CVE-2024-21898 QTS, QuTS hero

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.6.2722 build...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS : LibreCAD vulnerabilities (USN-5957-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5957-1 advisory. Cody Sixteen discovered that LibreCAD incorrectly handled memory when parsing DXF files. An attacker could use this issue to caus...

Oracle VirtualBox Security Update (Jan 2023) - Windows

Oracle VirtualBox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:vmvirtualbox";...

CVE-2023-21898

CVE-2023-21898 affects Oracle VM VirtualBox (Core). Affected: VirtualBox versions prior to 6.1.42 and prior to 7.0.6. A low-privilege, local attacker with logon can exploit this to cause a hang or a frequent crash of Oracle VM VirtualBox (complete DOS) on Windows guests (noted for VirtualBox VMs ...

CVE-2023-21898

...

CVE-2023-21898

...

openSUSE 15 Security Update : libdxfrw, librecad (openSUSE-SU-2022:0067-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:0067-1 advisory. - A code execution vulnerability exists in the dwgCompressor::decompress18 functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A...

Debian: Security Advisory (DSA-5077-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-5077-1 : librecad - security update

The remote Debian 10 / 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5077 advisory. Multiple security issues were discovered in LibreCAD, an application for computer aided design CAD which could result in denial of service or the execution o...

[SECURITY] [DSA 5077-1] librecad security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5077-1 [email protected] https://www.debian.org/security/ Aron Xu February 15, 2022 https://www.debian.org/security/faq -...

CVE-2022-21898

creationtimestamp| type| source ---|---|--- 2022-01-12 00:17:33+00:00| seen| https://t.me/cibsecurity/35281...

CVE-2022-21898

DirectX Graphics Kernel Remote Code Execution Vulnerability...

CVE-2022-21898 DirectX Graphics Kernel Remote Code Execution Vulnerability

...

CVE-2022-21898

CVE-2022-21898 is a DirectX Graphics Kernel Remote Code Execution vulnerability in Windows. The entry notes a network-based, no-user-interaction exploit with high/critical impact (C: High, I: High, A: High) and local/remote exploitation in different entries; the primary CVE description identifies...

KB5009557: Windows 10 Version 1809 and Windows Server 2019 Security Update (January 2022)

The remote Windows host is missing security update 5009557. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2022-21836 - A denial of service DoS vulnerabilit...

Fedora: Security Advisory for librecad (FEDORA-2021-fa9e3c23f2)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for libdxfrw (FEDORA-2021-fa9e3c23f2)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2021-21898

creationtimestamp| type| source ---|---|--- 2021-11-19 22:17:00+00:00| seen| https://t.me/cibsecurity/32729...

CVE-2021-21898

CVE-2021-21898 affects LibreCAD/libdxfrw (2.2.0-rc2-19-ge02f3580). The vulnerability lies in dwgCompressor::decompress18(), where a crafted DWG can trigger an out-of-bounds write, enabling possible code execution. Public references from Gentoo GLSA, Debian DSA/DLA and openSUSE/NASL advisories con...

LibreCad libdxfrw dwgCompressor::decompress18() out-of-bounds write vulnerability

Talos Vulnerability Report TALOS-2021-1349 LibreCad libdxfrw dwgCompressor::decompress18 out-of-bounds write vulnerability November 17, 2021 CVE Number CVE-2021-21898 SUMMARY A code execution vulnerability exists in the dwgCompressor::decompress18 functionality of LibreCad libdxfrw...