Ubuntu Security Notices دوشنبه ۱۸ آبان ۱۴۰۵ · ۲۰:۴۷

USN-9013-1: Fetchmail vulnerabilities

Christian Herdtweck discovered that Fetchmail incorrectly handled certain long log messages. A remote attacker could possibly use this issue to cause Fetchmail to crash, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2021-36386) It was discovered that the Fetchmail SMTP client incorrectly handled certain status code messages. An attacker contr…

Vulnerabilities & Zero-Day Botnet & DDoS Programming & Languages Identity & Access Security

Read the full article at Ubuntu Security Notices Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

Cisco Security Advisories دوشنبه ۱۸ آبان ۱۴۰۵ · ۲۱:۲۵

Cisco Meraki Security Hardening Release: October 2026

As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. These vulnerabilities were found during internal testing and are not known to be actively exploited. To assist customers in patching and streamline the disc…

Vulnerabilities & Zero-Day

Source

Proofpoint دوشنبه ۱۸ آبان ۱۴۰۵ · ۲۱:۰۹

BluePhishing: Initial Access via Third-Party Agent Blueprint Consent

Key TakeawaysMicrosoft Entra Agent Identity extends Entra to AI agents and closely mirrors the traditional application model, inheriting many of the same opportunities for abuse.Proofpoint researchers present “BluePhishing” as the next evolution of OAuth consent abuse, enabling attackers to leverage agent identities for initial access.Attackers can configure the blueprint with inheritable permissions and requiredReso…

Phishing Operating Systems Identity & Access Security

Source

CERT/CC Vulnerability Notes دوشنبه ۱۸ آبان ۱۴۰۵ · ۱۹:۵۱

VU#188754: FrodoBots EarthRover Mini+ firmware contains multiple vulnerabilities

Overview Multiple vulnerabilities in the FrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0) may allow remote code execution, unauthorized access to onboard sensors, disclosure of sensitive information, and full compromise of affected devices. Exploitation may enable an attacker to remotely control the rover, access audiovisual streams, or pivot into the user’s network. Description The FrodoBots EarthRo…

Vulnerabilities & Zero-Day IoT & OT Security Web Development

Source

Ubuntu Security Notices دوشنبه ۱۸ آبان ۱۴۰۵ · ۱۹:۴۵

USN-9011-1: pyasn1 vulnerabilities

It was discovered that pyasn1 did not properly bound the size of long-form tag identifiers when parsing BER, CER, or DER encoded data. An attacker could possibly use this issue to cause applications decoding untrusted ASN.1 data to consume excessive CPU resources, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2026-59884) It…

Vulnerabilities & Zero-Day Botnet & DDoS Programming & Languages

Source