GLSA-202406-06 : GStreamer, GStreamer Plugins: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202406-06 GStreamer, GStreamer Plugins: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in GStreamer, GStreamer Plugins. Please review the CVE identifiers referenced below for details. Tenable has extracted...

GLSA-202406-04 : LZ4: Memory Corruption

The remote host is affected by the vulnerability described in GLSA-202406-04 LZ4: Memory Corruption An attacker who submits a crafted file to an application linked with lz4 may be able to trigger an integer overflow, leading to calling of memmove on a negative size argument, causing an...

GLSA-202405-09 : MediaInfo, MediaInfoLib: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202405-09 MediaInfo, MediaInfoLib: Multiple Vulnerabilities Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. @NOAGENT...

GLSA-202402-30 : Glances: Arbitrary Code Execution

The remote host is affected by the vulnerability described in GLSA-202402-30 Glances: Arbitrary Code Execution Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. @NOAGENT@ The descriptiv...

GLSA-202402-32 : btrbk: Remote Code Execution

The remote host is affected by the vulnerability described in GLSA-202402-32 btrbk: Remote Code Execution - Btrbk before 0.31.2 allows command execution because of the mishandling of remote hosts filtering SSH commands using sshfilterbtrbk.sh in authorizedkeys. CVE-2021-38173 Note that Nessus has...

GLSA-202402-27 : Glade: Denial of Service

The remote host is affected by the vulnerability described in GLSA-202402-27 Glade: Denial of Service - plugins/gtk+/glade-gtk-box.c in GNOME Glade before 3.38.1 and 3.39.x before 3.40.0 mishandles widget rebuilding for GladeGtkBox, leading to a denial of service application crash. CVE-2020-36774...

GLSA-202401-20 : QPDF: Buffer Overflow

The remote host is affected by the vulnerability described in GLSA-202401-20 QPDF: Buffer Overflow - QPDF 9.x through 9.1.1 and 10.x through 10.0.4 has a heap-based buffer overflow in PlASCII85Decoder::write called from PlAESPDF::flush and PlAESPDF::finish when a certain downstream write fails...

GLSA-202401-01 : Joblib: Arbitrary Code Execution

The remote host is affected by the vulnerability described in GLSA-202401-01 Joblib: Arbitrary Code Execution - The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the predispatch flag in Parallel class due to the eval statement. CVE-2022-21797 Note that Ness...

GLSA-202312-10 : Ceph: Root Privilege Escalation

The remote host is affected by the vulnerability described in GLSA-202312-10 Ceph: Root Privilege Escalation - A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a local attacker to escalate privileges to root in the form of a crash dump, and dump privileged information...

GLSA-202312-08 : LibRaw: Heap Buffer Overflow

The remote host is affected by the vulnerability described in GLSA-202312-08 LibRaw: Heap Buffer Overflow - A flaw was found in LibRaw. A heap-buffer-overflow in raw2imageex caused by a maliciously crafted file may lead to an application crash. CVE-2023-1729 Note that Nessus has not tested for th...

GLSA-202311-07 : AIDE: Root Privilege Escalation

The remote host is affected by the vulnerability described in GLSA-202311-07 AIDE: Root Privilege Escalation - AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata such as XFS extended attributes or tmpfs ACLs, because of a heap-based buffer overflow...

GLSA-202310-20 : rxvt-unicode: Arbitrary Code Execution

The remote host is affected by the vulnerability described in GLSA-202310-20 rxvt-unicode: Arbitrary Code Execution - The rxvt-unicode package is vulnerable to a remote code execution, in the Perl background extension, when an attacker can control the data written to the user's terminal and certa...

GLSA-202310-11 : less: Denial of service

The remote host is affected by the vulnerability described in GLSA-202310-11 less: Denial of service - In GNU Less before 609, crafted data can result in less -R not filtering ANSI escape sequences sent to the terminal. CVE-2022-46663 Note that Nessus has not tested for this issue but has instead...

GLSA-202310-05 : dav1d: Denial of Service

The remote host is affected by the vulnerability described in GLSA-202310-05 dav1d: Denial of Service - VideoLAN dav1d before 1.2.0 has a threadtask.c race condition that can lead to an application crash, related to dav1ddecodeframeexit. CVE-2023-32570 Note that Nessus has not tested for this iss...

GLSA-202310-08 : man-db: privilege escalation

The remote host is affected by the vulnerability described in GLSA-202310-08 man-db: privilege escalation - man-db before 2.8.5 on Gentoo allows local users with access to the man user account to gain root privileges because /usr/bin/mandb is executed by root but not owned by root. Also, the owne...

GLSA-202305-27 : Tinyproxy: Memory Disclosure

The remote host is affected by the vulnerability described in GLSA-202305-27 Tinyproxy: Memory Disclosure - Potential leak of left-over heap data if custom error page templates containing special non-standard variables are used. Tinyproxy commit 84f203f and earlier use uninitialized buffers in...

GLSA-202305-14 : uptimed: Root Privilege Escalation

The remote host is affected by the vulnerability described in GLSA-202305-14 uptimed: Root Privilege Escalation - uptimed before 0.4.6-r1 on Gentoo allows local users with access to the uptimed user account to gain root privileges by creating a hard link within the /var/spool/uptimed directory,...

GLSA-202305-03 : ProFTPd: Memory Disclosure

The remote host is affected by the vulnerability described in GLSA-202305-03 ProFTPd: Memory Disclosure - modradius in ProFTPD before 1.3.7c allows memory disclosure to RADIUS servers because it copies blocks of 16 characters. CVE-2021-46854 Note that Nessus has not tested for this issue but has...

GLSA-202305-05 : xfce4-settings: Browser Argument Injection

The remote host is affected by the vulnerability described in GLSA-202305-05 xfce4-settings: Browser Argument Injection - In Xfce xfce4-settings before 4.16.4 and 4.17.x before 4.17.1, there is an argument injection vulnerability in xfce4-mime-helper. CVE-2022-45062 Note that Nessus has not teste...

SUSE CVE-2007-1856

Vixie Cron before 4.1-r10 on Gentoo Linux is installed with insecure permissions, which allows local users to cause a denial of service cron failure by creating hard links, which results in a failed stnlink check in database.c...