logo
DATABASE RESOURCES PRICING ABOUT US

Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities

2021-01-27T00:04:50

Description

## Summary The product includes vulnerable components (e.g., framework libraries) that may be identified and exploited with automated tools. ## Vulnerability Details ** CVEID: **[CVE-2019-19126](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19126>) ** DESCRIPTION: **GNU C Library could allow a local attacker to bypass security restrictions, caused by failing to ignore the LD_PREFER_MAP_32BIT_EXEC environment variable during program execution. An attacker could exploit this vulnerability to bypass ASLR for a setuid program. CVSS Base score: 4 CVSS Temporal Score: See: [ https://exchange.xforce.ibmcloud.com/vulnerabilities/172003](<https://exchange.xforce.ibmcloud.com/vulnerabilities/172003>) for the current score. CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) ** CVEID: **[CVE-2020-10754](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10754>) ** DESCRIPTION: **NetworkManager could allow a remote authenticated attacker to bypass security restrictions, caused by improper configuration in the nmcli. By connecting to a network, an attacker could exploit this vulnerability to bypass authentication. CVSS Base score: 4.3 CVSS Temporal Score: See: [ https://exchange.xforce.ibmcloud.com/vulnerabilities/184636](<https://exchange.xforce.ibmcloud.com/vulnerabilities/184636>) for the current score. CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) ** CVEID: **[CVE-2019-19956](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19956>) ** DESCRIPTION: **libxml2 is vulnerable to a denial of service, caused by a memory leak in xmlParseBalancedChunkMemoryRecover in parser.c. By persuading a victim to open a specially crafted file, a remote attacker could exploit this vulnerability to cause the application to crash. CVSS Base score: 3.3 CVSS Temporal Score: See: [ https://exchange.xforce.ibmcloud.com/vulnerabilities/173518](<https://exchange.xforce.ibmcloud.com/vulnerabilities/173518>) for the current score. CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) ** CVEID: **[CVE-2019-20388](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20388>) ** DESCRIPTION: **GNOME libxml2 could allow a remote attacker to obtain sensitive information, caused by a xmlSchemaValidateStream memory leak in xmlSchemaPreRun in xmlschemas.c. By persuading a victim to open a specially crafted file, an attacker could exploit this vulnerability to obtain sensitive information. CVSS Base score: 3.3 CVSS Temporal Score: See: [ https://exchange.xforce.ibmcloud.com/vulnerabilities/175539](<https://exchange.xforce.ibmcloud.com/vulnerabilities/175539>) for the current score. CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) ** CVEID: **[CVE-2020-7595](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7595>) ** DESCRIPTION: **The Gnome Project Libxml2 is vulnerable to a denial of service, caused by an error in xmlStringLenDecodeEntities in parser.c. An attacker could exploit this vulnerability to cause the application to enter into an infinite loop. CVSS Base score: 7.5 CVSS Temporal Score: See: [ https://exchange.xforce.ibmcloud.com/vulnerabilities/175333](<https://exchange.xforce.ibmcloud.com/vulnerabilities/175333>) for the current score. CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) ** CVEID: **[CVE-2019-5482](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5482>) ** DESCRIPTION: **cURL libcurl is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by the tftp_receive_packet function. By sending specially-crafted request containing an OACK without the BLKSIZE option, a remote attacker could overflow a buffer and execute arbitrary code on the system. CVSS Base score: 6.3 CVSS Temporal Score: See: [ https://exchange.xforce.ibmcloud.com/vulnerabilities/166942](<https://exchange.xforce.ibmcloud.com/vulnerabilities/166942>) for the current score. CVSS Vector: (CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) ** CVEID: **[CVE-2018-20843](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20843>) ** DESCRIPTION: **libexpat is vulnerable to a denial of service, caused by an error in the XML parser. By persuading a victim to open a specially-crafted file, a remote attacker could exploit this vulnerability to consume all available CPU resources. CVSS Base score: 3.3 CVSS Temporal Score: See: [ https://exchange.xforce.ibmcloud.com/vulnerabilities/163073](<https://exchange.xforce.ibmcloud.com/vulnerabilities/163073>) for the current score. CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) ** CVEID: **[CVE-2019-15903](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15903>) ** DESCRIPTION: **libexpat is vulnerable to a denial of service, caused by a heap-based buffer over-read in XML_GetCurrentLineNumber. By using a specially-crafted XML input, a remote attacker could exploit this vulnerability to cause the application to crash. CVSS Base score: 5.3 CVSS Temporal Score: See: [ https://exchange.xforce.ibmcloud.com/vulnerabilities/166560](<https://exchange.xforce.ibmcloud.com/vulnerabilities/166560>) for the current score. CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) ** CVEID: **[CVE-2019-20386](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20386>) ** DESCRIPTION: **systemd is vulnerable to a denial of service, caused by a memory leak in the button_open function in login/logind-button.c. By executing the udevadm trigger command, a local attacker could exploit this vulnerability to cause a denial of service condition. CVSS Base score: 6.2 CVSS Temporal Score: See: [ https://exchange.xforce.ibmcloud.com/vulnerabilities/175507](<https://exchange.xforce.ibmcloud.com/vulnerabilities/175507>) for the current score. CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) ** CVEID: **[CVE-2019-16935](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16935>) ** DESCRIPTION: **Python is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the python/Lib/DocXMLRPCServer.py. A remote attacker could exploit this vulnerability using the server_title field to inject malicious script into a Web page which would be executed in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials. CVSS Base score: 6.1 CVSS Temporal Score: See: [ https://exchange.xforce.ibmcloud.com/vulnerabilities/168612](<https://exchange.xforce.ibmcloud.com/vulnerabilities/168612>) for the current score. CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) ** CVEID: **[CVE-2020-8492](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8492>) ** DESCRIPTION: **Python is vulnerable to a denial of service, caused by a flaw in the urllib.request.AbstractBasicAuthHandler. By sending a specially crafted request, a remote attacker could exploit this vulnerability to cause a Regular Expression Denial of Service (ReDoS). CVSS Base score: 5.3 CVSS Temporal Score: See: [ https://exchange.xforce.ibmcloud.com/vulnerabilities/175462](<https://exchange.xforce.ibmcloud.com/vulnerabilities/175462>) for the current score. CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) ** CVEID: **[CVE-2019-17498](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17498>) ** DESCRIPTION: **libssh2 is vulnerable to a denial of service, caused by an out-of-bounds read when connecting to a malicious SSH server that sends a disconnect message. A remote attacker could exploit this vulnerability to cause a denial of service or obtain sensitive information. CVSS Base score: 6.5 CVSS Temporal Score: See: [ https://exchange.xforce.ibmcloud.com/vulnerabilities/169461](<https://exchange.xforce.ibmcloud.com/vulnerabilities/169461>) for the current score. CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L) ** CVEID: **[CVE-2019-2974](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-2974>) ** DESCRIPTION: **An unspecified vulnerability in product related to the Server Oracle MySQL component could allow an authenticated attacker to cause a denial of service resulting in a high availability impact using unknown attack vectors. CVSS Base score: 6.5 CVSS Temporal Score: See: [ https://exchange.xforce.ibmcloud.com/vulnerabilities/169280](<https://exchange.xforce.ibmcloud.com/vulnerabilities/169280>) for the current score. CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) ** CVEID: **[CVE-2020-2574](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2574>) ** DESCRIPTION: **An unspecified vulnerability in Oracle MySQL related to the Client C API component could allow an unauthenticated attacker to cause a denial of service resulting in a high availability impact using unknown attack vectors. CVSS Base score: 5.9 CVSS Temporal Score: See: [ https://exchange.xforce.ibmcloud.com/vulnerabilities/174523](<https://exchange.xforce.ibmcloud.com/vulnerabilities/174523>) for the current score. CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) ** CVEID: **[CVE-2020-2752](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2752>) ** DESCRIPTION: **An unspecified vulnerability in Oracle MySQL related to the Client C API component could allow an authenticated attacker to cause a denial of service resulting in a high availability impact using unknown attack vectors. CVSS Base score: 5.3 CVSS Temporal Score: See: [ https://exchange.xforce.ibmcloud.com/vulnerabilities/179652](<https://exchange.xforce.ibmcloud.com/vulnerabilities/179652>) for the current score. CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H) ** CVEID: **[CVE-2020-2780](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2780>) ** DESCRIPTION: **An unspecified vulnerability in Oracle MySQL related to the Server Server: DML component could allow an authenticated attacker to cause a denial of service resulting in a high availability impact using unknown attack vectors. CVSS Base score: 6.5 CVSS Temporal Score: See: [ https://exchange.xforce.ibmcloud.com/vulnerabilities/179680](<https://exchange.xforce.ibmcloud.com/vulnerabilities/179680>) for the current score. CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) ** CVEID: **[CVE-2020-2812](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2812>) ** DESCRIPTION: **An unspecified vulnerability in Oracle MySQL related to the Server Server: Stored Procedure component could allow an authenticated attacker to cause a denial of service resulting in a high availability impact using unknown attack vectors. CVSS Base score: 4.9 CVSS Temporal Score: See: [ https://exchange.xforce.ibmcloud.com/vulnerabilities/179710](<https://exchange.xforce.ibmcloud.com/vulnerabilities/179710>) for the current score. CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) ** CVEID: **[CVE-2019-14907](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14907>) ** DESCRIPTION: **Samba is vulnerable to a denial of service, caused by an error after a failed character conversion at log level 3 or above. By sending a specially crafted string during the NTLMSSP authentication exchange, an attacker could exploit this vulnerability to cause a long-lived process to terminate. CVSS Base score: 6.5 CVSS Temporal Score: See: [ https://exchange.xforce.ibmcloud.com/vulnerabilities/174912](<https://exchange.xforce.ibmcloud.com/vulnerabilities/174912>) for the current score. CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) ** CVEID: **[CVE-2019-14866](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14866>) ** DESCRIPTION: **GNU cpio could allow a local authenticated attacker to gain elevated privileges on the system, caused by the failure to properly validate input files when generating TAR archives. An attacker could exploit this vulnerability to inject any tar content and compromise the system. CVSS Base score: 6.7 CVSS Temporal Score: See: [ https://exchange.xforce.ibmcloud.com/vulnerabilities/171509](<https://exchange.xforce.ibmcloud.com/vulnerabilities/171509>) for the current score. CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) ## Affected Products and Versions IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1 IBM QRadar SIEM 7.4.0 to 7.4.1 Patch 1 IBM QRadar SIEM 7.3.0 to 7.3.3 Patch 5 ## Remediation/Fixes [QRadar / QRM / QVM 7.4.2 Patch 2](<https://www.ibm.com/support/fixcentral/swg/downloadFixes?parent=IBM%20Security&product=ibm/Other+software/IBM+Security+QRadar+Vulnerability+Manager&release=All&platform=All&function=fixId&fixids=7.4.2-QRADAR-QRSIEM-20210120225428&includeRequisites=1&includeSupersedes=0&downloadMethod=http&source=SAR> "QRadar / QRM / QVM 7.4.2 Patch 2" ) [QRadar / QRM / QVM 7.4.1 Patch 2](<https://www.ibm.com/support/fixcentral/swg/downloadFixes?parent=IBM%20Security&product=ibm/Other+software/IBM+Security+QRadar+SIEM&release=All&platform=Linux&function=fixId&fixids=7.4.1-QRADAR-QRSIEM-20201112005343&includeRequisites=1&includeSupersedes=0&downloadMethod=http> "QRadar / QRM / QVM / QRIF / QNI 7.4.1 Patch 2" ) [QRadar / QRM / QVM 7.3.3 Patch 7](<https://www.ibm.com/support/fixcentral/swg/downloadFixes?parent=IBM%20Security&product=ibm/Other+software/IBM+Security+QRadar+SIEM&release=All&platform=Linux&function=fixId&fixids=7.3.3-QRADAR-QRSIEM-20210111145446&includeRequisites=1&includeSupersedes=0&downloadMethod=http&login=true> "QRadar / QRM / QVM / QRIF / QNI 7.3.3 Patch 7" ) QRadar incident forensics please use the SFS below [QRadar Incident Forensics / QNI 7.4.2 Patch 2](<https://www.ibm.com/support/fixcentral/swg/downloadFixes?parent=IBM%20Security&product=ibm/Other+software/IBM+Security+QRadar+Incident+Forensics&release=All&platform=Linux&function=fixId&fixids=7.4.2-QRADAR-QIFSFS-20210120225428&includeRequisites=1&includeSupersedes=0&downloadMethod=http> "QRadar Incident Forensics / QNI 7.4.2 Patch 2" ) [QRadar Incident Forensics / QNI 7.4.1 Patch 2](<https://www.ibm.com/support/fixcentral/swg/downloadFixes?parent=IBM%20Security&product=ibm/Other+software/IBM+Security+QRadar+Incident+Forensics&release=All&platform=Linux&function=fixId&fixids=7.4.1-QRADAR-QIFSFS-20201112005343&includeRequisites=1&includeSupersedes=0&downloadMethod=http> "QRadar Incident Forensics / QNI 7.4.1 Patch 2" ) [QRadar Incident Forensics / QNI 7.3.3 Patch 7](<https://www.ibm.com/support/fixcentral/swg/downloadFixes?parent=IBM%20Security&product=ibm/Other+software/IBM+Security+QRadar+Incident+Forensics&release=All&platform=Linux&function=fixId&fixids=7.3.3-QRADAR-QRSIEM-20210111145446&includeRequisites=1&includeSupersedes=0&downloadMethod=http> "QRadar Incident Forensics / QNI 7.3.3 Patch 7" ) ## Workarounds and Mitigations None ## Get Notified about Future Security Bulletins Subscribe to [My Notifications](< http://www-01.ibm.com/software/support/einfo.html>) to be notified of important product support alerts like this. ### References [Complete CVSS v3 Guide](<http://www.first.org/cvss/user-guide> "Link resides outside of ibm.com" ) [On-line Calculator v3](<http://www.first.org/cvss/calculator/3.0> "Link resides outside of ibm.com" ) Off ## Related Information [IBM Secure Engineering Web Portal](<http://www.ibm.com/security/secure-engineering/bulletins.html>) [IBM Product Security Incident Response Blog](<http://www.ibm.com/blogs/psirt>) ## Change History 26 Jan 2021: Initial Publication *The CVSS Environment Score is customer environment specific and will ultimately impact the Overall CVSS Score. Customers can evaluate the impact of this vulnerability in their environments by accessing the links in the Reference section of this Security Bulletin. ## Disclaimer Review the [IBM security bulletin disclaimer and definitions](<https://www.ibm.com/support/pages/node/6610583#disclaimer>) regarding your responsibilities for assessing potential impact of security vulnerabilities to your environment. ## Document Location Worldwide [{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"Component":"","Platform":[{"code":"PF016","label":"Linux"}],"Version":"7.3, 7.4","Edition":"All Editions","Line of Business":{"code":"LOB24","label":"Security Software"}}]


