CVE-2020-24460

Intel® Driver & Support Assistant (DSA) contains a vulnerability CVE-2020-24460 due to incorrect default permissions in versions before 20.8.30.6. An authenticated user could potentially enable a denial of service via local access. The Intel advisory INTEL-SA-00449 confirms affected products and ...

CVE-2020-24460: Incorrect Default Permissions

Incorrect default permissions in the IntelR DSA before version 20.8.30.6 may allow an authenticated user to potentially enable denial of service via local access...

Intel® DSA Advisory

Summary: A potential security vulnerability in the Intel® Driver & Support Assistant DSA may allow denial of service. Intel is releasing a software update to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-24460 Description: Incorrect default permissions in the Intel...

Debian DSA-4787-1 : moin - security update

Two vulnerabilities were discovered in moin, a Python clone of WikiWiki. - CVE-2020-15275 Catarina Leite discovered that moin is prone to a stored XSS vulnerability via SVG attachments. - CVE-2020-25074 Michael Chapman discovered that moin is prone to a remote code execution vulnerability via the...

PT-2020-4912

Name of the Vulnerable Software and Affected Versions: IntelR DSA versions prior to 20.8.30.6 Description: The issue is related to incorrect default permissions, which may allow an authenticated user to potentially enable denial of service via local access. The vulnerability is associated with...

Debian DSA-4784-1 : wordpress - security update

Several vulnerabilities were discovered in Wordpress, a web blogging tool. They allowed remote attackers to run insecure deserialization, embed spam, perform various Cross-Site Scripting XSS or Cross-Site Request Forgery CSRF attacks, escalate privileges, run arbitrary code, and delete arbitrary...

Debian DSA-4786-1 : libexif - security update

It was discovered that a boundary check in libexif, a library to parse EXIF files, could be optimised away by the compiler, resulting in a potential buffer overflow. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisor...

Debian DSA-4785-1 : raptor2 - security update

It was discovered that raptor2, an RDF parser library, is prone to heap-based buffer overflow flaws, which could result in denial of service, or potentially the execution of arbitrary code, if a specially crafted file is processed. C Tenable Network Security, Inc. The descriptive text and package...

Debian: Security Advisory (DSA-4786-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-4782-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-4782-1 : openldap - security update

A vulnerability in the handling of normalization with modrdn was discovered in OpenLDAP, a free implementation of the Lightweight Directory Access Protocol. An unauthenticated remote attacker can use this flaw to cause a denial of service slapd daemon crash via a specially crafted packet. C Tenab...

Debian DSA-4781-1 : blueman - security update

Vaisha Bernard discovered that Blueman, a graphical bluetooth manager performed insufficient validation on a D-Bus interface, which could result in denial of service or privilege escalation. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fro...

Debian: Security Advisory (DSA-4781-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-4780-1 : thunderbird - security update

Multiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code or denial of service. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4780. The text itself is...

Debian DSA-4779-1 : openjdk-11 - security update

Several vulnerabilities have been discovered in the OpenJDK Java runtime, which could result in denial of service, information disclosure, bypass of access/sandbox restrictions or the acceptance of untrusted certificates. C Tenable Network Security, Inc. The descriptive text and package checks in...

Debian: Security Advisory (DSA-4780-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-4778-1 : firefox-esr - security update

Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4778. The text...

Debian DSA-4777-1 : freetype - security update

Sergei Glazunov discovered a heap-based buffer overflow vulnerability in the handling of embedded PNG bitmaps in FreeType. Opening malformed fonts may result in denial of service or the execution of arbitrary code. C Tenable Network Security, Inc. The descriptive text and package checks in this...

Debian: Security Advisory (DSA-4775-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-4776-1 : mariadb-10.3 - security update

A security issue was discovered in the MariaDB database server. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4776. The text itself is copyright C Software in the Public Interest, Inc. include"compat.inc"; ...