AZL-6658 CVE-2020-25637 affecting package libvirt for versions less than 6.1.0-4

A double free memory issue was found to occur in the libvirt API, in versions before 6.8.0, responsible for requesting information about network interfaces of a running QEMU domain. This flaw affects the polkit access control driver. Specifically, clients connecting to the read-write socket with...

CVE-2020-7466

The PPP implementation of MPD before 5.9 allows a remote attacker who can send specifically crafted PPP authentication message to cause the daemon to read beyond allocated memory buffer, which would result in a denial of service condition...

PT-2020-19597 · Music Player Daemon · Mpd

Name of the Vulnerable Software and Affected Versions: MPD versions prior to 5.9 Description: The issue allows a remote attacker who can send specifically crafted L2TP control packets with AVP Q.931 Cause Code to execute arbitrary code or cause a denial of service due to memory corruption...

libvirt security and bug fix update

4.5.0-36 - virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support rhbz1823976 - virDevMapperGetTargetsImpl: quit early if device is not a devmapper target rhbz1823976 4.5.0-35 - qemu: dont take agent and monitor job for shutdown CVE-2019-20485 - qemu: dont hold a monitor and agent...

Fortinet FortiOS < 5.6.13 / 6.0 < 6.0.11 Buffer Overflow (FG-IR-20-083)

The remote host is running a version of FortiOS prior to 5.6.13, or 6.x prior to 6.0.11. It is, therefore, affected by an buffer overflow in the FortiClient NAC daemon that could allow a authenticated remote attacker to crash the FortiClient NAC daemon and theoritcally execute remote code, althou...

[SECURITY] Fedora 32 Update: xen-4.13.1-6.fc32

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

[SECURITY] Fedora 33 Update: community-mysql-8.0.21-11.fc33

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon mysqld and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files...

PT-2020-6794

Name of the Vulnerable Software and Affected Versions FortiOS versions 6.0.10 and below FortiOS versions 6.2.2 and below FortiProxy versions 1.0.x FortiProxy versions 1.1.x FortiProxy versions 1.2.9 and below FortiProxy versions 2.0.0 and below Description A Stack-based Buffer Overflow...

gpsd: Arbitrary code execution

Background gpsd is a GPS daemon and library for USB/serial GPS devices and GPS/mapping clients. Description A stack-based buffer overflow was discovered in gpsd on port 2947/TCP or crafted JSON inputs. Impact A remote attacker could possibly execute arbitrary code with the privileges of the...

EulerOS 2.0 SP8 : trousers (EulerOS-SA-2020-2160)

According to the versions of the trousers packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges instead of by the tss user, it fails to...

EulerOS 2.0 SP3 : trousers (EulerOS-SA-2020-2122)

According to the versions of the trousers package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges instead of by the tss user, it fails to...

Debian: Security Advisory (DLA-2383-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2020:1539-1 Security update for openldap2

This update for openldap2 fixes the following issues: - CVE-2020-8027: openldapupdatemodulespath.sh starts daemons unconditionally and uses fixed paths in /tmp bsc1175568. This update was imported from the SUSE:SLE-15:Update update project...

USN-4542-1: MiniUPnPd vulnerabilities

It was discovered that MiniUPnPd did not properly validate callback addresses. A remote attacker could possibly use this issue to expose sensitive information. CVE-2019-12107 It was discovered that MiniUPnPd incorrectly handled unpopulated user XML input. An attacker could possibly use this issue...

SUSE-SU-2020:2712-1 Security update for openldap2

This update for openldap2 fixes the following issues: - CVE-2020-8027: openldapupdatemodulespath.sh starts daemons unconditionally and uses fixed paths in /tmp bsc1175568...

USN-4540-1 atftp vulnerabilities

Denis Andzakovic discovered that atftpd incorrectly handled certain malformed packets. A remote attacker could send a specially crafted packet to cause atftpd to crash, resulting in a denial of service. CVE-2019-11365 Denis Andzakovic discovered that atftpd did not properly lock the thread list...

PT-2020-6796 · Fortinet · Forticlient +1

Name of the Vulnerable Software and Affected Versions: FortiOS versions 6.0.10 and below FortiOS versions 5.6.12 and below Description: The issue is related to a stack-based buffer overflow in the FortiClient NAC daemon fcnacd that can be exploited by a remote attacker authenticated to the SSL VP...

Denial Of Service (DoS)

py-mini-racer is vulnerable to denial of service DoS. The vulnerability exists through a heap overflow which exists through the configuration pushed from the extension to the daemon...

Debian DSA-4764-1 : inspircd - security update

Two security issues were discovered in the pgsql and mysql modules of the InspIRCd IRC daemon, which could result in denial of service. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4764. The text itself is...

bird OSPFv2 DoS

The vulnerability of the routing demon “bird” is related to insufficient checking of the size of network packets in the OSPFv2 protocol Open Shortest Path First. Exploiting this vulnerability allows a malicious actor to cause service failures by sending a specially crafted network packet during t...