GNOME Epiphany 缓冲区错误漏洞

GNOME Epiphany is a simple, clean web view. A security vulnerability exists in GNOME Epiphany before 41.4, which stems from the fact that HTML documents can trigger client-side buffer overflows in ephystringshorten in the UI process via long page titles...

Gnome Pango 1.42 and later is affected by: Buffer Overflow. The impact is: The heap based buffer overflow can be used to get code execution. The component is: function name: pango_log2vis_get_embedding_levels, assignment of nchars and the loop condition. The attack vector is: Bug can be used when application pass invalid utf-8 strings to functions like pango_itemize.

...

Huawei EulerOS: Security Advisory for nautilus (EulerOS-SA-2022-1356)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP8 : nautilus (EulerOS-SA-2022-1356)

According to the versions of the nautilus packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in GNOME Nautilus 3.30 prior to 3.30.6 and 3.32 prior to 3.32.1. A compromised thumbnailer may escape the bubblewrap...

CVE-2022-27811

GNOME OCRFeeder before 0.8.4 allows OS command injection via shell metacharacters in a PDF or image filename...

CVE-2022-27811

GNOME OCRFeeder before 0.8.4 allows OS command injection via shell metacharacters in a PDF or image filename...

Command injection

GNOME OCRFeeder before 0.8.4 allows OS command injection via shell metacharacters in a PDF or image filename...

CVE-2022-27811

GNOME OCRFeeder before 0.8.4 allows OS command injection via shell metacharacters in a PDF or image filename...

CVE-2022-27811

CVE-2022-27811 affects GNOME OCRFeeder versions prior to 0.8.4. The issue is an OS command injection in which shell metacharacters in a PDF or image filename can be executed, as documented across multiple sources (GNOME/Red Hat entries, PT security note). The root cause is improper sanitization o...

PT-2022-18606 · Gnome +2 · Gnome Ocrfeeder +2

Name of the Vulnerable Software and Affected Versions: GNOME OCRFeeder versions prior to 0.8.4 Description: The issue allows OS command injection via shell metacharacters in a PDF or image filename. Recommendations: For versions prior to 0.8.4, update to version 0.8.4 or later to resolve the issu...

Red Hat GNOME OCRFeeder 操作系统命令注入漏洞

Red Hat GNOME OCRFeeder is a document layout analysis and optical character recognition system from Red Hat, Inc. An operating system command injection vulnerability exists in Red Hat GNOME OCRFeeder prior to version 0.8.4, which stems from OCRFeeder allowing the injection of operating system...

CVE-2022-27811

GNOME OCRFeeder before 0.8.4 allows OS command injection via shell metacharacters in a PDF or image filename...

CVE-2022-27811

GNOME OCRFeeder before 0.8.4 allows OS command injection via shell metacharacters in a PDF or image filename...

Denial Of Service (DoS)

GNOME gdk-pixbuf is vulnerable to denial of service. A heap-buffer overflow is happened when decoding the lzw compressed stream of image data in GIF files with lzw minimum code size equals to 12 which causes an application crash...

Command injection in guake

Guake is a drop-down terminal for GNOME. The package guake before 3.8.5 is vulnerable to Exposed Dangerous Method or Function due to the exposure of executecommand and executecommandbyuuid methods via the d-bus interface, which makes it possible for a malicious user to run an arbitrary command vi...

GHSA-7X48-7466-3G33 Command injection in guake

Guake is a drop-down terminal for GNOME. The package guake before 3.8.5 is vulnerable to Exposed Dangerous Method or Function due to the exposure of executecommand and executecommandbyuuid methods via the d-bus interface, which makes it possible for a malicious user to run an arbitrary command vi...

ALBA-2022:0884 gdm bug fix and enhancement update

The GNOME Display Manager GDM provides the graphical login screen. The screen is shown shortly after boot, after log out, and when switching the current user. Bug Fixes and Enhancements: gdm crashed in ensuredisplayforseat, can't login to the GUI BZ2036584...

gdm bug fix and enhancement update

The GNOME Display Manager GDM provides the graphical login screen. The screen is shown shortly after boot, after log out, and when switching the current user. Bug Fixes and Enhancements: gdm crashed in ensuredisplayforseat, can't login to the GUI BZ2036584...

USN-5324-1: libxml2 vulnerability

It was discovered that libxml2 incorrectly handled certain XML files. An attacker could use this issue to cause libxml2 to crash, resulting in a denial of service, or possibly execute arbitrary code...

CVE-2021-20315

A locking protection bypass flaw was found in some versions of gnome-shell as shipped within CentOS Stream 8, when the "Application menu" or "Window list" GNOME extensions are enabled. This flaw allows a physical attacker who has access to a locked system to kill existing applications and start n...