The vulnerability of the input/output file descriptor structure in XNIO, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the XNIO input/output file descriptor structure relates to the increasing amount of data between garbage collection cycles. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Medium: gcc10-binutils

Issue Overview: An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.35.1. A heap-based buffer over-read can occur in bfdgetlsigned32 in libbfd.c because shentsize is not validated in bfdelfslurpsecondaryrelocsection in elf.c. CVE-2020-354...

PT-2021-6871 · Linux +10 · Linux Kernel +10

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a lack of authentication procedure in the Linux kernel, specifically in the control groups and namespaces subsystem. This allows an unprivileged user to write t...

openSUSE 15 Security Update : dbus-1 (openSUSE-SU-2021:1204-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:1204-1 advisory. - An issue was discovered in dbus = 1.3.0 before 1.12.18. The DBusServer in libdbus, as used in dbus- daemon, leaks file descriptors when a message...

GHSA-R6FF-2Q3C-V3PV Compiler optimisation leads to SEGFAULT

Affected versions of the pnet crate were optimized out by compiler, which caused dereference of uninitialized file descriptor which caused segfault...

Compiler optimisation leads to SEGFAULT

Affected versions of the pnet crate were optimized out by compiler, which caused dereference of uninitialized file descriptor which caused segfault...

openSUSE 15 Security Update : dbus-1 (openSUSE-SU-2021:2810-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:2810-1 advisory. - An issue was discovered in dbus = 1.3.0 before 1.12.18. The DBusServer in libdbus, as used in dbus- daemon, leaks file descriptors when a message...

PT-2021-7235 · Gitlab · Gitlab Runner +1

Name of the Vulnerable Software and Affected Versions: GitLab Runner versions up to 14.3.4 GitLab Runner versions 14.4 to 14.4.2 GitLab Runner versions 14.5 to 14.5.2 Description: The issue is related to information disclosure in GitLab Runner. In specific circumstances, trace file buffers would...

SUSE: Security Advisory (SUSE-SU-2021:2803-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2021:2766-1 Security update for spice-vdagent

This update for spice-vdagent fixes the following issues: - CVE-2020-25650: memory DoS via arbitrary entries in activexfers hash table bsc1177780 - CVE-2020-25651: possible file transfer DoS and information leak via activexfers hash map bsc1177781 - CVE-2020-25652: possibility to exhaust file...

Security Bulletin: IBM API Connect is impacted by vulnerabilities in node.js and OpenSSL (CVE-2021-23840, CVE-2021-22884, CVE-2021-22883)

Summary IBM API Connect has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2021-23840 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by an integer overflow in CipherUpdate. By sending an overly long argument, an attacker could exploit this vulnerability...

xnio: file descriptor leak caused by growing amounts of NIO Selector file handles may lead to DoS

A flaw was found in xnio. A file descriptor leak caused by growing amounts of NIO Selector file, handled between garbage collection cycles, may allow the attacker to cause a denial of service. The highest threat from this vulnerability is to system availability...

openSUSE: Security Advisory for spice-vdagent (openSUSE-SU-2021:2614-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for spice-vdagent (important)

openSUSE Security Update: Security update for spice-vdagent Announcement ID: openSUSE-SU-2021:2614-1 Rating: important References: 1173749 1177780 1177781 1177782 1177783 Cross-References: CVE-2020-25650 CVE-2020-25651 CVE-2020-25652 CVE-2020-25653 CVSS scores: CVE-2020-25650 NVD : 5.5...

SUSE SLES12 Security Update : dbus-1 (SUSE-SU-2021:2590-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2590-1 advisory. - CVE-2020-35512: Fixed a bug where users with the same numeric UID could lead to use-after-free and undefined behaviour. bsc118710...

Security Bulletin: Potential vulnerability with Node.js

Summary A potential vulnerability has been identified related to Node.js. Refer to details for additional information. Vulnerability Details CVEID: CVE-2021-23840 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by an integer overflow in CipherUpdate. By sending an overly long...

SUSE SLED12: dbus-1 / dbus-1-devel / dbus-1-devel-doc / dbus-1-x11 / libdbus-1-3 / etc (SUSE-SU-2021:2424-1)

The remote SUSE Linux SLED12 / SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2424-1 advisory. - CVE-2020-35512: users with the same numeric UID could lead to use-after-free and undefined behaviour bsc1187105 -...

Libcontainer and Docker Engine before 1.6.1 opens the file-descriptor passed to the pid-1 process before performing the chroot which allows local users to gain privileges via a symlink attack in an image.

...

The vulnerability of the `_dbus_read_socket_with_unix_fds` function in the `dbus/dbus-sysdeps-unix.c` component of the D-Bus interprocess communication system, related to improper resource release, allows a malicious actor to cause a service failure.

The vulnerability of the dbusreadsocketwithunixfds function in the dbus/dbus-sysdeps-unix.c component of the D-Bus interprocess communication system is related to incorrect handling of exceeding the number of file descriptors. Exploiting this vulnerability allows an attacker to cause a service...

SUSE: Security Advisory (SUSE-SU-2015:0439-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...