OSV-2021-572 Global-buffer-overflow in mode_sense_page

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32538 Crash type: Global-buffer-overflow READ 4 Crash state: modesensepage scsidiskcheckmodeselect modeselectpages...

Directory Traversal Vulnerability in Hikvision Private Disks

Hikvision Private Network Disk is an efficient and practical professional network sharing tool. A directory traversal vulnerability exists in Hikvision Private Disk, which can be exploited by attackers to obtain sensitive information...

netty: Information disclosure via the local system temporary directory

In Netty there is a vulnerability on Unix-like systems involving an insecure temp file. When netty's multipart decoders are used, a local information disclosure can occur via the local system temporary directory if temporary storing uploads on the disk is enabled. On unix-like systems, the...

dovecot -- multiple vulnerabilities

Dovecot team reports: CVE-2021-29157: Dovecot does not correctly escape kid and azp fields in JWT tokens. This may be used to supply attacker controlled keys to validate tokens in some configurations. This requires attacker to be able to write files to local disk. CVE-2021-33515: On-path attacker...

[SECURITY] Fedora 34 Update: gnome-disk-utility-40~rc-1.fc34

This package contains the Disks and Disk Image Mounter applications. Disks supports partitioning, file system creation, encryption, fstab/crypttab editing, ATA SMART and other features...

[SECURITY] Fedora 34 Update: plasma-disks-5.21.3-1.fc34

Plasma Disks monitors S.M.A.R.T. data of disks and alerts the user when signs of imminent failure appear...

Medium: cloud-init

Issue Overview: A vulnerability was discovered in cloud-init which can improperly disclose randomly generated passwords as part of the chpasswd module. The fix prevents the generated password from being written to a world-readable log file on the local disk. CVE-2021-3429 Affected Packages:...

Fedora: Security Advisory for gnome-disk-utility (FEDORA-2021-303f6623fa)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Convuster: macOS adware now in Rust

Introduction Traditionally, most malicious objects detected on the macOS platform are adware: besides the already familiar Shlayer family, the TOP 10 includes Bnodlero, Cimpli, Adload and Pirrit adware. As a rule, most tend to be written in C, Objective-C or Swift. Recently, however, cybercrimina...

CVE-2021-28667

StackStorm before 3.4.1, in some situations, has an infinite loop that consumes all available memory and disk space. This can occur if Python 3.x is used, the locale is not utf-8, and there is an attempt to log Unicode data from an action or rule name...

CVE-2021-28667

StackStorm before 3.4.1, in some situations, has an infinite loop that consumes all available memory and disk space. This can occur if Python 3.x is used, the locale is not utf-8, and there is an attempt to log Unicode data from an action or rule name...

Design/Logic Flaw

StackStorm before 3.4.1, in some situations, has an infinite loop that consumes all available memory and disk space. This can occur if Python 3.x is used, the locale is not utf-8, and there is an attempt to log Unicode data from an action or rule name...

CVE-2021-28667

StackStorm before 3.4.1, in some situations, has an infinite loop that consumes all available memory and disk space. This can occur if Python 3.x is used, the locale is not utf-8, and there is an attempt to log Unicode data from an action or rule name...

CVE-2021-28667

StackStorm before 3.4.1 is affected by an infinite-loop vulnerability that can consume all available memory and disk space when logging Unicode data if Python 3.x is used and the locale is not UTF-8. Root cause is an unbounded loop triggered during logging of Unicode data from actions or rules. I...

Linux kernel competitive conditions issue vulnerability (CNVD-2021-22160)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the default privileges being limited to root on the floppy disk device dev fd0.No details of the vulnerabili...

CVE-2021-28667: Loop with Unreachable Exit Condition

StackStorm before 3.4.1, in some situations, has an infinite loop that consumes all available memory and disk space. This can occur if Python 3.x is used, the locale is not utf-8, and there is an attempt to log Unicode data from an action or rule name...

Driver Disk for Intel ixgbe 5.9.4 - For Citrix Hypervisor 8.2 LTSR

Who Should Install this Driver Disk? Customers running a Citrix Hypervisor 8.2 LTSRrelease who use Intel's ixgbe driver and wish to use the latest version of the following: Driver Module| Version ---|--- ixgbe| 5.9.4 Issues Resolved In this Driver Disk Addresses a memory leak in the control domai...

StackStorm 安全漏洞

StackStorm is an event-driven automation platform. The platform is mainly used for automated repair, security response, troubleshooting and program deployment functions. A security vulnerability exists in StackStorm before 3.4.1, which stems from the fact that StackStorm has an infinite loop that...

SUSE SLED15 / SLES15 Security Update : s390-tools (SUSE-SU-2021:0777-1)

This update for s390-tools fixes the following issues : Fixed an issue where IPL was not working when bootloader was installed on a SCSI disk with 4k physical blocksize without using a devicemapper target bsc1183041. CVE-2021-25316: Do not use predictable temporary file names bsc1182777. Made the...

Updated netty packages fix a security vulnerability

When netty's multipart decoders are used local information disclosure can occur via the local system temporary directory if temporary storing uploads on the disk is enabled CVE-2021-21290...