Affected Software


CPE Name Name Version
ibm security qradar siem 7.3
ibm security qradar siem 7.4

Related


ibm
software

Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities

2021-02-02T22:11:04
ibm
software

Security Bulletin: IBM MQ Appliance is affected by libxml2 vulnerabilities (CVE-2019-19956, CVE-2019-20388, CVE-2020-7595)

2021-01-20T12:25:59
ibm
software

Security Bulletin: IBM Bootable Media Creator (BoMC) is affected by vulnerabilities in libxml2

2021-06-21T20:35:29
ibm
software

Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by vulnerabilities in Libxml2

2021-03-15T16:27:07
ibm
software

Security Bulletin: IBM BladeCenter Advanced Management Module (AMM) is affected by vulnerabilities in Libxml2

2021-03-11T19:45:15
ibm
software

Security Bulletin: Multiple Security Vulnerabilties have been fixed in the IBM Security Access Manager and IBM Security Verify Access appliances.

2021-03-16T19:55:05
ibm
software

Security Bulletin: IBM MQ Appliance is affected by libexpat vulnerabilities (CVE-2018-20843, CVE-2019-15903)

2021-03-03T16:02:39
ibm
software

Security Bulletin: IBM Bootable Media Creator (BoMC) is affected by vulnerabilities in libexpat

2021-06-21T20:26:43
ibm
software

Security Bulletin: IBM RackSwitch firmware products are affected by vulnerabilities in Libxml2

2021-03-17T18:07:33
ibm
software

Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities

2021-01-27T00:05:57
ibm
software

Security Bulletin: IBM QRadar Network Security is affected by multiple vulnerabilities.

2022-07-19T21:43:48
ibm
software

Security Bulletin: IBM MQ Appliance is affected by a systemd vulnerability (CVE-2019-20386)

2021-03-03T15:55:01
nessus
scanner

Scientific Linux Security Update : mariadb on SL7.x x86_64 (20201001)

2020-10-21T00:00:00
nessus
scanner

CentOS 7 : mariadb (CESA-2020:4026)

2020-10-20T00:00:00
nessus
scanner

NewStart CGSL CORE 5.04 / MAIN 5.04 : mariadb Multiple Vulnerabilities (NS-SA-2021-0023)

2021-03-10T00:00:00
nessus
scanner

NewStart CGSL CORE 5.05 / MAIN 5.05 : mariadb Multiple Vulnerabilities (NS-SA-2021-0162)

2021-10-28T00:00:00
nessus
scanner

RHEL 7 : mariadb (RHSA-2020:4026)

2020-09-29T00:00:00
nessus
scanner

RHEL 8 : libxml2 (RHSA-2020:4479)

2020-11-19T00:00:00
nessus
scanner

Oracle Linux 8 : libxml2 (ELSA-2020-4479)

2020-11-12T00:00:00
nessus
scanner

Scientific Linux Security Update : libxml2 on SL7.x x86_64 (20201001)

2020-10-21T00:00:00
nessus
scanner

Amazon Linux AMI : libxml2 (ALAS-2020-1438)

2020-10-27T00:00:00
nessus
scanner

Fedora 30 : libxml2 (2020-0c71c00af4)

2020-04-30T00:00:00
nessus
scanner

NewStart CGSL MAIN 6.02 : libxml2 Multiple Vulnerabilities (NS-SA-2021-0061)

2021-03-10T00:00:00
nessus
scanner

NewStart CGSL CORE 5.04 / MAIN 5.04 : libxml2 Multiple Vulnerabilities (NS-SA-2021-0016)

2021-03-10T00:00:00
nessus
scanner

NewStart CGSL CORE 5.05 / MAIN 5.05 : libxml2 Multiple Vulnerabilities (NS-SA-2021-0148)

2021-10-28T00:00:00
nessus
scanner

EulerOS 2.0 SP2 : libxml2 (EulerOS-SA-2020-1670)

2020-06-17T00:00:00
nessus
scanner

EulerOS 2.0 SP3 : libxml2 (EulerOS-SA-2020-1408)

2020-04-15T00:00:00
nessus
scanner

CentOS 8 : libxml2 (CESA-2020:4479)

2021-02-01T00:00:00
nessus
scanner

EulerOS Virtualization for ARM 64 3.0.2.0 : libxml2 (EulerOS-SA-2020-1533)

2020-05-01T00:00:00
nessus
scanner

Amazon Linux 2 : libxml2 (ALAS-2020-1534)

2020-10-28T00:00:00
nessus
scanner

openSUSE Security Update : libxml2 (openSUSE-2020-681)

