Lucene search
+L

6743 matches found

AlmaLinux
AlmaLinux
added 2024/04/30 12:00 a.m.56 views

Moderate: mod_http2 security update

The modhttp2 Apache httpd module implements the HTTP2 protocol h2+h2c on top of libnghttp2 for httpd 2.4 servers. Security Fixes: httpd: modhttp2: DoS in HTTP/2 with initial window size 0 CVE-2023-43622 modhttp2: reset requests exhaust memory incomplete fix of CVE-2023-44487 CVE-2023-45802 For mo...

7.5CVSS8.7AI score0.99999EPSS
SaveExploits22References6
OSV
OSV
added 2024/04/30 12:00 a.m.28 views

ALSA-2024:2147 Moderate: ipa security update

AlmaLinux Identity Management IdM is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fixes: freeipa: specially crafted HTTP requests potentially lead to denial of service CVE-2024-1481 For more...

5.3CVSS5.7AI score0.0111EPSS
SaveExploits1References4
OSV
OSV
added 2024/04/30 12:00 a.m.40 views

ALSA-2024:2287 Moderate: gstreamer1-plugins-bad-free security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer. Security Fixes: gstreamer-plugins-bad: Integer overflow leading to heap overwrite in MXF file handling with...

8.8CVSS7.9AI score0.02009EPSS
SaveExploits0References10
OSV
OSV
added 2024/04/30 12:00 a.m.39 views

ALSA-2024:2156 Moderate: frr security update

FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. Security Fixes: frr: incorrect length check in bgpcapabilityllgr can lead do DoS CVE-2023-31489 frr: missing length check in bgpattrpsidsub ca...

9.1CVSS7AI score0.02152EPSS
SaveExploits2References18
OSV
OSV
added 2024/04/30 12:00 a.m.37 views

ALSA-2024:2159 Moderate: python3.11-urllib3 security update

The python-urllib3 package provides the Python HTTP module with connection pooling and file POST abilities. Security Fixes: python-urllib3: Cookie request header isn't stripped during cross-origin redirects CVE-2023-43804 For more details about the security issues, including the impact, a CVSS...

8.1CVSS7.5AI score0.01207EPSS
SaveExploits0References4
OSV
OSV
added 2024/04/30 12:00 a.m.36 views

ALSA-2024:2410 Moderate: harfbuzz security update

HarfBuzz is an implementation of the OpenType Layout engine. Security Fixes: harfbuzz: allows attackers to trigger On^2 growth via consecutive marks CVE-2023-25193 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer...

7.5CVSS7.8AI score0.01812EPSS
SaveExploits0References4
OSV
OSV
added 2024/04/30 12:00 a.m.48 views

ALSA-2024:2289 Moderate: libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: libtiff: infinite loop via a crafted TIFF file CVE-2022-40090 libtiff: segmentation fault in Fax3Encode in libtiff/tiffax3.c CVE-2023-3618 libtiff: integer overflow in tiffcp....

6.5CVSS6.7AI score0.01411EPSS
SaveExploits1References12
OSV
OSV
added 2024/04/30 12:00 a.m.41 views

ALSA-2024:2528 Low: mingw-glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fixes: glib: GVariant offset table...

7.5CVSS6.7AI score0.0078EPSS
SaveExploits0References10
OSV
OSV
added 2024/04/30 12:00 a.m.44 views

ALSA-2024:2278 Moderate: httpd security update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: modmacro: out-of-bounds read vulnerability CVE-2023-31122 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...

7.5CVSS7.5AI score0.03003EPSS
SaveExploits0References4
OSV
OSV
added 2024/04/30 12:00 a.m.23 views

ALSA-2024:2377 Moderate: zziplib security update

The zziplib is a lightweight library to easily extract data from zip files. Security Fixes: zziplib: invalid memory access at zzipdiskentrytofileheader in mmapped.c CVE-2020-18770 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...

