FreeBSD : gitea -- multiple vulnerabilities (943d23b6-e65e-11eb-ad30-0800273f11ea)

The Gitea Team reports for release 1.14.5 : - Hide mirror passwords on repo settings page 16022 16355 - Update bluemonday to v1.0.15 16379 16380 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML databa...

The vulnerability of the FreeBSD operating systems, related to the use of memory after it is freed, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the FreeBSD operating systems is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

The vulnerability of the libradius kernel service in the FreeBSD operating system allows a hacker to cause a service failure.

The vulnerability of the libradius kernel service in the FreeBSD operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the FreeBSD operating system’s kernel, related to deficiencies in the authentication mechanism, allows a perpetrator to disable the SMAP protection and compromise the integrity of the protected information.

The vulnerability of the FreeBSD operating system’s kernel is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to disable the SMAP protection and compromise the integrity of the protected information during system calls...

FreeBSD : chromium -- multiple vulnerabilities (1ba21ff1-e672-11eb-a686-3065ec8fd3ec)

Chrome Releases reports : This release contains 8 security fixes, including : - 1219082 High CVE-2021-30559: Out of bounds write in ANGLE. Reported by Seong-Hwan Park SeHwa of SecunologyLab on 2021-06-11 - 1214842 High CVE-2021-30541: Use after free in V8. Reported by Richard Wheeldon on 2021-05-...

FreeBSD : Ruby -- multiple vulnerabilities (7ed5779c-e4c7-11eb-91d7-08002728f74c)

Ruby news : This release includes security fixes. Please check the topics below for details. CVE-2021-31810: Trusting FTP PASV responses vulnerability in Net::FTP CVE-2021-32066: A StartTLS stripping vulnerability in Net::IMAP CVE-2021-31799: A command injection vulnerability in RDoc %NASLMINLEVE...

FreeBSD : go -- crypto/tls: clients can panic when provided a certificate of the wrong type for the negotiated parameters (c365536d-e3cf-11eb-9d8d-b37b683944c2)

The Go project reports : crypto/tls clients can panic when provided a certificate of the wrong type for the negotiated parameters. net/http clients performing HTTPS requests are also affected. The panic can be triggered by an attacker in a privileged network position without access to the server...

FreeBSD : mantis -- multiple vulnerabilities (9b1699ff-d84c-11eb-92d6-1b6ff3dfe4d3)

Mantis 2.25.1 and 2.25.2 releases report : Security and maintenance release, PHPMailer update to 6.5.0 - 0028552: XSS in managecustomfieldeditpage.php CVE-2021-33557 - 0028821: Update PHPMailer to 6.5.0 CVE-2021-3603, CVE-2020-36326 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

FreeBSD : Gitlab -- vulnerability (01974420-dfaf-11eb-ba49-001b217b3468)

Gitlab reports : Arbitrary file read via design feature %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2021 Jacques Vidrine and contributors Redistribution and use in sourc...

FreeBSD : openexr v3.0.5 -- fixes miscellaneous security issues (f2596f27-db4c-11eb-8bc6-c556d71493c9)

Cary Phillips reports : - 1038 fix/extend part number validation in MultiPart methods - 1037 verify data size in deepscanlines with NOCOMPRESSION - 1036 detect buffer overflows in RleUncompress %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

FreeBSD : Gitlab -- Multiple Vulnerabilities (8ba8278d-db06-11eb-ba49-001b217b3468)

Gitlab reports : DoS using Webhook connections CSRF on GraphQL API allows executing mutations through GET requests Private projects information disclosure Denial of service of user profile page Single sign-on users not getting blocked Some users can push to Protected Branch with Deploy keys A...

FreeBSD : Exiv2 -- Multiple vulnerabilities (d49f86ab-d9c7-11eb-a200-00155d01f201)

Exiv2 teams reports : Multiple vulnerabilities covering buffer overflows, out-of-bounds, read of uninitialized memory and denial of serivce. The heap overflow is triggered when Exiv2 is used to read the metadata of a crafted image file. An attacker could potentially exploit the vulnerability to...

FreeBSD : jenkins -- multiple vulnerabilities (9d271bab-da22-11eb-86f0-94c691a700a6)

Jenkins Security Advisory : DescriptionMedium SECURITY-2278 / CVE-2021-21670 Improper permission checks allow canceling queue items and aborting builds High SECURITY-2371 / CVE-2021-21671 Session fixation vulnerability %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

FreeBSD : PuppetDB -- SQL Injection (41bc849f-d5ef-11eb-ae37-589cfc007716)

Puppet reports : Fixed an issue where someone with the ability to query PuppetDB could arbitrarily write, update, or delete data CVE-2021-27021 PDB-5138. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuX...

Vulnerability of the ftpd/popen component of the ftpd service on FreeBSD and OpenBSD operating systems, allowing attackers to cause service failures.

The vulnerability of the ftpd/popen component of the ftpd service in FreeBSD and OpenBSD is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

FreeBSD : RabbitMQ -- Denial of Service via improper input validation (7003b62d-7252-46ff-a9df-1b1900f1e65b)

Jonathon Knudsen of Synopsys Cybersecurity Research Center reports : All versions prior to 3.8.16 are prone to a denial of service vulnerability due to improper input validation in AMQP 1.0 client connection endpoint. A malicious client can exploit the vulnerability by sending malicious AMQP...

FreeBSD : RabbitMQ-C -- integer overflow leads to heap corruption (7c555ce3-658d-4589-83dd-4b6a31c5d610)

alanxz reports : When parsing a frame header, validate that the framesize is less than or equal to INT32MAX. Given framemax is limited between 0 and INT32MAX in amqplogin and friends, this does not change the API. This prevents a potential buffer overflow when a malicious client sends a framesize...

FreeBSD : ircII -- denial of service (9f27ac74-cdee-11eb-930d-fc4dd43e2b6a)

Michael Ortmann reports : ircii has a bug in parsing CTCP UTC messages. Its unknown if this could also be used for arbitrary code execution. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database :...

FreeBSD : dovecot-pigeonhole -- Sieve excessive resource usage (f3fc2b50-d36a-11eb-a32c-00a0989e4ec1)

Dovecot team reports reports : Sieve interpreter is not protected against abusive scripts that claim excessive resource usage. Fixed by limiting the user CPU time per single script execution and cumulatively over several script runs within a configurable timeout period. Sufficiently large CPU tim...

FreeBSD : dovecot -- multiple vulnerabilities (d18f431d-d360-11eb-a32c-00a0989e4ec1)

Dovecot team reports : CVE-2021-29157: Dovecot does not correctly escape kid and azp fields in JWT tokens. This may be used to supply attacker controlled keys to validate tokens in some configurations. This requires attacker to be able to write files to local disk. CVE-2021-33515: On-path attacke...