2020-05-26T00:00:00
nessus
scanner

SUSE SLED15 / SLES15 Security Update : libxml2 (SUSE-SU-2020:1299-1)

2020-05-22T00:00:00
nessus
scanner

CentOS 7 : libxml2 (CESA-2020:3996)

2020-10-20T00:00:00
nessus
scanner

RHEL 7 : libxml2 (RHSA-2020:3996)

2020-09-29T00:00:00
nessus
scanner

AlmaLinux 8 : libxml2 (ALSA-2020:4479)

2022-02-09T00:00:00
nessus
scanner

SUSE SLES12 Security Update : libxml2 (SUSE-SU-2020:2609-1)

2020-12-09T00:00:00
nessus
scanner

RHEL 6 / 7 : Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP3 (RHSA-2020:2644)

2020-06-22T00:00:00
nessus
scanner

Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-20201105.1021)

2022-09-01T00:00:00
nessus
scanner

GLSA-202010-04 : libxml2: Multiple vulnerabilities

2020-10-21T00:00:00
nessus
scanner

Fedora 31 : libxml2 (2020-41fe1680f6)

2020-02-18T00:00:00
nessus
scanner

Photon OS 3.0: Libxml2 PHSA-2020-3.0-0055

2020-02-06T00:00:00
nessus
scanner

Ubuntu 16.04 LTS / 18.04 LTS / 19.10 : libxml2 vulnerabilities (USN-4274-1)

2020-02-12T00:00:00
nessus
scanner

Photon OS 1.0: Libxml2 PHSA-2020-1.0-0271

2020-02-06T00:00:00
nessus
scanner

Amazon Linux AMI : expat (ALAS-2021-1459)

2021-01-14T00:00:00
nessus
scanner

CentOS 8 : expat (CESA-2020:4484)

2021-02-01T00:00:00
nessus
scanner

GLSA-201911-08 : Expat: Multiple vulnerabilities

2019-11-25T00:00:00
nessus
scanner

NewStart CGSL MAIN 6.02 : expat Multiple Vulnerabilities (NS-SA-2021-0083)

2021-03-10T00:00:00
nessus
scanner

NewStart CGSL CORE 5.04 / MAIN 5.04 : expat Multiple Vulnerabilities (NS-SA-2021-0026)

2021-03-10T00:00:00
nessus
scanner

AlmaLinux 8 : expat (ALSA-2020:4484)

2022-02-09T00:00:00
nessus
scanner

CentOS 7 : expat (CESA-2020:3952)

2020-10-20T00:00:00
nessus
scanner

Oracle Linux 7 : expat (ELSA-2020-3952)

2020-10-07T00:00:00
nessus
scanner

RHEL 8 : expat (RHSA-2020:4484)

2020-11-19T00:00:00
nessus
scanner

Amazon Linux 2 : expat (ALAS-2020-1513)

2020-10-28T00:00:00
nessus
scanner

Amazon Linux AMI : expat (ALAS-2020-1460) (deprecated)

2020-12-18T00:00:00
nessus
scanner

Oracle Linux 8 : expat (ELSA-2020-4484)

2020-11-12T00:00:00
nessus
scanner

Scientific Linux Security Update : expat on SL7.x x86_64 (20201001)

2020-10-21T00:00:00
nessus
scanner

RHEL 7 : expat (RHSA-2020:3952)

2020-09-29T00:00:00
nessus
scanner

NewStart CGSL CORE 5.05 / MAIN 5.05 : expat Multiple Vulnerabilities (NS-SA-2021-0175)

2021-10-27T00:00:00
nessus
scanner

Amazon Linux 2 : mariadb (ALAS-2020-1537)

2020-10-28T00:00:00
nessus
scanner

Oracle Linux 7 : python3 (ELSA-2020-3888)

2020-10-07T00:00:00
nessus
scanner

Scientific Linux Security Update : python3 on SL7.x x86_64 (20201001)

2020-10-21T00:00:00
nessus
scanner

CentOS 7 : python3 (CESA-2020:3888)

2020-10-20T00:00:00
nessus
scanner

RHEL 7 : python3 (RHSA-2020:3888)

2020-09-29T00:00:00
nessus
scanner

Slackware 14.1 / current : mariadb (SSA:2020-133-01)

2020-05-13T00:00:00
nessus
scanner

SUSE SLES12 Security Update : mariadb-100 (SUSE-SU-2020:1798-1)

2020-07-09T00:00:00
nessus
scanner

MariaDB 5.5.0 < 5.5.68 Multiple Vulnerabilities

2020-07-03T00:00:00
nessus
scanner

FreeBSD : libxml -- multiple vulnerabilities (f5abafc0-fcf6-11ea-8758-e0d55e2a8bf9)

2020-09-23T00:00:00
nessus
scanner

EulerOS 2.0 SP3 : mariadb (EulerOS-SA-2021-1815)

