jiri Skala 7:3.0.STABLE16-2 - fixed patch parameter of bXXX patches * Mon Jun 29 2009 Henrik Nordstrom - 7:3.0.STABLE16-1 - Upgrade to 3.0.STABLE16 * Sat May 23 2009 Henrik Nordstrom -7:3.0.STABLE15-2 - Bug #453304 - Squid requires restart after Network Manager connection setup * Sat May 9 2009 Henrik Nordstrom - 7:3.0.STABLE15-1 - Upgrade to 3.0.STABLE15 * Tue Apr 28 2009 Jiri Skala - 7:3.0.STABLE14-3 - fixed ambiguous condition in the init script (exit 4) * Mon Apr 20 2009 Henrik Nordstrom - 7:3.0.STABLE14-2 - Squid bug #2635: assertion failed: HttpHeader.cc:1196: "Headers[id].type == ftInt64" * Sun Apr 19 2009 Henrik Nordstrom - 7:3.0.STABLE14-1 - Upgrade to 3.0.STABLE14 * Fri Mar 6 2009 Henrik Nordstrom - 7:3.0.STABLE13-2 - backported logfile.cc syslog parameters patch from 3.1 (b9443.patch) - GCC-4.4 workaround in src/wccp2.cc * Wed Feb 25 2009 Fedora Release Engineering - 7:3.0.STABLE13-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #514013 - CVE-2009-2621, CVE-2009-2622 squid: multiple vulnerabilities fixed in squid 3.0.STABLE17 https://bugzilla.redhat.com/show_bug.cgi?id=514013 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update squid' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailing list
Aug 17, 2009
Fedora
172
security advisorycritical severitytomcatUbuntu 8.10 & 9.04: USN-788-1 Critical: Tomcat Access Issues
Iida Minehiko discovered that Tomcat did not properly normalise paths. A remote attacker could send specially crafted requests to the server and bypass security restrictions, gaining access to sensitive content. (CVE-2008-5515) [More...]. ==========================================================Ubuntu Security Notice USN-788-1 June 15, 2009 tomcat6 vulnerabilities CVE-2008-5515, CVE-2009-0033, CVE-2009-0580, CVE-2009-0781, CVE-2009-0783 ========================================================== A security issue affects the following Ubuntu releases: Ubuntu 8.10 Ubuntu 9.04 This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. The problem can be corrected by upgrading your system to the following package versions: Ubuntu 8.10: libtomcat6-java 6.0.18-0ubuntu3.2 tomcat6-examples 6.0.18-0ubuntu3.2 Ubuntu 9.04: libtomcat6-java 6.0.18-0ubuntu6.1 tomcat6-examples 6.0.18-0ubuntu6.1 In general, a standard system upgrade is sufficient to effect the necessary changes. Details follow: Iida Minehiko discovered that Tomcat did not properly normalise paths. A remote attacker could send specially crafted requests to the server and bypass security restrictions, gaining access to sensitive content. (CVE-2008-5515) Yoshihito Fukuyama discovered that Tomcat did not properly handle errors when the Java AJP connector and mod_jk load balancing are used. A remote attacker could send specially crafted requests containing invalid headers to the server and cause a temporary denial of service. (CVE-2009-0033) D. Matscheko and T. Hackner discovered that Tomcat did not properly handle malformed URL encoding of passwords when FORM authentication is used. A remote attacker could exploit this in order to enumerate valid usernames. (CVE-2009-0580) Deniz Cevik discovered that Tomcat did not properly escape certain parameters in the example calendar application whichcould result in browsers becoming vulnerable to cross-site scripting attacks when processing the output. With cross-site scripting vulnerabilities, if a user were tricked into viewing server output during a crafted server request, a remote attacker could exploit this to modify the contents, or steal confidential data (such as passwords), within the same domain. (CVE-2009-0781) Philippe Prados discovered that Tomcat allowed web applications to replace the XML parser used by other web applications. Local users could exploit this to bypass security restrictions and gain access to certain sensitive files. (CVE-2009-0783) Updated packages for Ubuntu 8.10: Source archives: Size/MD5: 22010 87c6105cd78ea5a8dbf62054fc4ba0aa Size/MD5: 1378 823c008ffc927c0f3f5686fc6f5188d0 Size/MD5: 3484249 9bdbb1c1d79302c80057a70b18fe6721 Architecture independent packages: Size/MD5: 174164 dd24331b2709bd6641b4055d0b052eae Size/MD5: 2961944 63c8c3e0300ed70a240b79ddd3299efb Size/MD5: 37370 b9b1bd6dc9cfb52107811295401c09e4 Size/MD5: 53488 5006e5c394ec815f6d36c335d9f0abaf