FreeBSD : samba -- Multiple Vulnerabilities (ae599263-bca2-11ea-b78f-b42e99a1b9c3)

The Samba Team reports : Four vulnerabilities were fixed in samba : - CVE-2020-10730: NULL pointer de-reference and use-after-free in Samba AD DC LDAP Server with ASQ, VLV and pagedresults - CVE-2020-10745: Parsing and packing of NBT and DNS packets can consume excessive CPU in the AD DC only -...

FreeBSD : drupal -- Multiple Vulnerabilities (b51d5391-bb76-11ea-9172-4c72b94353b5)

Drupal Security Team reports : The Drupal core Form API does not properly handle certain form input from cross-site requests, which can lead to other vulnerabilities. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML...

FreeBSD : xrdp -- Local users can perform a buffer overflow attack against the xrdp-sesman service and then inpersonate it (2675f0db-baa5-11ea-aa12-80ee73419af3)

Ashley Newson reports : The xrdp-sesman service can be crashed by connecting over port 3350 and supplying a malicious payload. Once the xrdp-sesman process is dead, an unprivileged attacker on the server could then proceed to start their own imposter sesman service listening on port 3350. C Tenab...

FreeBSD : MongoDB -- Ensure RoleGraph can serialize authentication restrictions to BSON (d0be8e1f-b19a-11ea-94aa-b827eb2f57d4)

reports : Improper serialization of MongoDB Server's internal authorization state permits a user with valid credentials to bypass IP source address protection mechanisms following administrative action. Credit Discovered by Tony Yesudas. C Tenable Network Security, Inc. The descriptive text and...

FreeBSD : PuTTY -- Release 0.74 fixes two security vulnerabilities (6190c0cd-b945-11ea-9401-2dcf562daa69)

Simon Tatham reports : Release 0.74 fixes the following security issues : - New configuration option to disable PuTTY's default policy of changing its host key algorithm preferences to prefer keys it already knows. There is a theoretical information leak in this policy. CVE-2020-14002 - In some...

FreeBSD : libvorbis -- two vulnerabilities (4200d5f5-b985-11ea-b08a-f8b156b6dcc8)

Two vulnerabilities were fixed in the upstream repository : - The barknoisehybridmp function allows remote attackers to cause a denial of service out-of-bounds access and application crash or possibly have unspecified other impact via a crafted file. - mapping0forward does not validate the number...

Fedora 31 : tcpreplay (2020-256ac53cc7)

This release contains bug fixes only which includes security fixes : - Increase cache buffers size to accomodate VLAN edits 594 - Correct L2 header length to correct IP header offset 583 - Fix warnings from gcc version 10 580 - Heap Buffer Overflow in randomizeiparp 579 - Use after free in...

FreeBSD : IMAP fcc/postpone machine-in-the-middle attack (5b397852-b1d0-11ea-a11c-4437e6ad11c4)

mutt 1.14.3 updates : CVE-2020-14093 - IMAP fcc/postpone man-in-the-middle attack via a PREAUTH response. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2020 Jacques Vidrine and contributors...

FreeBSD : chromium -- multiple vulnerabilities (6a5d15b6-b661-11ea-8015-e09467587c17)

Chrome Releases reports : This update includes 2 security fixes, including : - 1092308 High CVE-2020-6509: Use after free in extensions. Reported by Anonymous on 2020-06-08 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXM...

FreeBSD : CUPS -- memory corruption (ce0c8590-b628-11ea-9d28-3c970ee9157c)

Apple reports : - CVE-2019-8842: The ippReadIO function may under-read an extension. - CVE-2020-3898: The ppdOpen function did not handle invalid UI constraint. ppdcSource::getresolution function did not handle invalid resolution strings. An application may be able to gain elevated privileges. C...

FreeBSD : curl -- multiple vulnerabilities (6bff5ca6-b61a-11ea-aef4-08002728f74c)

curl security problems : CVE-2020-8169: Partial password leak over DNS on HTTP redirect libcurl can be tricked to prepend a part of the password to the host name before it resolves it, potentially leaking the partial password over the network and to the DNS servers. libcurl can be given a usernam...

FreeBSD : Machine-in-the-middle response injection attack when using STARTTLS with IMAP, POP3, and SMTP (29b13a34-b1d2-11ea-a11c-4437e6ad11c4)

mutt 1.14.4 updates : CVE-2020-14954 - Machine-in-the-middle response injection attack when using STARTTLS with IMAP, POP3, and SMTP C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2020 Jacques...

Fedora 32 : tcpreplay (2020-f47830961a)

This release contains bug fixes only which includes security fixes : - Increase cache buffers size to accomodate VLAN edits 594 - Correct L2 header length to correct IP header offset 583 - Fix warnings from gcc version 10 580 - Heap Buffer Overflow in randomizeiparp 579 - Use after free in...

FreeBSD : Rails -- permission vulnerability (feb8afdc-b3e5-11ea-9df5-08002728f74c)

Ruby on Rails blog : Rails 6.0.3.2 has been released! This version of Rails contains an important security patch, and you should upgrade! The release contains only one patch that addresses CVE-2020-8185. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

FreeBSD : BIND -- Remote Denial of Service vulnerability (75d72e03-b137-11ea-8659-901b0ef719ab)

ISC reports : An assertion check in BIND that is meant to prevent going beyond the end of a buffer when processing incoming data can be incorrectly triggered by a large response during zone transfer. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

FreeBSD : BIND -- Remote Denial of Service vulnerability (f00d1873-b138-11ea-8659-901b0ef719ab)

ISC reports : The asterisk character '' is allowed in DNS zone files, where it is most commonly present as a wildcard at a terminal node of the Domain Name System graph. However, the RFCs do not require and BIND does not enforce that an asterisk character be present only at a terminal node. A...

FreeBSD : Several issues in Lynis (f28476f7-b166-11ea-8775-507b9d01076a)

lynis update : This release resolves two security issues - CVE-2020-13882 - Discovered by Sander Bos, code submission by Katarina Durechova - CVE-2019-13033 - Discovered by Sander Bos C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the...

FreeBSD : vlc heap-based buffer overflow (77896891-b08a-11ea-937b-b42e99a1b9c3)

Thomas Guillem reports : A heap-based buffer overflow in the hxxxAnnexBtoxVC function in modules/packetizer/hxxxnal.c in VideoLAN VLC media player before 3.0.11 allows remote attackers to cause a denial of service application crash or execute arbitrary code via a crafted H.264 Annex-B video .avi...

FreeBSD : LibreOffice Security Advisory (96fb446d-ac7b-11ea-8b5e-b42e99a1b9c3)

LibreOffice reports : Two flaws were found in LibreOffice : - CVE-2020-12802: remote graphics contained in docx format retrieved in 'stealth mode' - CVE-2020-12803: XForms submissions could overwrite local files C Tenable Network Security, Inc. The descriptive text and package checks in this plug...

FreeBSD : several security issues in sqlite3 (c4ac9c79-ab37-11ea-8b5e-b42e99a1b9c3)

sqlite3 update : Various security issues could be used by an attacker to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code. - CVE-2020-11655: SQLite through 3.31.1 allows attackers to cause a denial of service segmentation fault via a malformed...