2021-04-30T00:00:00
nessus
scanner

MariaDB 10.1.x < 10.1.42 Denial Of Service Vulnerability

2019-11-26T00:00:00
nessus
scanner

MariaDB 5.5.x < 5.5.66 Denial of Service Vulnerability

2019-12-17T00:00:00
nessus
scanner

MariaDB 10.1.0 < 10.1.45 Multiple Vulnerabilities

2020-07-03T00:00:00
nessus
scanner

Oracle Linux 8 : mariadb:10.3 (ELSA-2020-5500)

2020-12-18T00:00:00
nessus
scanner

CentOS 8 : mariadb:10.3 (CESA-2020:5500)

2021-02-01T00:00:00
nessus
scanner

Debian DLA-2369-1 : libxml2 security update

2020-09-10T00:00:00
nessus
scanner

EulerOS Virtualization for ARM 64 3.0.2.0 : mariadb (EulerOS-SA-2021-1055)

2021-01-05T00:00:00
nessus
scanner

RHEL 8 : python3 (RHSA-2020:4433)

2020-11-04T00:00:00
nessus
scanner

Oracle Linux 8 : python3 (ELSA-2020-4433)

2020-11-12T00:00:00
nessus
scanner

CentOS 8 : python3 (CESA-2020:4433)

2021-02-01T00:00:00
nessus
scanner

NewStart CGSL CORE 5.05 / MAIN 5.05 : python3 Multiple Vulnerabilities (NS-SA-2021-0147)

2021-10-27T00:00:00
nessus
scanner

NewStart CGSL CORE 5.04 / MAIN 5.04 : python3 Multiple Vulnerabilities (NS-SA-2021-0029)

2021-03-10T00:00:00
nessus
scanner

NewStart CGSL MAIN 6.02 : python3 Multiple Vulnerabilities (NS-SA-2021-0059)

2021-03-10T00:00:00
nessus
scanner

AlmaLinux 8 : python3 (ALSA-2020:4433)

2022-02-09T00:00:00
nessus
scanner

MariaDB 10.3.x < 10.3.19 Multiple Denial of Service Vulnerabilities

2019-12-13T00:00:00
nessus
scanner

MariaDB 10.4.x < 10.4.9 Multiple Denial of Service Vulnerabilities

2019-12-13T00:00:00
nessus
scanner

MariaDB 10.2.x < 10.2.28 Multiple Denial of Service Vulnerabilities

2019-12-13T00:00:00
nessus
scanner

Oracle Linux 8 : ELSA-2020-5503-1: / mariadb-connector-c (ELSA-2020-55031)

2020-12-17T00:00:00
nessus
scanner

CentOS 8 : mariadb-connector-c (CESA-2020:5503)

2021-02-01T00:00:00
nessus
scanner

SUSE SLES11 Security Update : libxml2 (SUSE-SU-2021:14729-1)

2021-06-10T00:00:00
nessus
scanner

GLSA-202012-08 : MariaDB: Multiple vulnerabilities

2020-12-07T00:00:00
nessus
scanner

MySQL 5.6.x < 5.6.48 Multiple Vulnerabilities (Apr 2020 CPU)

2020-04-17T00:00:00
nessus
scanner

RHEL 7 : systemd (RHSA-2020:4007)

2020-09-29T00:00:00
nessus
scanner

RHEL 8 : systemd (RHSA-2020:4553)

2020-11-04T00:00:00
nessus
scanner

Scientific Linux Security Update : systemd on SL7.x x86_64 (20201001)

2020-10-21T00:00:00
nessus
scanner

CentOS 8 : systemd (CESA-2020:4553)

2021-02-01T00:00:00
nessus
scanner

Photon OS 2.0: Systemd PHSA-2020-2.0-0236

2020-05-05T00:00:00
nessus
scanner

Photon OS 1.0: Systemd PHSA-2020-1.0-0290

2020-04-29T00:00:00
nessus
scanner

Oracle Linux 7 : systemd (ELSA-2020-4007)

2020-10-07T00:00:00
nessus
scanner

CentOS 7 : systemd (CESA-2020:4007)

2020-10-20T00:00:00
nessus
scanner

SUSE SLES12 Security Update : systemd (SUSE-SU-2020:1842-1)

2020-07-09T00:00:00
nessus
scanner

Oracle Linux 8 : systemd (ELSA-2020-4553)

2020-11-12T00:00:00
nessus
scanner

NewStart CGSL CORE 5.05 / MAIN 5.05 : NetworkManager Vulnerability (NS-SA-2021-0174)

2021-10-27T00:00:00
nessus
scanner

Fedora 32 : 1:NetworkManager (2020-3857463d30)

2020-06-04T00:00:00
nessus
scanner

Fedora 31 : 1:NetworkManager (2020-ace543feff)

2020-06-17T00:00:00
nessus
scanner

CentOS 8 : NetworkManager (CESA-2020:3011)

2021-02-01T00:00:00
nessus
scanner

EulerOS Virtualization for ARM 64 3.0.6.0 : NetworkManager (EulerOS-SA-2021-1529)