Size/MD5: 714516 768cacbb74453b1a2a49e55d61b7bedd Size/MD5: 419180 0663de0611fb9792d44aebad8aa24cc4 Size/MD5: 18612 95544319007f1f90321469c5d314c72e Size/MD5: 24156 9f4d7a0671e9330ff2fa1a1c13a20c58 Updated packages for Ubuntu 9.04: Source archives: Size/MD5: 24779 221e0f51259495fd01da2a6b67358b17 Size/MD5: 1411 e3bac3c39b2e6db3267699a533b17add Size/MD5: 3484249 9bdbb1c1d79302c80057a70b18fe6721 Architecture independent packages: Size/MD5: 246196 54e990e7893923b8b6df4bcce9f3ba22 Size/MD5: 172500 abf989790a45def65d5de9a7f9b010df Size/MD5: 2846254 c1c0180751500ce58c51b97de9f2d6d9 Size/MD5: 37874 e7d401faba215af22ecff31b4a675fad Size/MD5: 53184 194153ab21adac9a47baaf92ea8d2acb Size/MD5: 714212 d52e9abc75108a8f059346e09d47b511 Size/MD5: 418316 3a7110c9da4bd72a7019cbb75651da73 Size/MD5: 20520 ea5e54c91e7055e281d61e63f0e140f2 Size/MD5: 24952 ec80f910d6c8e606c090ba8dd737bc4c . Immediate Attention: Upgrade Tomcat on Ubuntu to mitigate severe security vulnerabilities impacting availability and service integrity.. Tomcat Security Issues, Ubuntu Advisory, Access Issues, Security Updates. . Severity: Critical. LinuxSecurity.com Team
Jun 15, 2009
•Critical
Ubuntu
99
security advisorydenial of servicecriticalSlackware: 2006-257-01 Critical: Bind Denial Of Service Threat
New bind packages are available for Slackware 9.0, 9.1, 10.0, 10.1, 10.2, and -current to fix a Denial of Service issue. More details about this issue may be found in the Common Vulnerabilities and Exposures (CVE) database: . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [slackware-security] bind DoS (SSA:2006-257-01) New bind packages are available for Slackware 9.0, 9.1, 10.0, 10.1, 10.2, and -current to fix a Denial of Service issue. More details about this issue may be found in the Common Vulnerabilities and Exposures (CVE) database: https://www.cve.org/CVERecord?id=CVE-2006-4095 https://www.cve.org/CVERecord?id=CVE-2006-4096 As well as here: There are no known active exploits at this time. Here are the details from the Slackware 10.2 ChangeLog: +--------------------------+ patches/packages/bind-9.3.2_P1-i486-1_slack10.2.tgz: Upgraded to bind-9.3.2_P1. This update addresses a denial of service vulnerability. BIND's CHANGES file says this: 2066. [security] Handle SIG queries gracefully. [RT #16300] The best discussion I've found is in FreeBSD's advisory, so here's a link: https://www.freebsd.org/security/advisories/FreeBSD-SA-06:20.bind.asc Also, fixed some missing man pages. (noticed by Xavier Thomassin -- thanks) (* Security fix *) +--------------------------+ Where to find the new packages: +-----------------------------+ HINT: Getting slow download speeds from ftp.slackware.com? Give slackware.osuosl.org a try. This is another primary FTP site for Slackware that can be considerably faster than downloading from ftp.slackware.com. Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating additional FTP and rsync hosting to the Slackware project! :-) Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you. Updated package for Slackware 9.0: Updated package for Slackware 9.1: Updated package for Slackware 10.0: Updated package for Slackware 10.1: Updated package for Slackware10.2: Updated package for Slackware -current: MD5 signatures: +-------------+ Slackware 9.0 package: 641cce9a50667d49df3d67add0ff76ff bind-9.2.6_P1-i386-1_slack9.0.tgz Slackware 9.1 package: 29f41cfd25b2b1fdf333f88c4e652ec3 bind-9.2.6_P1-i486-2_slack9.1.tgz Slackware 10.0 package: 6fc49bad0cd810133d1f54e42dd17b29 bind-9.2.6_P1-i486-1_slack10.0.tgz Slackware 10.1 package: 9d298ea5cfab7f088d238386a288c640 bind-9.3.2_P1-i486-1_slack10.1.tgz Slackware 10.2 package: f01ac09880f628674e8520738e1b45cf bind-9.3.2_P1-i486-1_slack10.2.tgz Slackware -current package: 0aac4c9eed155d6fe2e85bfdd13572ee bind-9.3.2_P1-i486-1.tgz Installation instructions: +------------------------+ Upgrade the packages as root: # upgradepkg bind-9.3.2_P1-i486-1_slack10.2.tgz Restart named: sh /etc/rc.d/rc.bind restart +-----+ . Critical DoS patch rolled out across various Slackware versions to enhance system security and ensure reliable operation.. Slackware Packages, Bind DoS, Security Update. . Severity: Critical. LinuxSecurity.com Team
Sep 14, 2006
•Critical
Slackware
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!