Amazon Linux 2 : libldb (ALAS-2021-1628)

The version of libldb installed on the remote host is prior to 1.5.4-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1628 advisory. A flaw was found in Samba's libldb. Multiple, consecutive leading spaces in an LDAP attribute can lead to an out-of-bounds memory...

Amazon Linux 2 : squid (ALAS-2021-1631)

The version of squid installed on the remote host is prior to 3.5.20-17. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1631 advisory. A flaw was found in squid. Due to improper validation while parsing the request URI, squid is vulnerable to HTTP request smuggling...

Amazon Linux 2 : kernel (ALAS-2021-1627)

The version of kernel installed on the remote host is prior to 4.14.231-173.360. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2021-1627 advisory. A memory leak in the adisupdatescanmode function in drivers/iio/imu/adisbuffer.c in the Linux kernel before 5.3.9...

Amazon Linux 2 : pki-core (ALAS-2021-1630)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2021-1630 advisory. A Reflected Cross Site Scripting flaw was found in the pki-ca module from the pki-core server due to the CA Agent Service not properly sanitizing the certificate request page. An attacker could...

Amazon Linux 2 : thunderbird (ALAS-2021-1632)

The version of thunderbird installed on the remote host is prior to 78.9.0-3. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2021-1632 advisory. The Mozilla Foundation Security Advisory describes this issue as:A texture upload of a Pixel Buffer Object could have...

Amazon Linux 2 : ipa (ALAS-2021-1626)

It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1626 advisory. A flaw was found in jQuery. HTML containingelements from untrusted sources are passed, even after sanitizing, to one of jQuery's DOM manipulation methods, which may execute untrusted code. The highest...

Important: thunderbird

Issue Overview: The Mozilla Foundation Security Advisory describes this issue as: A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memory corruption and a potentially exploitable information leak or crash...

Important: nettle

Issue Overview: A flaw was found in Nettle, where several Nettle signature verification functions GOST DSA, EDDSA & ECDSA result in the Elliptic Curve Cryptography point ECC multiply function being called with out-of-range scalers, possibly resulting in incorrect results. This flaw allows an...

Amazon Linux AMI : libldb (ALAS-2021-1494)

The version of libldb installed on the remote host is prior to 1.5.4-2.17. It is, therefore, affected by a vulnerability as referenced in the ALAS-2021-1494 advisory. A flaw was found in Samba's libldb. Multiple, consecutive leading spaces in an LDAP attribute can lead to an out-of-bounds memory...

Important: libldb

Issue Overview: A flaw was found in Samba's libldb. Multiple, consecutive leading spaces in an LDAP attribute can lead to an out-of-bounds memory write, leading to a crash of the LDAP server process handling the request. The highest threat from this vulnerability is to system availability...

Medium: ipa

Issue Overview: A flaw was found in jQuery. HTML containing elements from untrusted sources are passed, even after sanitizing, to one of jQuery's DOM manipulation methods, which may execute untrusted code. The highest threat from this vulnerability is to data confidentiality and integrity...

Important: squid

Issue Overview: A flaw was found in squid. Due to improper validation while parsing the request URI, squid is vulnerable to HTTP request smuggling. This issue could allow a trusted client to perform an HTTP request smuggling attack and access services otherwise forbidden by squid. The highest...

Amazon Linux AMI : nvidia (ALAS-2021-1495)

The version of nvidia installed on the remote host is prior to 418.197.02-2018.03.117. It is, therefore, affected by a vulnerability as referenced in the ALAS-2021-1495 advisory. NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer nvlddmkm.sys or...

Amazon Linux AMI : screen (ALAS-2021-1492)

The version of screen installed on the remote host is prior to 4.0.3-19.7. It is, therefore, affected by a vulnerability as referenced in the ALAS-2021-1492 advisory. A flaw was found in screen. A specially crafted sequence of combining characters could cause an out of bounds write leading to...

Amazon Linux AMI : tomcat7 (ALAS-2021-1493)

The version of tomcat7 installed on the remote host is prior to 7.0.108-1.40. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2021-1493 advisory. A deserialization flaw was discovered in Apache Tomcat's use of a FileStore. Under specific circumstances, an attacker...

Amazon Linux 2 : git (ALAS-2021-1621)

The version of git installed on the remote host is prior to 2.23.4-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1621 advisory. Git is an open-source distributed revision control system. In affected versions of Git a specially crafted repository that contains...

Amazon Linux 2 : screen (ALAS-2021-1623)

The version of screen installed on the remote host is prior to 4.1.0-0.27.20120314git3c2946. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1623 advisory. A flaw was found in screen. A specially crafted sequence of combining characters could cause an out of bounds...

Important: wpa_supplicant

Issue Overview: A flaw was found in the wpasupplicant, in the way it processes P2P Wi-Fi Direct provision discovery requests. This flaw allows an attacker who is within radio range of the device running P2P discovery to cause termination of the wpasupplicant process or potentially cause code...

Amazon Linux AMI : git (ALAS-2021-1490)

The version of git installed on the remote host is prior to 2.18.5-2.73. It is, therefore, affected by a vulnerability as referenced in the ALAS-2021-1490 advisory. Git is an open-source distributed revision control system. In affected versions of Git a specially crafted repository that contains...

Amazon Linux AMI : tomcat8 (ALAS-2021-1491)

The version of tomcat8 installed on the remote host is prior to 8.5.63-1.87. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2021-1491 advisory. A deserialization flaw was discovered in Apache Tomcat's use of a FileStore. Under specific circumstances, an attacker...