RockyLinux 10 : cups (RLSA-2025:15701)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:15701 advisory. cups: Null Pointer Dereference in CUPS ippreadio Leading to Remote DoS CVE-2025-58364 cups: Authentication Bypass in CUPS Authorization Handling...

CVE-2020-15701

The CVE-2020-15701 issue affects the apport component (Apport) where an unhandled exception in check_ignored() can crash the process if mtime in apport-ignore.xml is a string, enabling a local DoS. Exploitation details are not described beyond local access prerequisites. The vulnerability is addr...

USN-4449-1: Apport vulnerabilities

Ryota Shiga working with Trend Micro´s Zero Day Initiative, discovered that Apport incorrectly dropped privileges when making certain D-Bus calls. A local attacker could use this issue to read arbitrary files. CVE-2020-11936 Seong-Joong Kim discovered that Apport incorrectly parsed configuration...

CVE-2019-15701

BloodHound 2.2.0 is affected by a remote OS command injection in components/Modals/HelpModal.jsx. An attacker can exploit it via the search autocomplete after importing data from an Active Directory with a GPO whose name contains JavaScript, by spawning a child process as the current user. CVSSv3...

com.holidaycheck:amqp-akka-streams_2.11 (>=1.3.1 <=2.0.0), com.holidaycheck:amqp-akka-streams_2.12 (>=1.3.1 <=2.0.0) +1 more potentially affected by CVE-2017-15701 via org.apache.qpid:qpid-broker (>=6.1.3 <=6.1.4)

org.apache.qpid:qpid-broker MAVEN version =6.1.3, =1.3.1, =1.3.1, =0.0.1, =0.0.35 Source cves: CVE-2017-15701 Source advisory: OSV:GHSA-4R7G-7CPJ-5JR7...

CVE-2018-15701

CVE-2018-15701 affects TP-Link TL-WRN841N (firmware 0.9.1 4.16 v0348.0) where the web interface is vulnerable to a denial-of-service when an unauthenticated LAN user sends a crafted HTTP header with an unexpected Cookie field. The issue is triggered via the web management interface; the precise r...

CVE-2017-15701

The CVE-2017-15701 entry applies to Apache Qpid Broker-J versions 6.1.0–6.1.4, where AMQP 1.0 frame size is not properly enforced, allowing a remote unauthenticated attacker to exhaust memory and cause DoS. A fix is available in 6.1.5 and later; upgrade to 6.1.5+ or apply the applicable mitigatio...