CVE-2019-12439 affecting package bubblewrap 0.3.0-5

CVE-2019-12439 affecting package bubblewrap 0.3.0-5. A patched version of the package is available...

CVE-2020-12439

Grin before 3.1.0 allows attackers to adversely affect availability of data on a Mimblewimble blockchain...

CVE-2020-12439

CVE-2020-12439 affects Grin prior to 3.1.0. The issue allows attackers to adversely affect availability of data on a Mimblewimble blockchain. The Connected documents confirm the product (Grin), version bound (before 3.1.0), and the impact (availability disruption). There are no explicit remediati...

openSUSE: Security Advisory for bubblewrap (openSUSE-SU-2019:1535-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

EulerOS 2.0 SP8 : bubblewrap (EulerOS-SA-2019-1762)

According to the version of the bubblewrap package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - bubblewrap.c in Bubblewrap before 0.3.3 misuses temporary directories in /tmp as a mount point. In some particular configurations related to...

Low: Red Hat Security Advisory: CloudForms 4.7.7 security, bug fix and enhancement update

An update is now available for CloudForms Management Engine 5.10. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link...

openSUSE Security Update : bubblewrap (openSUSE-2019-1721)

This update for bubblewrap fixes the following issues : Security issue fixed : - CVE-2019-12439: Fixed insecure use of /tmp bsc1136958. This update was imported from the SUSE:SLE-15:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks...

openSUSE: Security Advisory for bubblewrap (openSUSE-SU-2019:1721-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2019:1721-1 Security update for bubblewrap

This update for bubblewrap fixes the following issues: Security issue fixed: - CVE-2019-12439: Fixed insecure use of /tmp bsc1136958. This update was imported from the SUSE:SLE-15:Update update project...

SUSE SLED15 / SLES15 Security Update : bubblewrap (SUSE-SU-2019:1826-1)

This update for bubblewrap fixes the following issues : Security issue fixed : CVE-2019-12439: Fixed insecure use of /tmp bsc1136958. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically...

SUSE-SU-2019:1826-1 Security update for bubblewrap

This update for bubblewrap fixes the following issues: Security issue fixed: - CVE-2019-12439: Fixed insecure use of /tmp bsc1136958...

Photon OS 3.0: Bubblewrap PHSA-2019-3.0-0019

An update of the bubblewrap package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-3.0-0019. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid126191;...

openSUSE Security Update : bubblewrap (openSUSE-2019-1535)

This update for bubblewrap to version 0.3.3 fixes the following issue: Security issue fixed : - CVE-2019-12439: Fixed a temporary directory misuse as mount point which could have allowed local user to prevent others from running bubblewrap. C Tenable Network Security, Inc. The descriptive text an...

Security update for bubblewrap (moderate)

openSUSE Security Update: Security update for bubblewrap Announcement ID: openSUSE-SU-2019:1535-1 Rating: moderate References: 1136958 Cross-References: CVE-2019-12439 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for...

CVE-2019-12439

Bubblewrap (before 0.3.3) is affected by CVE-2019-12439 due to misusing temporary directories in /tmp as a mount point, with configurations involving XDG_RUNTIME_DIR. This can let a local attacker block other users from running bubblewrap or potentially execute code. A patched version exists (0.3...

CVE-2018-12439

MatrixSSL through 3.9.5 Open allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host...

CVE-2018-12439

MatrixSSL (GUARD TLS-TK) up to version 3.9.5 Open is vulnerable to a memory-cache side-channel attack on ECDSA signatures (ROHNP). The flaw affects MatrixSSL in vendor-provided builds and embedded/OpenSSL-like stacks, enabling an attacker with local access or co-residency on the same physical hos...

CVE-2017-12439

The CVE-2017-12439 entry concerns SocuSoft Flash Slideshow Maker Professional up to version 5.20. When advanced configuration is used, the xml_path HTTP parameter trusts user-supplied input in conjunction with an unsafe XML configuration file, enabling issues described as content forgery, cross-s...