6290 matches found
Open redirect
It was discovered that readfile in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-16 package apport hooks, it could expose private data to other local users...
CVE-2021-32552 apport read_file() function could follow maliciously constructed symbolic links
It was discovered that readfile in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-16 package apport hooks, it could expose private data to other local users...
CVE-2021-32552
CVE-2021-32552 affects Ubuntu Apport. The read_file() function in apport/hookutils.py can follow symbolic links or open FIFOs when used by the openjdk-16 package apport hooks, potentially exposing private data to other local users. This is a local confidentiality vulnerability; exploitation statu...
SUSE: Security Advisory (SUSE-SU-2020:2445-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
OSV-2021-803 Heap-buffer-overflow in sampled_data_finish
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34675 Crash type: Heap-buffer-overflow WRITE 16 Crash state: sampleddatafinish sampleddatacontinue interp...
CVE-2021-32552
It was discovered that readfile in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-16 package apport hooks, it could expose private data to other local users...
GHSA-5RCV-M4M3-HFH7 golang.org/x/text Infinite loop
Go version v0.3.3 of the x/text package fixes a vulnerability in encoding/unicode that could lead to the UTF-16 decoder entering an infinite loop, causing the program to crash or run out of memory. An attacker could provide a single byte to a UTF16 decoder instantiated with UseBOM or ExpectBOM to...
golang.org/x/text Infinite loop
Go version v0.3.3 of the x/text package fixes a vulnerability in encoding/unicode that could lead to the UTF-16 decoder entering an infinite loop, causing the program to crash or run out of memory. An attacker could provide a single byte to a UTF16 decoder instantiated with UseBOM or ExpectBOM to...
USN-4957-2 djvulibre vulnerabilities
USN-4957-1 fixed several vulnerabilities in DjVuLibre. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that DjVuLibre incorrectly handled certain memory operations. If a user or automated system were tricked into processing a...
libarchive: Off-by-one error in the read_header function
readheader in archivereadsupportformatrar.c in libarchive 3.3.2 suffers from an off-by-one error for UTF-16 names in RAR archives, leading to an out-of-bounds read in archivereadformatrarreadheader...
Loop with Unreachable Exit Condition ('Infinite Loop')
The x/text package before 0.3.3 for Go has a vulnerability in encoding/unicode that could lead to the UTF-16 decoder entering an infinite loop, causing the program to crash or run out of memory. An attacker could provide a single byte to a UTF16 decoder instantiated with UseBOM or ExpectBOM to...
CVE-2021-32606
creationtimestamp| type| source ---|---|--- 2021-05-12 20:33:37+00:00| published-proof-of-concept| Telegram/0pbwrP08SSb6A-bEFVIN7MK6usCOUA7o6I-M0x1U0ifPQI 2021-05-15 13:07:06+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/3372 2021-05-16 08:40:43+00:00|...
[SECURITY] Fedora 32 Update: java-latest-openjdk-16.0.1.0.9-1.rolling.fc32
The OpenJDK 16 runtime environment...
[SECURITY] Fedora 33 Update: java-latest-openjdk-16.0.1.0.9-1.rolling.fc33
The OpenJDK 16 runtime environment...
Fedora: Security Advisory for java-latest-openjdk (FEDORA-2021-3bf9ba59ef)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for java-latest-openjdk (FEDORA-2021-b9093bc6c6)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 34 Update: java-latest-openjdk-16.0.1.0.9-1.rolling.fc34
The OpenJDK 16 runtime environment...
Fedora: Security Advisory for java-latest-openjdk (FEDORA-2021-ba275e4102)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Stack overflow
This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.0-48950. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...
CVE-2021-31405 Regular expression denial of service (ReDoS) in EmailField component in Vaadin 14 and 15-17
Unsafe validation RegEx in EmailField component in com.vaadin:vaadin-text-field-flow versions 2.0.4 through 2.3.2 Vaadin 14.0.6 through 14.4.3, and 3.0.0 through 4.0.2 Vaadin 15.0.0 through 17.0.10 allows attackers to cause uncontrolled resource consumption by submitting malicious email addresses...