8443 matches found
Insecure Default
Overview Affected versions of this package are vulnerable to Insecure Default. Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utility created output files with default permissions and restricted those permissions immediately...
CVE-2021-24031
In the Zstandard command-line utility prior to v1.4.1, output files were created with default permissions. Correct file permissions matching the input would only be set at completion time. Output files could therefore be readable or writable to unintended parties...
CVE-2021-24031
CVE-2021-24031 is discussed in the connected IBM security bulletin as part of a broader set of vulnerabilities. The Zstandard command-line utility prior to v1.4.1 creates output files with default permissions and only sets the correct permissions at completion time, potentially making outputs rea...
[SECURITY] Fedora 32 Update: 389-ds-base-1.4.3.20-2.fc32
389 Directory Server is an LDAPv3 compliant server. The base package inclu des the LDAP server and command line utilities for server administration...
Zstandard 安全漏洞
Facebook Zstandard is an open source lossless data compression algorithm from Facebook Inc. in the United States. A security vulnerability exists in Zstandard command-line v1.4.1 and prior to v1.4.9, which stems from an incomplete fix to CVE-2021-24031, in which the Zstandard command-line tool...
Zstandard 安全漏洞
Facebook Zstandard is an open source lossless data compression algorithm from Facebook Inc. in the United States. A security vulnerability exists in the Zstandard command-line utility prior to v1.4.1, which originates from an output file that can be read or written to by unintended parties...
DEBIAN-CVE-2020-27749
A flaw was found in grub2 in versions prior to 2.06. Variable names present are expanded in the supplied command line into their corresponding variable contents, using a 1kB stack buffer for temporary storage, without sufficient bounds checking. If the function is called with a command line that...
AZL-6463 CVE-2020-27749 affecting package grub2 for versions less than 2.06~rc1-7
A flaw was found in grub2 in versions prior to 2.06. Variable names present are expanded in the supplied command line into their corresponding variable contents, using a 1kB stack buffer for temporary storage, without sufficient bounds checking. If the function is called with a command line that...
grub2: Stack buffer overflow in grub_parser_split_cmdline()
A flaw was found in grub2. Variable names present are expanded in the supplied command line into their corresponding variable contents, using a 1kB stack buffer for temporary storage, without sufficient bounds checking. If the function is called with a command line that references a variable with...
grub2: Stack buffer overflow in grub_parser_split_cmdline()
A flaw was found in grub2. Variable names present are expanded in the supplied command line into their corresponding variable contents, using a 1kB stack buffer for temporary storage, without sufficient bounds checking. If the function is called with a command line that references a variable with...
grub2: Stack buffer overflow in grub_parser_split_cmdline()
A flaw was found in grub2. Variable names present are expanded in the supplied command line into their corresponding variable contents, using a 1kB stack buffer for temporary storage, without sufficient bounds checking. If the function is called with a command line that references a variable with...
grub2: Stack buffer overflow in grub_parser_split_cmdline()
A flaw was found in grub2. Variable names present are expanded in the supplied command line into their corresponding variable contents, using a 1kB stack buffer for temporary storage, without sufficient bounds checking. If the function is called with a command line that references a variable with...
CVE-2020-25715
A flaw was found in pki-core. A specially crafted POST request can be used to reflect a DOM-based cross-site scripting XSS attack to inject code into the search query form which can get automatically executed. The highest threat from this vulnerability is to data integrity. Mitigation Because the...
The vulnerability of the command-line interface (CLI) of the Azure IoT platform, which allows a malicious actor to escalate their privileges
The vulnerability of the Azure IoT Command Line Interface CLI is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...
[SECURITY] Fedora 33 Update: xen-4.14.1-5.fc33
This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...
[SECURITY] Fedora 33 Update: skopeo-1.2.2-1.fc33
Command line utility to inspect images and repositories directly on Docker registries without the need to pull them...
[SECURITY] Fedora 33 Update: buildah-1.19.6-2.fc33
The buildah package provides a command line tool which can be used to create a working container from scratch or create a working container from an image as a starting point mount/umount a working container's root file system for manipulation save container's root file system layer to create a ne...
Fedora: Security Advisory for skopeo (FEDORA-2021-fb466fb623)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 33 Update: mingw-flac-1.3.3-1.fc33
FLAC stands for Free Lossless Audio Codec. Grossly oversimplified, FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, flac, a command-line program to encode and decode FLAC files, metaflac, a command-line...
