NewStart CGSL MAIN 6.02 : dbus Vulnerability (NS-SA-2021-0052)

The remote NewStart CGSL host, running version MAIN 6.02, has dbus packages installed that are affected by a vulnerability: - An issue was discovered in dbus = 1.3.0 before 1.12.18. The DBusServer in libdbus, as used in dbus- daemon, leaks file descriptors when a message exceeds the per-message...

Huawei EulerOS: Security Advisory for ibus (EulerOS-SA-2021-1483)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

virt:rhel and virt-devel:rhel security update

An update is available for libnbd, nbdkit, libguestfs-winsupport, supermin, libiscsi, hivex, netcf, perl-Sys-Virt, seabios, sgabios, libvirt-dbus, libvirt-python. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

SUSE SLES15 Security Update : rpmlint (SUSE-SU-2021:0658-1)

This update for rpmlint fixes the following issues : Whitelist PAM modules and DBUS rules for cockpit bsc1169614 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as...

SUSE-SU-2021:0658-1 Security update for rpmlint

This update for rpmlint fixes the following issues: - Whitelist PAM modules and DBUS rules for cockpit bsc1169614...

SUSE SLED15 / SLES15 Security Update : rpmlint (SUSE-SU-2021:0597-1)

This update for rpmlint fixes the following issues : Whitelist PAM modules and DBUS rules for cockpit bsc1169614 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as...

SUSE-SU-2021:0597-1 Security update for rpmlint

This update for rpmlint fixes the following issues: - Whitelist PAM modules and DBUS rules for cockpit bsc1169614...

DEBIAN-CVE-2020-35512

A use-after-free flaw was found in D-Bus Development branch = 1.13.16, dbus-1.12.x stable branch = 1.12.18, and dbus-1.10.x and older branches = 1.10.30 when a system has multiple usernames sharing the same UID. When a set of policy rules references these usernames, D-Bus may free some memory in...

Fedora 32 : thunderbird (2021-93149af72b)

The remote Fedora 32 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-93149af72b advisory. - This update fixes dependency filtering that caused thunderbird to inadvertently lose requires on dbus- glib. ---- Update to latest upstream version. ----...

EulerOS 2.0 SP5 : gdm (EulerOS-SA-2021-1192)

According to the version of the gdm package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the accountservice service via dbus in a timely manner on...

flatpak: sandbox escape via spawn portal

A flaw was found in Flatpak. The Flatpak portal D-Bus service passes caller-specified environment variables to non-sandboxed processes on the host system, and in particular to the flatpak run command that is used to launch the new sandbox instance. A malicious or compromised Flatpak app could set...

CentOS 8 : dbus (CESA-2020:3014)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:3014 advisory. - dbus: denial of service via file descriptor leak CVE-2020-12049 Note that Nessus has not tested for this issue but has instead relied only on the application'...

CentOS 8 : dbus (CESA-2019:3707)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:3707 advisory. - dbus: DBusServer DBUSCOOKIESHA1 authentication bypass CVE-2019-12749 Note that Nessus has not tested for this issue but has instead relied only on the...

openSUSE Security Update : rpmlint (openSUSE-2021-45)

This update for rpmlint fixes the following issues : - Whitelist PAM modules and DBUS rules for cockpit bsc1169614 This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

OPENSUSE-SU-2021:0045-1 Security update for rpmlint

This update for rpmlint fixes the following issues: - Whitelist PAM modules and DBUS rules for cockpit bsc1169614 This update was imported from the SUSE:SLE-15:Update update project...

Security update for rpmlint (moderate)

openSUSE Security Update: Security update for rpmlint Announcement ID: openSUSE-SU-2021:0045-1 Rating: moderate References: 1169614 Affected Products: openSUSE Leap 15.1 An update that contains security fixes can now be installed. Description: This update for rpmlint fixes the following issues: -...

Gobby Null Pointer Dereference Vulnerability

Gobby is a free collaborative editor. A null pointer dereference vulnerability exists in Gobby 0.4.11 in the D-Bus handler for certain setlanguage calls. An attacker could exploit this vulnerability to cause a denial of service...

DEBIAN-CVE-2020-35450

Gobby 0.4.11 allows a NULL pointer dereference in the D-Bus handler for certain setlanguage calls...

Gobby 代码问题漏洞

Gobby is a free collaborative editor. A null pointer dereference vulnerability exists in Gobby 0.4.11 in the D-Bus handler for certain setlanguage calls. An attacker could exploit this vulnerability to cause a denial of service...

GLSA-202012-17 : D-Bus: Denial of service

The remote host is affected by the vulnerability described in GLSA-202012-17 D-Bus: Denial of service It was discovered that D-Bus did not properly handle the situation when two usernames have the same numeric UID. Impact : An attacker could possibly cause a Denial of Service condition or trigger...