2021-03-04T00:00:00
nessus
scanner

CentOS 7 : NetworkManager (CESA-2020:4003)

2020-10-20T00:00:00
nessus
scanner

EulerOS 2.0 SP9 : NetworkManager (EulerOS-SA-2020-2486)

2020-12-01T00:00:00
nessus
scanner

Oracle Linux 7 : NetworkManager (ELSA-2020-4003)

2020-10-07T00:00:00
oraclelinux
unix

mariadb security and bug fix update

2020-10-06T00:00:00
oraclelinux
unix

libxml2 security update

2020-11-10T00:00:00
oraclelinux
unix

libxml2 security and bug fix update

2020-10-06T00:00:00
oraclelinux
unix

expat security update

2020-11-10T00:00:00
oraclelinux
unix

expat security update

2020-10-06T00:00:00
oraclelinux
unix

python3 security update

2020-10-06T00:00:00
oraclelinux
unix

mariadb:10.3 security, bug fix, and enhancement update

2020-12-18T00:00:00
oraclelinux
unix

python3 security and bug fix update

2020-11-10T00:00:00
oraclelinux
unix

mariadb-connector-c security, bug fix, and enhancement update

2020-12-18T00:00:00
oraclelinux
unix

systemd security and bug fix update

2020-10-06T00:00:00
oraclelinux
unix

systemd security, bug fix, and enhancement update

2020-11-10T00:00:00
redhat
unix

(RHSA-2020:4026) Moderate: mariadb security and bug fix update

2020-09-29T07:52:34
redhat
unix

(RHSA-2020:4479) Moderate: libxml2 security update

2020-11-03T12:08:23
redhat
unix

(RHSA-2020:3996) Moderate: libxml2 security and bug fix update

2020-09-29T07:49:53
redhat
unix

(RHSA-2020:2646) Important: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP3 security update

2020-06-22T13:04:38
redhat
unix

(RHSA-2020:2644) Important: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP3 security update

2020-06-22T12:14:48
redhat
unix

(RHSA-2020:3952) Moderate: expat security update

2020-09-29T07:46:19
redhat
unix

(RHSA-2020:4484) Moderate: expat security update

2020-11-03T12:09:00
redhat
unix

(RHSA-2020:3888) Moderate: python3 security update

2020-09-29T07:40:56
redhat
unix

(RHSA-2020:4264) Low: OpenShift Container Platform 4.3.40 security and bug fix update

2020-10-20T21:25:42
redhat
unix

(RHSA-2020:4255) Moderate: security update - Red Hat Ansible Tower 3.6 runner release (CVE-2019-18874)

2020-10-14T12:51:09
redhat
unix

(RHSA-2020:4254) Moderate: security update - Red Hat Ansible Tower 3.7 runner release (CVE-2019-18874)

2020-10-14T12:50:53
redhat
unix

(RHSA-2021:0949) Low: Red Hat OpenShift Do openshift/odo-init-image 1.1.3 security update

2021-03-22T09:48:51
redhat
unix

(RHSA-2020:4433) Moderate: python3 security and bug fix update

2020-11-03T12:04:08
redhat
unix

(RHSA-2020:4553) Low: systemd security, bug fix, and enhancement update

2020-11-03T12:15:17
redhat
unix

(RHSA-2020:4007) Low: systemd security and bug fix update

2020-09-29T07:51:11
redhat
unix

(RHSA-2020:3011) Moderate: NetworkManager security and bug fix update

2020-07-21T10:21:40
centos
unix

mariadb security update

2020-10-20T18:30:49
centos
unix

libxml2 security update

2020-10-20T18:27:26
centos
unix

expat security update

2020-10-20T17:58:03
centos
unix

python3 security update

2020-10-20T18:48:39
centos
unix

libgudev1, systemd security update

2020-10-20T19:02:15
almalinux
unix

Moderate: libxml2 security update

2020-11-03T12:08:23
almalinux
unix

Moderate: expat security update

2020-11-03T12:09:00
almalinux
unix

Important: mariadb:10.3 security, bug fix, and enhancement update

2020-12-15T16:03:43
almalinux
unix

Moderate: python3 security and bug fix update

2020-11-03T12:04:08
almalinux
unix

Moderate: mariadb-connector-c security, bug fix, and enhancement update

2020-12-15T16:04:12
openvas
scanner

Fedora: Security Advisory for mingw-libxml2 (FEDORA-2020-7694e8be73)

2020-05-02T00:00:00
openvas
scanner

openSUSE: Security Advisory for libxml2 (openSUSE-SU-2020:0681-1)

2020-05-23T00:00:00
openvas
scanner

Fedora: Security Advisory for libxml2 (FEDORA-2020-0c71c00af4)

2020-04-30T00:00:00
openvas
scanner

Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2020-1408)

2020-04-16T00:00:00
openvas
scanner

Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2020-1670)