5.5CVSS5.3AI score0.00344EPSS
SaveExploits1References4
OSV
OSV
added 2024/04/30 12:00 a.m.41 views

ALSA-2024:2180 Moderate: runc security update

The runC tool is a lightweight, portable implementation of the Open Container Format OCF that provides container runtime. Security Fixes: golang: io/fs: stack exhaustion in Glob CVE-2022-30630 golang: compress/gzip: stack exhaustion in Reader.Read CVE-2022-30631 golang: path/filepath: stack...

7.5CVSS7.1AI score0.01939EPSS
SaveExploits0References10
OSV
OSV
added 2024/04/30 12:00 a.m.35 views

ALSA-2024:2170 Moderate: xorg-x11-server-Xwayland security update

Xwayland is an X server for running X clients under Wayland. Security Fixes: xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty CVE-2023-5367 xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions CVE-2023-6377 xorg-x11-server: out-of-bounds...

9.8CVSS7.7AI score0.02106EPSS
SaveExploits0References20
OSV
OSV
added 2024/04/30 12:00 a.m.36 views

ALSA-2024:2512 Low: file security update

The file command is used to identify a particular file according to the type of data the file contains. It can identify many different file types, including Executable and Linkable Format ELF binary files, system libraries, RPM packages, and different graphics formats. Security Fixes: file:...

5.5CVSS6.9AI score0.00677EPSS
SaveExploits1References4
OSV
OSV
added 2024/04/30 12:00 a.m.54 views

ALSA-2024:2135 Moderate: qemu-kvm security update

Kernel-based Virtual Machine KVM is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. Security Fixes: QEMU: e1000e: heap use-after-free in e1000ewritepackettoguest CVE-2023-3019...

7CVSS6.4AI score0.01891EPSS
SaveExploits1References12
AlmaLinux
AlmaLinux
added 2024/04/30 12:00 a.m.58 views

Moderate: podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fixes: golang: net/http/internal: Denial of Service DoS via Resource Consumption via HTTP reques...

7.5CVSS7.2AI score0.0125EPSS
SaveExploits0References6
AlmaLinux
AlmaLinux
added 2024/04/30 12:00 a.m.82 views

Moderate: libnbd security update

Network Block Device NBD is a protocol for accessing Block Devices hard disks and disk-like devices over a Network. The libnbd is a userspace client library for writing NBD clients. Security Fixes: libnbd: Malicious NBD server may crash libnbd CVE-2023-5871 libnbd: Crash or misbehaviour when NBD...

6.5CVSS6.6AI score0.00922EPSS
SaveExploits1References6
AlmaLinux
AlmaLinux
added 2024/04/30 12:00 a.m.64 views

Moderate: avahi security update

Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other...

6.2CVSS6.7AI score0.00331EPSS
SaveExploits0References12
AlmaLinux
AlmaLinux
added 2024/04/30 12:00 a.m.49 views

Important: webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: webkitgtk: Processing web content may lead to arbitrary code execution CVE-2023-40414 webkitgtk: Processing web content may lead to arbitrary code execution CVE-2023-42852 webkitgtk: Processing...

9.8CVSS8.2AI score0.03208EPSS
SaveExploits0References22
AlmaLinux
AlmaLinux
added 2024/04/30 12:00 a.m.104 views

Moderate: freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fixes: freerdp: Incorrect offset calculation leading to DOS CVE-2023-39350...

9.8CVSS7.4AI score0.01809EPSS
SaveExploits12References26
AlmaLinux
AlmaLinux
added 2024/04/30 12:00 a.m.29 views

Moderate: zziplib security update

The zziplib is a lightweight library to easily extract data from zip files. Security Fixes: zziplib: invalid memory access at zzipdiskentrytofileheader in mmapped.c CVE-2020-18770 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...

5.5CVSS6.5AI score0.00344EPSS
SaveExploits1References4
Rows per page
Query Builder