Amazon Linux AMI : GraphicsMagick (ALAS-2023-1806)

The version of GraphicsMagick installed on the remote host is prior to 1.3.38-1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1806 advisory. 2024-02-14: CVE-2020-21679 was added to this advisory. Buffer Overflow vulnerability in WritePCXImage function in...

CVE-2020-21679

creationtimestamp| type| source ---|---|--- 2023-08-22 22:25:14+00:00| seen| https://t.me/cibsecurity/69012...

CVE-2020-21679

Buffer Overflow vulnerability in WritePCXImage function in pcx.c in GraphicsMagick 1.4 allows remote attackers to cause a denial of service via converting of crafted image file to pcx format...

CVE-2020-21679

GraphicsMagick 1.4 is affected by a Buffer Overflow in WritePCXImage (pcx.c) that can be triggered by converting a crafted image to PCX, enabling denial of service. Affected product/version and root cause are stated in CVE-2020-21679; connected advisories reiterate the issue. The provided documen...

Important: GraphicsMagick

Issue Overview: Buffer Overflow vulnerability in WritePCXImage function in pcx.c in GraphicsMagick 1.4 allows remote attackers to cause a denial of service via converting of crafted image file to pcx format. CVE-2020-21679 In GraphicsMagick, a heap buffer overflow was found when parsing MIFF...

CVE-2023-21679

creationtimestamp| type| source ---|---|--- 2023-01-19 07:20:23+00:00| seen| https://t.me/GithubRedTeam/3694...

CVE-2023-21679

Windows Layer 2 Tunneling Protocol L2TP Remote Code Execution Vulnerability...

CVE-2023-21679

Technical details about CVE-2023-21679 are not provided in the supplied documents. The connected EUVD/KB entries do not describe affected products, versions, or remediation for this CVE. Monitor for updates from official advisories.

CVE-2022-21679

creationtimestamp| type| source ---|---|--- 2022-01-20 00:40:53+00:00| seen| https://t.me/cibsecurity/35905...

CVE-2022-21679 Authorization Policy bypass in Istio

Istio is an open platform to connect, manage, and secure microservices. In Istio 1.12.0 and 1.12.1 The authorization policy with hosts and notHosts might be accidentally bypassed for ALLOW action or rejected unexpectedly for DENY action during the upgrade from 1.11 to 1.12.0/1.12.1. Istio 1.12...

CVE-2022-21679

Istio 1.12.0/1.12.1 contains a bug in the authorization policy that uses the new Envoy API with the 1.11 data plane. This causes hosts and notHosts in authorization policies to be matched regardless of header values when mixing 1.12 control plane with 1.11 data plane, potentially bypassing ALLOW ...

CVE-2021-21679

creationtimestamp| type| source ---|---|--- 2021-08-31 18:33:45+00:00| seen| https://t.me/cibsecurity/28093...

CVE-2021-21679

Jenkins Azure AD Plugin 179.vf6841393099e and earlier allows attackers to craft URLs that would bypass the CSRF protection of any target URL in Jenkins...

CVE-2021-21679

CVE-2021-21679 concerns Jenkins Azure AD Plugin 179.vf6841393099e and earlier, where an extension point for CSRF protection is too permissive, allowing attackers to craft URLs that bypass CSRF protection for any Jenkins URL. The issue is tied to a vulnerability in the plugin’s handling of CSRF to...