Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : QEMU vulnerabilities (USN-4725-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4725-1 advisory. It was discovered that QEMU incorrectly handled memory in iSCSI emulation. An attacker inside the guest could possibly use this...

CVE-2020-15859 affecting package qemu-kvm 4.2.0-48

CVE-2020-15859 affecting package qemu-kvm 4.2.0-48. A patched version of the package is available...

QEMU <= 4.2.0 Multiple Vulnerabilities

QEMU is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribu...

CVE-2020-15859

CVE-2020-15859 affects QEMU 4.2.0, where a guest OS user can trigger a use-after-free in hw/net/e1000e_core.c by crafting an e1000e packet whose data address targets the MMIO address. Public details show potential for denial of service and, in some advisories, the possibility of arbitrary code ex...

Medium: xorg-x11-server

Issue Overview: It was discovered that libX11 does not properly validate input coming from the server, causing XListExtensions and XGetFontPath functions to produce an invalid list of elements that in turn make XFreeExtensionsList and XFreeFontPath access invalid memory. An attacker who can eithe...

Huawei EulerOS: Security Advisory for libxkbcommon (EulerOS-SA-2020-1246)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization for ARM 64 3.0.2.0 : libxkbcommon (EulerOS-SA-2020-1246)

According to the versions of the libxkbcommon package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - Endless recursion exists in xkbcomp/expr.c in xkbcommon and libxkbcommon before 0.8.1, which could be used by loc...

CVE-2019-15859

Socomec DIRIS A-40 devices (firmware versions before 48250501) are vulnerable to a password-disclosure flaw in the web interface that allows a remote attacker to gain full access via the /password.jsn URI. The issue stems from an incorrect or insufficient access-control path in the web interface,...

Socomec DIRIS A-40 Password Disclosure

description Password disclosure in the web interface on socomec DIRIS A-40 devices before 48250501 allows a remote attacker to get full access to a device via the /password.jsn URI. ------------------------------------------ Vulnerability Type Incorrect Access Control...

gdm, libX11, libxkbcommon, xorg security update

CentOS Errata and Security Advisory CESA-2019:2079 An update for Xorg is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

CentOS 7 : gdm / libX11 / libxkbcommon / xorg-x11-drv-ati / xorg-x11-drv-vesa / etc (CESA-2019:2079)

An update for Xorg is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

Scientific Linux Security Update : Xorg on SL7.x x86_64 (20190806)

Security Fixes : - libX11: Crash on invalid reply in XListExtensions in ListExt.c CVE-2018-14598 - libX11: Off-by-one error in XListExtensions in ListExt.c CVE-2018-14599 - libX11: Out of Bounds write in XListExtensions in ListExt.c CVE-2018-14600 - libxkbcommon: Invalid free in...

Moderate: Red Hat Security Advisory: Xorg security and bug fix update

An update for Xorg is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

SUSE SLED15 / SLES15 Security Update : libxkbcommon (SUSE-SU-2018:3685-1)

This update for libxkbcommon to version 0.8.2 fixes the following issues : Fix a few NULL-dereferences, out-of-bounds access and undefined behavior in the XKB text format parser. CVE-2018-15853: Endless recursion could have been used by local attackers to crash xkbcommon users by supplying a...

openSUSE: Security Advisory for libxkbcommon (openSUSE-SU-2018:3802-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

GLSA-201810-05 : xkbcommon: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201810-05 xkbcommon: Multiple vulnerabilities Multiple vulnerabilities have been discovered in libxkbcommon. Please review the CVE identifiers referenced below for details. Impact : A local attacker could supply a specially crafte...

Ubuntu: Security Advisory (USN-3786-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-3786-1: libxkbcommon vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 Description It was discovered that libxkbcommon incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. CVE-2018-15853, CVE-2018-15854, CVE-2018-15855, CVE-2018-1585...

CVE-2018-15859

Unchecked NULL pointer usage when parsing invalid atoms in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash NULL pointer dereference the xkbcommon parser by supplying a crafted keymap file, because lookup failures are mishandled...

CVE-2018-15859

CVE-2018-15859 : Unchecked NULL pointer usage in xkbcommon's xkbcomp/ExprResolveLhs can crash the parser via a crafted keymap file (local attacker). Affects xkbcommon prior to 0.8.2. Connected advisories show fixes in updated xkbcommon/xorg-x11-server packages (e.g., Fedora/CentOS/RHEL updates li...