2020-06-16T00:00:00
openvas
scanner

Fedora: Security Advisory for libxml2 (FEDORA-2020-41fe1680f6)

2020-02-16T00:00:00
openvas
scanner

Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2020-1533)

2020-04-30T00:00:00
openvas
scanner

Ubuntu: Security Advisory for libxml2 (USN-4274-1)

2020-02-11T00:00:00
openvas
scanner

Fedora: Security Advisory for NetworkManager (FEDORA-2020-ace543feff)

2020-06-23T00:00:00
openvas
scanner

Fedora: Security Advisory for NetworkManager (FEDORA-2020-3857463d30)

2020-06-07T00:00:00
fedora
unix

[SECURITY] Fedora 30 Update: libxml2-2.9.10-3.fc30

2020-04-30T02:51:35
fedora
unix

[SECURITY] Fedora 32 Update: mingw-libxml2-2.9.10-1.fc32

2020-05-01T04:08:08
fedora
unix

[SECURITY] Fedora 31 Update: mingw-libxml2-2.9.10-3.fc31

2020-09-19T22:45:29
fedora
unix

[SECURITY] Fedora 31 Update: libxml2-2.9.10-3.fc31

2020-02-15T02:18:36
fedora
unix

[SECURITY] Fedora 32 Update: libxml2-2.9.10-7.fc32

2020-09-16T14:44:56
fedora
unix

[SECURITY] Fedora 32 Update: mariadb-connector-c-3.1.8-1.fc32

2020-06-16T01:32:44
fedora
unix

[SECURITY] Fedora 32 Update: galera-26.4.4-2.fc32

2020-06-16T01:32:43
fedora
unix

[SECURITY] Fedora 32 Update: mariadb-10.4.13-1.fc32

2020-06-16T01:32:44
fedora
unix

[SECURITY] Fedora 31 Update: galera-25.3.31-1.fc31

2020-11-11T01:32:31
fedora
unix

[SECURITY] Fedora 31 Update: mariadb-10.3.26-1.fc31

2020-11-11T01:32:31
fedora
unix

[SECURITY] Fedora 31 Update: mariadb-connector-c-3.1.11-1.fc31

2020-11-11T01:32:32
amazon
unix

Medium: libxml2

2020-10-26T18:09:00
amazon
unix

Medium: libxml2

2020-10-22T18:25:00
amazon
unix

Medium: expat

2020-12-16T20:31:00
amazon
unix

Medium: expat

2021-01-12T22:51:00
amazon
unix

Medium: expat

2020-10-22T17:32:00
amazon
unix

Important: mariadb

2020-10-22T18:28:00
suse
unix

Security update for libxml2 (moderate)

2020-05-23T00:00:00
gentoo
unix

libxml2: Multiple vulnerabilities

2020-10-20T00:00:00
gentoo
unix

Expat: Multiple vulnerabilities

2019-11-25T00:00:00
gentoo
unix

MariaDB: Multiple vulnerabilities

2020-12-07T00:00:00
mageia
unix

Updated libxml2_2 packages fix security vulnerabilities

2020-02-24T21:44:46
mageia
unix

Updated mariadb packages fix security vulnerability

2020-07-07T11:13:48
mageia
unix

Updated networkmanager packages fix security vulnerability

2020-06-15T07:54:40
cloudfoundry
software

USN-4274-1: libxml2 vulnerabilities | Cloud Foundry

2020-02-20T00:00:00
ics
info

Siemens SINEMA Remote Connect Server

2021-04-13T00:00:00
ubuntu
unix

libxml2 vulnerabilities

2020-02-10T00:00:00
ubuntu
unix

VTK vulnerabilities

2021-03-15T00:00:00
rocky
unix

expat security update

2020-11-03T12:09:00
slackware
unix

[slackware-security] mariadb

2020-05-13T00:12:02
archlinux
unix

[ASA-202011-15] libxml2: multiple issues

2020-11-17T00:00:00
freebsd
unix

libxml -- multiple vulnerabilities

2020-01-21T00:00:00
photon
unix

Important Photon OS Security Update - PHSA-2020-0203

2020-01-30T00:00:00
photon
unix

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-1.0-0271

2020-02-05T00:00:00
osv
software

libxml2 - security update

2020-09-10T00:00:00
debian
unix

[SECURITY] [DLA 2369-1] libxml2 security update

2020-09-09T22:41:50
debian
unix

[SECURITY] [DLA 2369-1] libxml2 security update

2020-09-09T22:41:50
ubuntucve
info

CVE-2019-20386

2020-01-21T00:00:00
ubuntucve
info

CVE-2020-10754

2020-06-08T00:00:00
veracode
software

Denial Of Service (DoS)

2020-01-23T08:31:05
veracode
software

Insecure Authentication Controls

2020-07-22T03:39:34
redhatcve
info

CVE-2019-20386

2020-01-22T12:39:08
debiancve
info

CVE-2019-20386

2020-01-21T06:15:00
cve
NVD

CVE-2019-20386

2020-01-21T06:15:00