SUSE-SU-2020:1530-1 Security update for libreoffice

This update for libreoffice to 6.4.4.2 fixes the following issues: Security issue fixed: - CVE-2020-12801: Fixed an issue with encrypted MSOffice documents that could be accidentally saved unencrypted bsc1171997. Non-security issues fixed: - Elements on title page mixed up bsc1160687. - Image...

The vulnerability of the FreeRDP remote desktop protocol, caused by indexing errors, allows a hacker to trigger a service failure or a client-side malfunction, resulting in the absence or distortion of sound.

The vulnerability of the FreeRDP remote desktop protocol is caused by indexing errors. Exploiting this vulnerability allows a malicious actor to cause service failures or malfunctions in the client-side component, resulting in the absence or distortion of audio signals...

PT-2020-2894

Name of the Vulnerable Software and Affected Versions Cisco IOx affected versions not specified Description The issue is related to insufficient path restriction enforcement in the Cisco Application Framework component of the Cisco IOx application environment. This could allow an authenticated,...

CVE-2020-13227

An issue was discovered in Sysax Multi Server 6.90. An attacker can determine the username under which the web server is running by triggering an invalid path permission error. This bypasses the fakepath protection mechanism...

The vulnerability in the Microsoft Spool Subsystem of the protocol discoverer, the Wireshark network traffic analyzer, allows a hacker to cause a service failure.

The vulnerability in the Microsoft Spool Subsystem of the Wireshark network traffic analyzer involves resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the Windows operating system, related to errors in processing memory objects, allows a perpetrator to trigger a service failure.

The vulnerability of the Windows operating system is related to errors in processing objects in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the disct_gssapi_work function in the Wireshark network traffic analyzer allows a hacker to cause a service failure.

The vulnerability of the disctgssapiwork function in the Wireshark network traffic analyzer program is related to resource management errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Cybozu Kintone Mobile Information Disclosure Vulnerability

Cybozu Kintone Mobile is an office application for mobile platforms from Cybozu Japan. The program supports file uploading, editing records, and push notifications. An information disclosure vulnerability exists in Cybozu Kintone Mobile versions 1.0.0 through 2.5 for the Android-based platform. T...

Lenovo Printer LJ4010DN Input Validation Error Vulnerability (CNVD-2020-31083)

The Lenovo Printer LJ4010DN is a multifunction printer from the Chinese company Lenovo. A security vulnerability exists in the Lenovo Printer LJ4010DN using firmware versions prior to 1.01. A remote attacker can exploit the vulnerability by sending specially crafted packets to cause the printer t...

Vulnerabilities of operating systems such as iOS, tvOS, macOS, watchOS, the browser Safari, the multimedia player iTunes for Windows operating systems, and the iCloud service for Windows operating systems are caused by indexing errors that allow attackers to execute arbitrary code.

Vulnerabilities of operating systems such as iOS, tvOS, macOS, watchOS, the browser Safari, the multimedia player iTunes for operating systems Windows, and the iCloud service for operating systems Windows are caused by indexing errors. Exploiting these vulnerabilities can allow a remote attacker ...

The vulnerability of the State Repository Service component of the Windows operating system allows a perpetrator to elevate their privileges and execute arbitrary code.

The vulnerability of the State Repository Service component of the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code through a specially created application...

The vulnerability of the pivot_root function (fs/namespace.c) in Linux operating system kernels, which allows a hacker to trigger a service failure

The vulnerability of the pivotroot function fs/namespace.c in Linux operating system kernels arises due to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2020-13649

parser/js/js-scanner.c in JerryScript 2.2.0 mishandles errors during certain out-of-memory conditions, as demonstrated by a scannerreverseinfolist NULL pointer dereference and a scannerscanall assertion failure...

CVE-2019-15924

A flaw was found in the way the fm10k driver in the Linux kernel reacted to memory-related errors during driver initialization. This flaw allows a local attacker to cause a denial of service and crash the system. Mitigation To mitigate this issue, prevent module fm10k from being loaded. Please se...

Huawei Data Communication: Numeric Errors Vulnerability in Some Huawei Routers (huawei-sa-20171215-01-router)

Some Huawei routers have a numeric error vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you c...

Apple Mac OS X Security Update (HT211170) - 01

Apple Mac OS X is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

The vulnerability of the Windows Runtime component of the Windows operating system allows a perpetrator to increase their privileges or execute arbitrary code.

The vulnerability of the Windows Runtime component of the Windows operating system exists due to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to increase their privileges or execute arbitrary code using a specially created application...

The vulnerability of the Windows Jet Database Engine component of the operating system allows a perpetrator to execute arbitrary code.

The vulnerability of the Windows Jet Database Engine component of the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially crafted file...

The vulnerability of the State Repository Service component of the Windows operating system allows a perpetrator to elevate their privileges and execute arbitrary code.

The vulnerability of the State Repository Service component of the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code through a specially created application...

Vulnerability of Microsoft Graphics Components of the Windows operating system, allowing a hacker to execute arbitrary code

The vulnerability of Microsoft Graphics Components in the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...