GLSA-202210-41 : android-tools: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202210-41 android-tools: Multiple Vulnerabilities - Please review the referenced CVE identifiers for details. CVE-2022-20128, CVE-2022-3168 Note that Nessus has not tested for these issues but has instead relied only on the...

GLSA-202210-39 : libxml2: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202210-39 libxml2: Multiple Vulnerabilities - Please review the referenced CVE identifiers for details. CVE-2022-40303, CVE-2022-40304 Note that Nessus has not tested for these issues but has instead relied only on the application...

GLSA-202210-26 : Shadow: TOCTOU Race

The remote host is affected by the vulnerability described in GLSA-202210-26 Shadow: TOCTOU Race - shadow: TOCTOU time-of-check time-of-use race condition when copying and removing directory trees CVE-2013-4235 Note that Nessus has not tested for this issue but has instead relied only on the...

GLSA-202210-11 : schroot: Denial of Service

The remote host is affected by the vulnerability described in GLSA-202210-11 schroot: Denial of Service - Schroot before 1.6.13 had too permissive rules on chroot or session names, allowing a denial of service on the schroot service for all users that may start a schroot session. CVE-2022-2787 No...

GLSA-202209-25 : Zutty: Arbitrary Code Execution

The remote host is affected by the vulnerability described in GLSA-202209-25 Zutty: Arbitrary Code Execution - In Zutty before 0.13, DECRQSS in text written to the terminal can achieve arbitrary code execution. CVE-2022-41138 Note that Nessus has not tested for this issue but has instead relied...

GLSA-202209-07 : Mrxvt: Arbitrary Code Execution

The remote host is affected by the vulnerability described in GLSA-202209-07 Mrxvt: Arbitrary Code Execution - rxvt-unicode 9.22, rxvt 2.7.10, mrxvt 0.5.4, and Eterm 0.9.7 allow potentially remote code execution because of improper handling of certain escape sequences ESC G Q. A response is...

GLSA-202209-10 : Logcheck: Root privilege escalation

The remote host is affected by the vulnerability described in GLSA-202209-10 Logcheck: Root privilege escalation - In the ebuild package through logcheck-1.3.23.ebuild for Logcheck on Gentoo, it is possible to achieve root privilege escalation from the logcheck user because of insecure recursive...

gentoo.linuxhowtos.org Cross Site Scripting vulnerability OBB-2935176

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

GLSA-202208-33 : Gnome Shell, gettext, libcroco: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202208-33 Gnome Shell, gettext, libcroco: Multiple Vulnerabilities - libcroco through 0.6.13 has excessive recursion in crparserparseanycore in cr-parser.c, leading to stack consumption. CVE-2020-12825 Note that Nessus has not...

GNU C Library: Multiple Vulnerabilities

Background The GNU C library is the standard C library used by Gentoo Linux systems. It provides programs with basic facilities and interfaces to system calls. ld.so is the dynamic linker which prepares dynamically linked programs for execution by resolving runtime dependencies and related...

GLSA-202208-13 : libass: Denial of service

The remote host is affected by the vulnerability described in GLSA-202208-13 libass: Denial of service - libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decodechars called from decodefont and processtext because the wrong integer data type is used for subtraction. CVE-2020-36430...

GLSA-202208-07 : LibRaw: Stack buffer overread

The remote host is affected by the vulnerability described in GLSA-202208-07 LibRaw: Stack buffer overread - Libraw before 0.20.1 has a stack buffer overflow via LibRaw::identifyprocessdngfields in identify.cpp. CVE-2020-24870 Note that Nessus has not tested for this issue but has instead relied...

GLSA-202208-04 : libmcpp: Denial of service

The remote host is affected by the vulnerability described in GLSA-202208-04 libmcpp: Denial of service - MCPP 2.7.2 has a heap-based buffer overflow in the domsg function in support.c. CVE-2019-14274 Note that Nessus has not tested for this issue but has instead relied only on the application's...

GLSA-202008-07 : Chromium, Google Chrome: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202008-07 Chromium, Google Chrome: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the CVE identifiers referenced below for details. Impact : Please review the...

GLSA-202105-21 : Tcpreplay: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202105-21 Tcpreplay: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Tcpreplay. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to open a...

GLSA-202107-03 : libqb: Insecure temporary file

The remote host is affected by the vulnerability described in GLSA-202107-03 libqb: Insecure temporary file It was discovered that libqb used predictable filenames under /dev/shm and /tmp without OEXCL. Impact : A local attacker could perform symlink attacks to overwrite arbitrary files with the...

GLSA-202107-23 : Docker: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202107-23 Docker: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Docker. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

GLSA-202107-53 : Leptonica: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202107-53 Leptonica: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Leptonica. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for...

GLSA-202105-28 : MariaDB: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202105-28 MariaDB: Multiple vulnerabilities Multiple vulnerabilities have been discovered in MariaDB. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for detail...

GLSA-202107-32 : Apache Thrift: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202107-32 Apache Thrift: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Apache Thrift. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifier...