142 matches found
SUSE-SU-2021:4120-1 Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2021-4009: The handler for the CreatePointerBarrier request of the XFixes extension does not properly validate the request length leading to out of bounds memory write. bsc1190487 - CVE-2021-4011: The handlers for the...
SUSE-SU-2021:4119-1 Security update for xorg-x11-server
This update for xorg-x11-server fixes the following issues: - CVE-2021-4009: The handler for the CreatePointerBarrier request of the XFixes extension does not properly validate the request length leading to out of bounds memory write. bsc1190487 - CVE-2021-4011: The handlers for the...
SUSE SLES15 Security Update : xorg-x11-server (SUSE-SU-2021:4121-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:4121-1 advisory. - CVE-2021-4009: The handler for the CreatePointerBarrier request of the XFixes extension does not properly validate the request...
CVE-2021-4009
creationtimestamp| type| source ---|---|--- 2021-12-17 20:37:10+00:00| seen| https://t.me/cibsecurity/34219...
CVE-2021-4009
Affected software: xorg-x11-server (versions before 21.1.2 and before 1.20.14). Fault: out-of-bounds access in SProcXFixesCreatePointerBarrier. Impact: potential data confidentiality, integrity, and availability compromise. Status: fixed in updated releases (e.g., 21.1.2 and 1.20.14 lineage) per ...
[slackware-security] xorg-server
New xorg-server packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Note that in slackware-current there are 4 issues fixed CVE-2021-4008, CVE-2021-4009, CVE-2021-4010, and CVE-2021-4011. In Slackware 14.0, 14.1, and 14.2 the earlier versions of xorg-server...
Slackware Linux 14.0 / 14.1 / 14.2 / current xorg-server Multiple Vulnerabilities (SSA:2021-350-01)
The version of xorg-server installed on the remote host is prior to 1.12.4 / 1.14.3 / 1.18.3 / 1.20.14 / 21.1.4. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2021-350-01 advisory. - A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14...
SUSE: Security Advisory (SUSE-SU-2018:4009-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP3 : python-pillow (EulerOS-SA-2020-2080)
According to the versions of the python-pillow package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Integer overflow in the ImagingResampleHorizontal function in libImaging/Resample.c in Pillow before 3.1.1 allows remote attackers to have...
SUSE-SU-2020:1194-1 Security update for python-Pillow
This update for python-Pillow fixes the following issues: Security issues fixed: - CVE-2016-2533: Fixed an integer overflow in the ImagingResampleHorizontal function bsc967970. - CVE-2016-4009: Fixed a buffer overflow in the PCD decoder bsc975500...
Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2020-1532)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2019-2701)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 16.04 LTS / 18.04 LTS : PHP vulnerabilities (USN-4009-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4009-1 advisory. It was discovered that PHP incorrectly handled certain exif tags in images. A remote attacker could use this issue to cause PHP to crash,...
CVE-2018-4009
An exploitable privilege escalation vulnerability exists in the Shimo VPN helper service due to improper validation of code signing. A user with local access can use this vulnerability to raise their privileges to root. An attacker would need local access to the machine to successfully exploit th...
CVE-2018-4009
The CVE-2018-4009 issue affects Shimo VPN’s helper service on macOS, where privilege escalation is possible due to improper validation of code signing. The Shimo helper signs and launches auxiliary binaries after a basic code-sign check (kSecCSBasicValidateOnly), which does not verify the signing...
CVE-2017-4009
CVE-2017-4009 is rejected/not used; this candidate is not an active vulnerability entry.
Debian DSA-4009-1 : shadowsocks-libev - security update
Niklas Abel discovered that insufficient input sanitising in the ss-manager component of shadowsocks-libev, a lightweight socks5 proxy, could result in arbitrary shell command execution. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin we...
UBUNTU-CVE-2016-4009
Integer overflow in the ImagingResampleHorizontal function in libImaging/Resample.c in Pillow before 3.1.1 allows remote attackers to have unspecified impact via negative values of the new size, which triggers a heap-based buffer overflow...
CVE-2016-4009
CVE-2016-4009 affects Pillow (PIL fork): an integer overflow in ImagingResampleHorizontal (libImaging/Resample.c) for Pillow before 3.1.1 allows remote attackers to trigger a heap-based buffer overflow by supplying negative values for the new size. This yields a potential crash or other memory co...