UBUNTU-CVE-2021-27645

The nameserver caching daemon nscd in the GNU C Library aka glibc or libc6 2.29 through 2.33, when processing a request for netgroup lookup, may crash due to a double-free, potentially resulting in degraded service or Denial of Service on the local system. This is related to netgroupcache.c...

CVE-2021-27645

The nameserver caching daemon nscd in the GNU C Library aka glibc or libc6 2.29 through 2.33, when processing a request for netgroup lookup, may crash due to a double-free, potentially resulting in degraded service or Denial of Service on the local system. This is related to netgroupcache.c...

CVE-2021-27645

The nameserver caching daemon nscd in the GNU C Library aka glibc or libc6 2.29 through 2.33, when processing a request for netgroup lookup, may crash due to a double-free, potentially resulting in degraded service or Denial of Service on the local system. This is related to netgroupcache.c...

CVE-2021-27645

CVE-2021-27645 affects the GNU C Library (glibc) nscd: a double-free in netgroupcache.c may crash the nameserver caching daemon and cause local Denial of Service. Public reports reference glibc versions 2.29–2.33 as affected, with remediation via security updates. Debian’s DLA-3152-1 (glibc 2.28-...

VMware ESXi SLP Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of VMware ESXi. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of SLP messages. The issue results from the lack of proper validati...

EulerOS 2.0 SP2 : gnome-keyring (EulerOS-SA-2021-1300)

According to the version of the gnome-keyring packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In pam/gkr-pam-module.c in GNOME Keyring before 3.27.2, the user's password is kept in a session-child process spawned from the LightDM...

FiberHome HG6245D Denial of Service Vulnerability

The HG6245D is an FTTH ONT router from FiberHome. A denial of service vulnerability exists in the FiberHome HG6245D. An attacker can exploit the vulnerability by sending a specific string to cause the telnet daemon to crash...

FiberHome HG6245D Hardcoded Credential Vulnerability (CNVD-2021-11339)

The HG6245D is an FTTH ONT router from FiberHome. A hard-coded credentials vulnerability exists in the FiberHome HG6245D. The vulnerability stems from the web daemon containing hard-coded admin/G0R2U1P2ag credentials against an ISP. No details of the vulnerability are provided at this time...

FiberHome HG6245D Hardcoded Credential Vulnerability (CNVD-2021-11346)

The HG6245D is an FTTH ONT router from FiberHome. A hardcoded credentials vulnerability exists in the FiberHome HG6245D. The vulnerability stems from the web daemon containing hardcoded user/tattoo@home credentials against an ISP. No details of the vulnerability are provided at this time...

FiberHome HG6245D Hardcoded Credential Vulnerability (CNVD-2021-11329)

The HG6245D is an FTTH ONT router from FiberHome. A hard-coded credentials vulnerability exists in the FiberHome HG6245D. The vulnerability stems from the web daemon containing hard-coded fi!b@er$h%o^mesuperadmin/sfuh+g|u credentials against an ISP. No details of the vulnerability are provided at...

FiberHome HG6245D Hardcoded Credential Vulnerability (CNVD-2021-11328)

The HG6245D is an FTTH ONT router from FiberHome. A hard-coded credentials vulnerability exists in the FiberHome HG6245D. The vulnerability stems from the web daemon containing hardcoded user/user1234 credentials against an ISP. No details of the vulnerability are provided at this time...

FiberHome HG6245D Hardcoded Credential Vulnerability (CNVD-2021-11332)

The HG6245D is an FTTH ONT router from FiberHome. A hard-coded credentials vulnerability exists in the FiberHome HG6245D. The vulnerability stems from the web daemon containing hardcoded admin/admin credentials against an ISP. No details of the vulnerability are provided at this time...

FiberHome HG6245D Hardcoded Credentials Vulnerability

The HG6245D is an FTTH ONT router from FiberHome. A hard-coded credentials vulnerability exists in the FiberHome HG6245D. The vulnerability stems from the web daemon containing hardcoded admin/tele1234 credentials against an ISP. No details of the vulnerability are provided at this time...

FiberHome HG6245D Hardcoded Credential Vulnerability (CNVD-2021-11334)

The HG6245D is an FTTH ONT router from FiberHome. A hard-coded credential vulnerability exists in the FiberHome HG6245D. The vulnerability stems from the web daemon containing hard-coded adminpldt/z6dUABtl270qRxt7a2uGTiw credentials against an ISP. No detailed vulnerability details are provided a...

FiberHome HG6245D Hardcoded Credential Vulnerability (CNVD-2021-11343)

The HG6245D is an FTTH ONT router from FiberHome. A hard-coded credentials vulnerability exists in the FiberHome HG6245D. The vulnerability stems from the web daemon containing hardcoded useradmin/8888888 credentials against an ISP. No details of the vulnerability are provided at this time...

AZL-34547 CVE-2021-26720 affecting package avahi for versions less than 0.8-1

avahi-daemon-check-dns.sh in the Debian avahi package through 0.8-4 is executed as root via /etc/network/if-up.d/avahi-daemon, and allows a local attacker to cause a denial of service or create arbitrary empty files via a symlink attack on files under /run/avahi-daemon. NOTE: this only affects th...

ALPINE-CVE-2021-26720

avahi-daemon-check-dns.sh in the Debian avahi package through 0.8-4 is executed as root via /etc/network/if-up.d/avahi-daemon, and allows a local attacker to cause a denial of service or create arbitrary empty files via a symlink attack on files under /run/avahi-daemon. NOTE: this only affects th...

DEBIAN-CVE-2021-26720

avahi-daemon-check-dns.sh in the Debian avahi package through 0.8-4 is executed as root via /etc/network/if-up.d/avahi-daemon, and allows a local attacker to cause a denial of service or create arbitrary empty files via a symlink attack on files under /run/avahi-daemon. NOTE: this only affects th...

AZL-6323 CVE-2021-26720 affecting package avahi for versions less than 0.8-1

avahi-daemon-check-dns.sh in the Debian avahi package through 0.8-4 is executed as root via /etc/network/if-up.d/avahi-daemon, and allows a local attacker to cause a denial of service or create arbitrary empty files via a symlink attack on files under /run/avahi-daemon. NOTE: this only affects th...

CVE-2021-26720

avahi-daemon-check-dns.sh in the Debian avahi package through 0.8-4 is executed as root via /etc/network/if-up.d/avahi-daemon, and allows a local attacker to cause a denial of service or create arbitrary empty files via a symlink attack on files under /run/avahi-daemon. NOTE: this only affects th...