1656 matches found
Security update for firejail (important)
openSUSE Security Update: Security update for firejail Announcement ID: openSUSE-SU-2021:0271-1 Rating: important References: 1181990 Cross-References: CVE-2020-17367 CVE-2020-17368 CVE-2021-26910 CVSS scores: CVE-2020-17367 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2020-17368 NV...
[ASA-202101-26] gobby: denial of service
Arch Linux Security Advisory ASA-202101-26 ========================================== Severity: Low Date : 2021-01-20 CVE-ID : CVE-2020-35450 Package : gobby Type : denial of service Remote : No Link : https://security.archlinux.org/AVG-1383 Summary ======= The package gobby before version...
Debian DSA-4830-1 : flatpak - security update
Simon McVittie discovered a bug in the flatpak-portal service that can allow sandboxed applications to execute arbitrary code on the host system a sandbox escape. The Flatpak portal D-Bus service flatpak-portal, also known by its D-Bus service name org.freedesktop.portal.Flatpak allows apps in a...
CVE-2021-21261
Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. A bug was discovered in the flatpak-portal service that can allow sandboxed applications to execute arbitrary code on the host system a sandbox escape. This sandbox-escape bug is present in versio...
CVE-2021-21261
Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. A bug was discovered in the flatpak-portal service that can allow sandboxed applications to execute arbitrary code on the host system a sandbox escape. This sandbox-escape bug is present in versio...
CVE-2021-21261
Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. A bug was discovered in the flatpak-portal service that can allow sandboxed applications to execute arbitrary code on the host system a sandbox escape. This sandbox-escape bug is present in versio...
Code injection
Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. A bug was discovered in the flatpak-portal service that can allow sandboxed applications to execute arbitrary code on the host system a sandbox escape. This sandbox-escape bug is present in versio...
CVE-2021-21261
Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. A bug was discovered in the flatpak-portal service that can allow sandboxed applications to execute arbitrary code on the host system a sandbox escape. This sandbox-escape bug is present in versio...
CVE-2020-35512
A use-after-free flaw was found in D-Bus when a system has multiple usernames sharing the same UID. When a set of policy rules references these usernames, D-Bus may free some memory in the heap, which is still used by data structures necessary for the other usernames sharing the UID, possibly...
Denial Of Service (DoS)
gobby is vulnerable to denial of service DoS. The vulnerability exists through a NULL pointer dereference in the D-Bus handler for certain setlanguage calls...
CVE-2020-35450
Gobby 0.4.11 allows a NULL pointer dereference in the D-Bus handler for certain setlanguage calls...
CVE-2020-35450
Gobby 0.4.11 allows a NULL pointer dereference in the D-Bus handler for certain setlanguage calls...
CVE-2020-35450
Gobby 0.4.11 allows a NULL pointer dereference in the D-Bus handler for certain setlanguage calls...
Null pointer dereference
Gobby 0.4.11 allows a NULL pointer dereference in the D-Bus handler for certain setlanguage calls...
CVE-2020-35450
Gobby 0.4.11 allows a NULL pointer dereference in the D-Bus handler for certain setlanguage calls...
CVE-2020-35450
Gobby 0.4.11 is affected by a NULL pointer dereference in the D-Bus handler for certain set_language calls. The issue, described as a denial-of-service risk (crash) on the targeted app, is noted across multiple advisories (e.g., Arch Linux ASA-202101-26) with upstream fixes referenced (upgrade to...
CVE-2020-35450
Gobby 0.4.11 allows a NULL pointer dereference in the D-Bus handler for certain setlanguage calls...
GLSA-202012-17 : D-Bus: Denial of service
The remote host is affected by the vulnerability described in GLSA-202012-17 D-Bus: Denial of service It was discovered that D-Bus did not properly handle the situation when two usernames have the same numeric UID. Impact : An attacker could possibly cause a Denial of Service condition or trigger...
D-Bus: Denial of service
Background D-Bus is a message bus system which processes can use to talk to each other. Description It was discovered that D-Bus did not properly handle the situation when two usernames have the same numeric UID. Impact An attacker could possibly cause a Denial of Service condition or trigger oth...
