Alerts This Week
Warning Icon 1 700
Alerts This Week
Warning Icon 1 700

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":547,"type":"x","order":1,"pct":78.48,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.3,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.88,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.34,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
98

Red Hat: RHSA-2023:1234-01 Low: Dandelion Security Patch

Updated zebra packages that fix several security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team.. - --------------------------------------------------------------------- Red Hat Security Advisory Synopsis: Moderate: zebra security update Advisory ID: RHSA-2006:0533-01 Advisory URL: https://access.redhat.com/errata/RHSA-2006:0533.html Issue date: 2006-06-01 Updated on: 2006-06-01 Product: Red Hat Enterprise Linux CVE Names: CVE-2006-2223 CVE-2006-2224 CVE-2006-2276 - ---------------------------------------------------------------------1. Summary: Updated zebra packages that fix several security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. 2. Relevant releases/architectures: Red Hat Enterprise Linux AS (Advanced Server) version 2.1 - i386, ia64 Red Hat Linux Advanced Workstation 2.1 - ia64 3. Problem description: GNU Zebra is a free software that manages TCP/IP based routing protocol. An information disclosure flaw was found in the way GNU Zebra interprets RIP REQUEST packets. RIPd in GNU Zebra will respond to RIP REQUEST packets for RIP versions that have been disabled or that have authentication enabled, allowing a remote attacker to acquire information about the local network. (CVE-2006-2223) A route injection flaw was found in the way GNU Zebra interprets RIPv1 RESPONSE packets when RIPv2 authentication is enabled. It is possible for a remote attacker to inject arbitrary route information into the RIPd routing tables. This issue does not affect GNU Zebra configurations where only RIPv2 is specified. (CVE-2006-2224) A denial of service flaw was found in GNU Zebra's telnet interface. If an attacker is able to connect to the GNU Zebra telnet interface, it is possible to cause GNU Zebra to consume vast quantities ofCPU resources by issuing a malformed 'sh' command. (CVE-2006-2276) Users of GNU Zebra should upgrade to these updated packages, which contain backported patches that correct these issues. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. 5. Bug IDs fixed (http://bugzilla.redhat.com/): 192757 - CVE-2006-2224 zebra RIPd route injection 192758 - CVE-2006-2276 zebra locks with command sh ip bgp 192759 - CVE-2006-2223 zebra RIPd information disclosure 6. RPMs required: Red Hat Enterprise Linux AS (Advanced Server) version 2.1: SRPMS: b6e01074d122bd8b5c4058fb38b7fec9 zebra-0.91a-11.21AS.src.rpm i386: 4d2926158a338aa627b941e3e03e9fbc zebra-0.91a-11.21AS.i386.rpm ia64: abb964bf1fe301e0faea7e05c4bd048f zebra-0.91a-11.21AS.ia64.rpm Red Hat Linux Advanced Workstation 2.1: SRPMS: b6e01074d122bd8b5c4058fb38b7fec9 zebra-0.91a-11.21AS.src.rpm ia64: abb964bf1fe301e0faea7e05c4bd048f zebra-0.91a-11.21AS.ia64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key#package 7. References: https://www.cve.org/CVERecord?id=CVE-2006-2223 https://www.cve.org/CVERecord?id=CVE-2006-2224 https://www.cve.org/CVERecord?id=CVE-2006-2276 https://access.redhat.com/security/updates/classification#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2006 Red Hat, Inc. . Red Hat has introduced a new zebra security patch that addresses several moderate impact vulnerabilities, enhancing system security against potential threats.. RedHat Advisory, Security Patch, GNU Zebra, Routing Security. . LinuxSecurity.com Team

Calendar 2 Jun 01, 2006 Red Hat
87

Debian: DSA 415-1 Critical: Zebra Denial Of Service Threat

Two vulnerabilities were discovered in zebra, both resulting in DoS.. - -------------------------------------------------------------------------- Debian Security Advisory DSA 415-1 This email address is being protected from spambots. You need JavaScript enabled to view it. Debian -- Security Information Matt Zimmerman January 6th, 2004 Debian -- Debian security FAQ - -------------------------------------------------------------------------- Package : zebra Vulnerability : denial of service Problem-Type : remote Debian-specific: no CVE Ids : CAN-2003-0795 CAN-2003-0858 Two vulnerabilities were discovered in zebra, an IP routing daemon: CAN-2003-0795 - a bug in the telnet CLI could allow a remote attacker to cause a zebra process to crash, resulting in a denial of service. CAN-2003-0858 - netlink messages sent by other users (rather than the kernel) would be accepted, leading to a denial of service. For the current stable distribution (woody) this problem has been fixed in version 0.92a-5woody2. The zebra package has been obsoleted in the unstable distribution by GNU Quagga, where this problem was fixed in version 0.96.4x-4. We recommend that you update your zebra package. Upgrade Instructions - -------------------- wget url will fetch the file for you dpkg -i file.deb will install the referenced file. If you are using the apt-get package manager, use the line for sources.list as given below: apt-get update will update the internal database apt-get upgrade will install corrected packages You may use an automated update by adding the resources from the footer to the proper configuration. Debian GNU/Linux 3.0 alias woody - -------------------------------- Source archives: Size/MD5 checksum: 652 ba49d8a945be8d96c5a57c21258e89d8 Size/MD5 checksum: 58156 bfb0f266ecc1c11f61d137352eac7d18 Size/MD5 checksum: 1155814 d6725243ec245b77eb24b3ba7c0bf65c Architecture independent components: Size/MD5 checksum: 270884 5fada3f95bf6e93ac2fe794b7fa8acd9 Alpha architecture: Size/MD5 checksum: 1043754 72d2a900c962ed8aea065c9595f320e3 ARM architecture: Size/MD5 checksum: 795738 5cb5570d9308ec0270ec721066bc9a1a Intel IA-32 architecture: Size/MD5 checksum: 746052 a24510c14cd5eff64df2a360be860da0 Intel IA-64 architecture: Size/MD5 checksum: 1301076 3f15410f621a926dc9ce794bbde4fa2d HP Precision architecture: Size/MD5 checksum: 988824 7bf8c648d68d018d278d20ae733c527e Motorola 680x0 architecture: Size/MD5 checksum: 679522 36cae2287e2df1b7f00d7d4bf742355c Big endian MIPS architecture: Size/MD5 checksum: 1034258 a2e63c5ca1c9a30767f8ea799b0e0b1a Little endian MIPS architecture: Size/MD5 checksum: 1032926 6b595928dce4c80eef44838b4ecb956f PowerPC architecture: Size/MD5 checksum: 802570 06eb933a77f1882abaad84f91da015c9 IBM S/390 architecture: Size/MD5 checksum: 769024 8607493ba453ce4561ffa9dc215e7291 Sun Sparc architecture: Size/MD5 checksum: 786378 09d61898b15b1a2fe26e173f09622789 These files will probably be moved into the stable distribution on its next revision. - --------------------------------------------------------------------------------- For apt-get: deb Debian -- Security Information stable/updates main For dpkg-ftp: dists/stable/updates/main Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. Package info: `apt-cache show ' and https://www.debian.org/distrib/packages . Critical Debian advisory DSA 415-1 reveals DoS vulnerabilities in zebra with recommended resolutions for updates.. Debian, zebra vulnerability, DoS attack, security update, update instructions. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Jan 07, 2004 Critical Debian
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":547,"type":"x","order":1,"pct":78.48,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.3,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.88,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.34,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here