16 new
3 updates..
:barf:
this one gonna hurt lots of peoples...
On October 19, 2016, a new vulnerability related to a race condition in the memory manager of the Linux Kernel was disclosed. This vulnerability could allow unprivileged, local users to gain write access to otherwise read-only memory mappings to increase their privileges on the system.
and the ISE one looks like it's gonna hurt.
A vulnerability in the web framework code of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary SQL commands on the database.
The vulnerability is due to insufficient controls on Structured Query Language (SQL) statements. An attacker could exploit this vulnerability by sending crafted URLs that contain malicious SQL statements to the affected system. An exploit could allow the attacker to determine the presence of certain values in the database.
Cisco has not released software updates that address this vulnerability. Workarounds that address this vulnerability are not available.
Yay me using ForeScout CounterACT for NAC!
Where do you guys go to get regular updates on these advisories?
Quote from: mmcgurty on October 31, 2016, 03:24:35 PM
Where do you guys go to get regular updates on these advisories?
https://tools.cisco.com/security/center/publicationListing.x
There is also an RSS Feed here.
https://tools.cisco.com/security/center/psirtrss20/CiscoSecurityAdvisory.xml