77 matches found
RockyLinux 8 : grafana (RLSA-2024:8327)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:8327 advisory. golang-fips: Golang FIPS zeroed buffer CVE-2024-9355 dompurify: nesting-based mutation XSS vulnerability CVE-2024-47875 Tenable has extracted the precedi...
grafana security update
9.2.10-20 - Resolves RHEL-62307: CVE-2024-47875 9.2.10-19 - Resolves RHEL-61779: CVE-2024-9355...
RHEL 8 : grafana (RHSA-2024:8327)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:8327 advisory. Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: golang-fips:...
ALSA-2024:8327 Important: grafana security update
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: golang-fips: Golang FIPS zeroed buffer CVE-2024-9355 dompurify: nesting-based mutation XSS vulnerability CVE-2024-47875 For more details about the security issues, includi...
AlmaLinux 8 : go-toolset:rhel8 (ALSA-2024:7502)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:7502 advisory. golang-fips: Golang FIPS zeroed buffer CVE-2024-9355 Tenable has extracted the preceding description block directly from the AlmaLinux security advisory. Note that...
Moderate: Red Hat Security Advisory: golang security update
An update for golang is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
ALSA-2024:7502 Moderate: go-toolset:rhel8 security update
Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fixes: golang-fips: Golang FIPS zeroed buffer CVE-2024-9355 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...
RHEL 9 : golang (RHSA-2024:7550)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:7550 advisory. The golang packages provide the Go programming language compiler. Security Fixes: golang-fips: Golang FIPS zeroed buffer CVE-2024-9355 For more detai...
Moderate: golang security update
The golang packages provide the Go programming language compiler. Security Fixes: golang-fips: Golang FIPS zeroed buffer CVE-2024-9355 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE pages listed in t...
ALSA-2024:7550 Moderate: golang security update
The golang packages provide the Go programming language compiler. Security Fixes: golang-fips: Golang FIPS zeroed buffer CVE-2024-9355 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE pages listed in t...
golang security update
1.21.13-4 - Fix CVE-2024-9355 - Resolves: RHEL-61046...
Moderate: go-toolset:rhel8 security update
Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fixes: golang-fips: Golang FIPS zeroed buffer CVE-2024-9355 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...
CVE-2024-9355
creationtimestamp| type| source ---|---|--- 2024-10-01 21:57:34+00:00| seen| https://t.me/cvedetector/6784 2025-01-06 22:38:12+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/270 2025-03-06 02:17:24+00:00| seen| Telegram/y82c3WoFZZoeK5jRd831Yzgf9v9thjRuyiGIOYiPC1jnX2-4 2025-03-14 16:43:57+00:0...
AZL-52774 CVE-2024-9355 affecting package golang for versions less than 1.22.9-1
A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted...
CVE-2024-9355 Golang-fips: golang fips zeroed buffer
A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted...
CVE-2020-9355
danfruehauf NetworkManager-ssh before 1.2.11 allows privilege escalation because extra options are mishandled...
CVE-2016-9355
creationtimestamp| type| source ---|---|--- 2022-03-03 17:30:00+00:00| seen| https://t.me/truesecator/2696 2026-06-10 09:00:04+00:00| published-proof-of-concept| Telegram/ZHpMnVOz2cJfIOonPjLT3mqz43XsQAtrT-ty2tkYMtXDqE...
Debian DSA-4637-1 : network-manager-ssh - security update
Kobus van Schoor discovered that network-manager-ssh, a plugin to provide VPN integration for SSH in NetworkManager, is prone to a privilege escalation vulnerability. A local user with privileges to modify a connection can take advantage of this flaw to execute arbitrary commands as root. This...
[SECURITY] [DSA 4637-1] network-manager-ssh security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4637-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 09, 2020 https://www.debian.org/security/faq -...
