[SECURITY] Fedora 32 Update: xen-4.13.1-6.fc32

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

[SECURITY] Fedora 33 Update: community-mysql-8.0.21-11.fc33

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon mysqld and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files...

EulerOS 2.0 SP8 : trousers (EulerOS-SA-2020-2160)

According to the versions of the trousers packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges instead of by the tss user, it fails to...

gpsd: Arbitrary code execution

Background gpsd is a GPS daemon and library for USB/serial GPS devices and GPS/mapping clients. Description A stack-based buffer overflow was discovered in gpsd on port 2947/TCP or crafted JSON inputs. Impact A remote attacker could possibly execute arbitrary code with the privileges of the...

EulerOS 2.0 SP3 : trousers (EulerOS-SA-2020-2122)

According to the versions of the trousers package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges instead of by the tss user, it fails to...

Debian: Security Advisory (DLA-2383-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2020:1539-1 Security update for openldap2

This update for openldap2 fixes the following issues: - CVE-2020-8027: openldapupdatemodulespath.sh starts daemons unconditionally and uses fixed paths in /tmp bsc1175568. This update was imported from the SUSE:SLE-15:Update update project...

USN-4542-1: MiniUPnPd vulnerabilities

It was discovered that MiniUPnPd did not properly validate callback addresses. A remote attacker could possibly use this issue to expose sensitive information. CVE-2019-12107 It was discovered that MiniUPnPd incorrectly handled unpopulated user XML input. An attacker could possibly use this issue...

SUSE-SU-2020:2712-1 Security update for openldap2

This update for openldap2 fixes the following issues: - CVE-2020-8027: openldapupdatemodulespath.sh starts daemons unconditionally and uses fixed paths in /tmp bsc1175568...

USN-4540-1 atftp vulnerabilities

Denis Andzakovic discovered that atftpd incorrectly handled certain malformed packets. A remote attacker could send a specially crafted packet to cause atftpd to crash, resulting in a denial of service. CVE-2019-11365 Denis Andzakovic discovered that atftpd did not properly lock the thread list...

PT-2020-6796 · Fortinet · Forticlient +1

Name of the Vulnerable Software and Affected Versions: FortiOS versions 6.0.10 and below FortiOS versions 5.6.12 and below Description: The issue is related to a stack-based buffer overflow in the FortiClient NAC daemon fcnacd that can be exploited by a remote attacker authenticated to the SSL VP...

Denial Of Service (DoS)

py-mini-racer is vulnerable to denial of service DoS. The vulnerability exists through a heap overflow which exists through the configuration pushed from the extension to the daemon...

Debian DSA-4764-1 : inspircd - security update

Two security issues were discovered in the pgsql and mysql modules of the InspIRCd IRC daemon, which could result in denial of service. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4764. The text itself is...

The vulnerability of the routing demon bird, related to insufficient checking of packet size in the OSPFv2 protocol, allows a attacker to cause a service failure.

The vulnerability of the routing demon “bird” is related to insufficient checking of the size of network packets in the OSPFv2 protocol Open Shortest Path First. Exploiting this vulnerability allows a malicious actor to cause service failures by sending a specially crafted network packet during t...

CVE-2020-25490

Lack of cryptographic signature verification in the Sqreen PHP agent daemon before 1.16.0 makes it easier for remote attackers to inject rules for execution inside the virtual machine...

Design/Logic Flaw

Lack of cryptographic signature verification in the Sqreen PHP agent daemon before 1.16.0 makes it easier for remote attackers to inject rules for execution inside the virtual machine...

CVE-2020-25490

CVE-2020-25490 pertains to the Sqreen PHP agent daemon prior to version 1.16.0, where lack of cryptographic signature verification enables remote attackers to inject rules for execution inside the virtual machine. Affected software: Sqreen PHP agent daemon (versions

Juniper Junos DNS filtering JSA11028

According to the self reported version of Junos OS on the remote device is vulnerable to improper input validation. When DNS filtering is enabled on Juniper Networks Junos MX Series with one of the following cards MS-PIC, MS-MIC or MS-MPC, an incoming stream of packets processed by the...

Bypass the macOS TCC Framework

This module exploits a vulnerability in the TCC daemon on macOS Catalina use post/osx/escalate/tccbypass msf posttccbypass show actions ...actions... msf posttccbypass set ACTION msf posttccbypass show options ...show and set options... msf posttccbypass run This module requires Metasploit:...

[SECURITY] Fedora 32 Update: community-mysql-8.0.21-11.fc32

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon mysqld and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files...