EulerOS 2.0 SP8 : python-paramiko (EulerOS-SA-2022-1947)

According to the versions of the python-paramiko packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Paramiko before 2.10.1, a race condition between creation and chmod in the writeprivatekeyfile function could allow unauthorized...

EulerOS 2.0 SP8 : freetype (EulerOS-SA-2022-1928)

According to the versions of the freetype packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfntinitface...

EulerOS 2.0 SP8 : openldap (EulerOS-SA-2022-1942)

According to the versions of the openldap packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via ...

EulerOS 2.0 SP8 : mariadb (EulerOS-SA-2022-1939)

According to the versions of the mariadb packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - getsortbytable in MariaDB before 10.6.2 allows an application crash via certain subquery uses of ORDER BY. CVE-2021-46657 - MariaDB before 10.7...

EulerOS 2.0 SP8 : golang (EulerOS-SA-2022-1930)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - encoding/pem in Go before 1.17.9 and 1.18.x before 1.18.1 has a Decode stack overflow via a large amount of PEM data. CVE-2022-24675 - The gener...

EulerOS 2.0 SP8 : compat-openssl10 (EulerOS-SA-2022-1924)

According to the versions of the compat-openssl10 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The crehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some...

OAuth 2.0 client for SSO < 1.11.4 - Authenticated Bypass

The plugin allows attackers to login as any user by just knowing their email address PoC POST / HTTP/1.1 Content-Type: application/x-www-form-urlencoded [email protected]...

FFmpeg Buffer Overflow Vulnerability (CNVD-2022-62522)

FFmpeg is the Ffmpeg team's complete solution for recording, converting, and streaming audio and video. FFmpeg version 2.0 has a security vulnerability that could be exploited by attackers to cause a denial of service attack...

Fedora: Security Advisory for python3-docs (FEDORA-2022-9da5703d22)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2014-125019

A vulnerability, which was classified as problematic, was found in FFmpeg 2.0. This affects the function decodenalunit of the component Slice Segment Handler. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to apply a patch to fix thi...

CVE-2014-125021

A vulnerability was found in FFmpeg 2.0 and classified as problematic. This issue affects the function cmvprocessheader. The manipulation leads to memory corruption. The attack may be initiated remotely. It is recommended to apply a patch to fix this issue...

UBUNTU-CVE-2014-125025

A vulnerability classified as problematic has been found in FFmpeg 2.0. This affects the function decodepulses. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to apply a patch to fix this issue...

CVE-2014-125022

A vulnerability was found in FFmpeg 2.0. It has been classified as problematic. Affected is the function shortendecodeframe of the component Bitstream Buffer. The manipulation leads to memory corruption. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this...

Memory corruption

A vulnerability was found in FFmpeg 2.0 and classified as problematic. This issue affects the function cmvprocessheader. The manipulation leads to memory corruption. The attack may be initiated remotely. It is recommended to apply a patch to fix this issue...

CVE-2014-125025

A vulnerability classified as problematic has been found in FFmpeg 2.0. This affects the function decodepulses. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to apply a patch to fix this issue...

CVE-2014-125024

A vulnerability was found in FFmpeg 2.0. It has been rated as critical. Affected by this issue is the function lagdecodeframe. The manipulation leads to memory corruption. The attack may be launched remotely. It is recommended to apply a patch to fix this issue...

CVE-2014-125022

CVE-2014-125022 affects FFmpeg 2.0, specifically the shorten_decode_frame function in the Bitstream Buffer. The vulnerability enables memory corruption and is stated to permit a remote attack. Public sources consistently describe the issue as part of FFmpeg’s handling of bitstream decoding, with ...

CVE-2014-125021

FFmpeg 2.0 has a vulnerability in the cmv_process_header function that leads to memory corruption. The issue could be exploited remotely, and a patch is recommended to fix it. Details across connected records confirm the affected component and the remediation guidance; no additional exploit speci...

CVE-2014-125020

CVE-2014-125020 concerns FFmpeg 2.0, where the decode_update_thread_context function is associated with memory corruption. The available documents consistently identify this component as the vulnerable element and note that the issue can be triggered remotely and a patch is recommended. Several c...

CVE-2014-125019

FFmpeg 2.0 contains CVE-2014-125019 affecting the decode_nal_unit function in the Slice Segment Handler, causing memory corruption. The issue can be triggered remotely, with patches available to fix the vulnerability (remediation details vary by distro/vendor; apply the relevant FFmpeg patch or v...