Security: Dirty FUD, Microsoft Holes, USB Cables as a Risk

-
Dirty Sock vulnerability lets attackers gain root access on Linux systems [Ed: The CBS / ZDNet drama queen Cimpanu at it again with unnecessarily alarmist headlines. Local privilege escalation is not a major deal.]
-
Dirty_Sock vulnerability in Canonical's snapd could give root access on Linux machines
A security researcher has discovered a vulnerability in Canonical's snapd package which could be exploited to gain administrator privileges and root access to affected Linux systems. The security issue has been dubbed Dirty_Sock and assigned the code CVE-2019-7304.
Chris Moberly found a privilege escalation vulnerability in the snapd API. This is installed by default in Ubuntu -- under which proofs of concept have been tested and found to work "100% of the time on fresh, default installations of Ubuntu Server and Desktop" -- but may also be present in numerous other Linux distros.
-
It's now 2019, and your Windows DHCP server can be pwned by a packet, IE and Edge by a webpage, and so on
Microsoft and Adobe have teamed up to give users and sysadmins plenty of work to do this week.
The February edition of Patch Tuesday includes more than 70 CVE-listed vulnerabilities from each vendor – yes, each – as well as a critical security fix from Cisco. You should patch them as soon as it is possible.
-
Not So Innocent USB Cable Uses WiFi To Hack Your Device [Ed: As if people insert random cables into devices they already have physical access to. Might as well just steal them?]
-
Evil USB Cable Can Remotely Accept Commands From Hacker
-

- Login or register to post comments
Printer-friendly version- 2802 reads
PDF version
More in Tux Machines
- Highlights
- Front Page
- Latest Headlines
- Archive
- Recent comments
- All-Time Popular Stories
- Hot Topics
- New Members
digiKam 7.7.0 is released
After three months of active maintenance and another bug triage, the digiKam team is proud to present version 7.7.0 of its open source digital photo manager. See below the list of most important features coming with this release.
|
Dilution and Misuse of the "Linux" Brand
|
Samsung, Red Hat to Work on Linux Drivers for Future Tech
The metaverse is expected to uproot system design as we know it, and Samsung is one of many hardware vendors re-imagining data center infrastructure in preparation for a parallel 3D world.
Samsung is working on new memory technologies that provide faster bandwidth inside hardware for data to travel between CPUs, storage and other computing resources. The company also announced it was partnering with Red Hat to ensure these technologies have Linux compatibility.
|
today's howtos
|








.svg_.png)
Content (where original) is available under CC-BY-SA, copyrighted by original author/s.

Bogdan Popa again...
Canonical Patches Dirty Sock Vulnerability Affecting Ubuntu, Other Linux Distros [Ed: Shows what Microsoft thinks of Linux: "Microsoft Editor" in Softpedia keeps hijacking their Linux section only ever to spew FUD in there. Again today.]
Anyone reporting a security incident due to this? No. Not yet.
Oh Snapd! Gimme-root-now security bug lets miscreants sock it to your Ubuntu boxes