Important: Red Hat Security Advisory: pki-core:10.6 security update

An update for the pki-core:10.6 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

pki-core:10.6 security update

An update is available for ldapjdk. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Public Key Infrastructure PKI Core contains fundamental packages required...

Important: pki-core:10.6 security update

The Public Key Infrastructure PKI Core contains fundamental packages required by AlmaLinux Certificate System. Security Fixes: pki-core: Unprivileged users can renew any certificate CVE-2021-20179 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and...

Fedora 32 : pki-core (2021-344dd24c84)

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-344dd24c84 advisory. - A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corresponding certificate over a...

CentOS 7 : pki-core (RHSA-2021:0851)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0851 advisory. - A Reflected Cross Site Scripting flaw was found in all pki-core 10.x.x versions module from the pki-core server due to the CA Agent Service not...

Oracle Linux 7 : pki-core (ELSA-2021-0851)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-0851 advisory. - Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token parameters in TPS resulting in stored XSS certificatesystem9-default edewata, asche...

Important: Red Hat Security Advisory: pki-core security and bug fix update

An update for pki-core is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

CVE-2019-20179

SOPlanning 1.45 has SQL injection via the userlist.php "by" parameter...

CVE-2019-20179

SOPlanning 1.45 is vulnerable to a SQL injection via the user_list.php parameter "by". The root cause is a lack of validation of externally entered SQL in a database-driven application. Documented impact is consistent with a high-severity risk (CVSS3.1: 8.8; CVSS2.0: 6.5) affecting confidentialit...

CVE-2019-20179

SOPlanning 1.45 has SQL injection via the userlist.php "by" parameter...

Fedora Update for rdesktop FEDORA-2019-ac70292cfc

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2018-20179

CVE-2018-20179 affects rdesktop up to and including v1.8.3, where an Integer Underflow in lspci_process() causes a Heap-Based Buffer Overflow, leading to memory corruption and potentially remote code execution. The vulnerability has been addressed in later releases; Debian security advisories and...

CVE-2018-20179

rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Overflow in the function lspciprocess and results in memory corruption and probably even a remote code execution...

Debian DSA-4394-1 : rdesktop - security update

Multiple security issues were found in the rdesktop RDP client, which could result in denial of service, information disclosure and the execution of arbitrary code. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...

Fedora 28 : rdesktop (2019-5146cd34e2)

Update to 1.8.4. Security fix for CVE-2018-8794 CVE-2018-8795 CVE-2018-8797 CVE-2018-20175 CVE-2018-20176 CVE-2018-8791 CVE-2018-8792 CVE-2018-8793 CVE-2018-8796 CVE-2018-8798 CVE-2018-8799 CVE-2018-8800 CVE-2018-20174 CVE-2018-20177 CVE-2018-20178 CVE-2018-20179 CVE-2018-20180 CVE-2018-20181...

CVE-2018-20179

creationtimestamp| type| source ---|---|--- 2019-02-06 15:04:30+00:00| seen| MISP/5c5af499-e890-49e9-b1ff-26ba0a021402...

Updated rdesktop package fixes security vulnerabilities

rdesktop has been updated to fix multiple CVE's. Fix memory corruption in processbitmapdata - CVE-2018-8794 Fix remote code execution in processbitmapdata - CVE-2018-8795 Fix remote code execution in processplane - CVE-2018-8797 Fix Denial of Service in mcsrecvconnectresponse - CVE-2018-20175 Fix...

rdesktop - critical - Remote Code Execution

Fix memory corruption in processbitmapdata - CVE-2018-8794 Fix remote code execution in processbitmapdata - CVE-2018-8795 Fix remote code execution in processplane - CVE-2018-8797 Fix Denial of Service in mcsrecvconnectresponse - CVE-2018-20175 Fix Denial of Service in mcsparsedomainparams -...