Date of First Release: 2018-01-03. Source: Google, National Cybersecurity and Communications Integration Center (NCCIC). Product affected: Modern microprocessors (CPUs) which use speculative execution techniques to optimize performance including AMD, Apple, Arm, Google, Intel, Linux Kernel, Microsoft, Mozilla and other more. Overview: CPU hardware implementations are vulnerable to side-channel attacks. These vulnerabilities are …
Read More »Vmware Vsphere Data Protection (VDP) Vulnerability
Date of First Release: 10-01-2018 Source: VMware Product affected: vSphere Data Protection (VDP) running on the virtual machines Version 6.1.x, 6.0.x and 5.x Overview: VSphere Data Protection (VDP) contains multiple authentication bypass, arbitrary file upload and path traversal vulnerabilities. Description: VMware has release security advisory to address three critical vulnerabilities …
Read More »SSL 3.0 Protocol Vulnerability and POODLE Attack
TZCERT-2014-12: VULNERABILITY ALERT SSL 3.0 Protocol Vulnerability and POODLE Attack Date of First Release: 11-12-2014 Source: US-CERT, Symantec, IETF System Affected: All systems and applications utilizing the Secure Socket Layer (SSL) 3.0 with cipher-block chaining (CBC) mode ciphers may be vulnerable. However, the POODLE (Padding Oracle On Downgraded Legacy Encryption) …
Read More »OpenSSL Vulnerability by Man in The Middle (MITM) attack
TZCERT-2014-03: Vulnerability Alert OpenSSL Vulnerability by Man in The Middle (MITM) attack Date of First Release: 09-06-2014 Source: US-CERT, OpenSSL OS Affected: Fedora Project, FreeBSD Project, Debian GNU/Linux, OpenSSL, Red Hat, Inc., Ubuntu. Overview: A carefully crafted handshake can be used by an attackers to force the use of weak …
Read More »