4711 matches found
Oracle Linux 9 : curl (ELSA-2022-6157)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-6157 advisory. - fix unpreserved file permissions CVE-2022-32207 - fix HTTP compression denial of service CVE-2022-32206 Tenable has extracted the preceding descripti...
curl security update
7.76.1-14.el90.5 - fix unpreserved file permissions CVE-2022-32207 - fix HTTP compression denial of service CVE-2022-32206 - fix FTP-KRB bad message verification CVE-2022-32208...
curl: HTTP compression denial of service
A vulnerability was found in curl. This issue occurs because the number of acceptable "links" in the "decompression chain" was unbounded, allowing a malicious server to insert a virtually unlimited number of compression steps. This flaw leads to a denial of service, either by mistake or by a...
curl: HTTP compression denial of service
A vulnerability was found in curl. This issue occurs because the number of acceptable "links" in the "decompression chain" was unbounded, allowing a malicious server to insert a virtually unlimited number of compression steps. This flaw leads to a denial of service, either by mistake or by a...
curl security update
An update is available for curl. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The curl packages provide the libcurl library and the curl utility for downloadi...
PT-2022-37215 · Blosc2 · Blosc2
Name of the Vulnerable Software and Affected Versions: blosc2 affected versions not specified Description: The issue is related to a heap-buffer-overflow crash. Technical details about the crash include the do job function, blosc compress context, and blosc2 compress. Recommendations: At the...
curl security update
7.61.1-22.el86.4 - fix HTTP compression denial of service CVE-2022-32206 - fix FTP-KRB bad message verification CVE-2022-32208...
Oracle Linux 8 : curl (ELSA-2022-6159)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-6159 advisory. - fix HTTP compression denial of service CVE-2022-32206 Tenable has extracted the preceding description block directly from the Oracle Linux security...
Explained: Steganography
Steganography is the prime example of effectively hiding something in plain sight. The word steganography comes from the Greek words "stegos" meaning "cover" and "grafia" meaning "writing." Steganography, then, is defined as "covered writing." In essence, we use the name steganography for every...
August 16, 2022—KB5016693 (OS Build 20348.946) Preview
None None...
Fedora: Security Advisory for zlib (FEDORA-2022-3a92250fd5)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 36 Update: zlib-1.2.11-32.fc36
Zlib is a general-purpose, patent-free, lossless data compression library which is used by many different programs...
xz security update
CentOS Errata and Security Advisory CESA-2022:5052 An update for xz is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
Important: go-toolset:rhel8 security and bug fix update
Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fixes: golang: compress/gzip: stack exhaustion in Reader.Read CVE-2022-30631 golang: net/http: improper sanitization of Transfer-Encoding header CVE-2022-1705 golang: go/parser: stac...
GSD-2022-1004626 f2fs: attach inline_data after setting compression
f2fs: attach inlinedata after setting compression This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.127 by commit...
PT-2022-32725
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.15.46 through v5.15.50 Description The issue is related to the f2fs filesystem, specifically with attaching inline data after setting compression. The actual impact and attack plausibility have not yet been proven...
PT-2022-32888
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.127 Description The issue is related to the f2fs filesystem, specifically with attaching inline data after setting compression. The actual impact and attack plausibility have not yet been proven...
PT-2022-32517
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.18.3 through v5.18.8 Description The issue is related to the f2fs filesystem, specifically with attaching inline data after setting compression. The actual impact and attack plausibility have not yet been proven...
Fedora: Security Advisory for go-bindata (FEDORA-2022-5ef0bd9a27)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...