GLSA-202012-16 : PHP: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202012-16 PHP: Multiple vulnerabilities Multiple vulnerabilities have been discovered in PHP. Please review the CVE identifiers and change log referenced below for details. Impact : An attacker could cause a Denial of Service...

GLSA-202012-17 : D-Bus: Denial of service

The remote host is affected by the vulnerability described in GLSA-202012-17 D-Bus: Denial of service It was discovered that D-Bus did not properly handle the situation when two usernames have the same numeric UID. Impact : An attacker could possibly cause a Denial of Service condition or trigger...

GLSA-202011-17 : MIT Kerberos 5: Denial of service

The remote host is affected by the vulnerability described in GLSA-202011-17 MIT Kerberos 5: Denial of service It was discovered that MIT Kerberos network authentication system, krb5, did not properly handle ASN.1-encoded Kerberos messages. Impact : A remote attacker could send a specially crafte...

GLSA-202011-05 : libssh: Denial of service

The remote host is affected by the vulnerability described in GLSA-202011-05 libssh: Denial of service libssh was found to have a NULL pointer dereference in tftpserver.c if the function sshbuffernew returns NULL. Impact : An attacker could cause a possible Denial of Service condition. Workaround...

GLSA-202011-03 : KPMCore: Root privilege escalation

The remote host is affected by the vulnerability described in GLSA-202011-03 KPMCore: Root privilege escalation Improper checks on the D-Bus request received resulted in improper protection for /etc/fstab. Impact : An attacker could esclate privileges to root by exploiting this vulnerability...

GLSA-202010-03 : libjpeg-turbo: Information disclosure

The remote host is affected by the vulnerability described in GLSA-202010-03 libjpeg-turbo: Information disclosure It was discovered that libjpeg-turbo incorrectly handled certain PPM files. Impact : A remote attacker could entice a user to open a specially crafted PPM file using an application...

GLSA-202009-14 : Xen: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-202009-14 Xen: Buffer overflow An out-of-bounds read/write access issue was found in the USB emulator when using QEMU. Impact : A remote attacker could possibly execute arbitrary code with the privileges of the process or cause a...

Discover Gentoo Linux Vulnerabilities using Qualys VMDR

The Qualys vulnerability signatures team has released a new series of signatures detections for Gentoo Linux, allowing security teams to identify Gentoo Linux hosts and detect their vulnerabilities. Gentoo Linux is a Linux distribution built using the Portage package management system. It is a fr...

GLSA-202009-10 : PHP: Denial of service

The remote host is affected by the vulnerability described in GLSA-202009-10 PHP: Denial of service It was discovered that PHP did not properly handle PHAR files. Impact : A remote attacker could entice a user to open a specially crafted PHAR file using PHP, possibly allowing attacker to obtain...

GLSA-202009-04 : Qt GUI: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-202009-04 Qt GUI: Buffer overflow It was discovered that Qt GUIs XBM parser did not properly handle X BitMap files. Impact : Please review the referenced CVE identifiers for details. Workaround : There is no known workaround at th...

GLSA-202009-01 : GnuTLS: Denial of service

The remote host is affected by the vulnerability described in GLSA-202009-01 GnuTLS: Denial of service It was found that GnuTLS didnt handle norenegotiation alert properly. Impact : A remote attacker could entice a user to connect to a malicious TLS endpoint using an application linked against...

GLSA-202008-20 : GPL Ghostscript: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202008-20 GPL Ghostscript: Multiple vulnerabilities Multiple vulnerabilities have been discovered in GPL Ghostscript. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE...

GLSA-202008-19 : BIND: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202008-19 BIND: Multiple vulnerabilities Multiple vulnerabilities have been discovered in BIND. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

GLSA-202008-16 : Mozilla Firefox, Mozilla Thunderbird: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202008-16 Mozilla Firefox, Mozilla Thunderbird: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Mozilla Firefox and Mozilla Thunderbird. Please review the CVE identifiers referenced below for details...

GLSA-202008-13 : PostgreSQL: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202008-13 PostgreSQL: Multiple vulnerabilities Multiple vulnerabilities have been discovered in PostgreSQL. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for...

GLSA-202008-09 : Shadow: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-202008-09 Shadow: Privilege escalation When Shadow was installed with the PAM use flag, setuid binaries provided by Shadow were not properly restricted. Impact : A local attacker could escalate privileges to root. Workaround : The...

GLSA-202008-06 : iproute2: Denial of service

The remote host is affected by the vulnerability described in GLSA-202008-06 iproute2: Denial of service iproute2 was found to contain a use-after-free in getnetnsidfromname in ip/ipnetns.c. Impact : A remote attacker, able to feed iproute2 crafted data, may be able to cause a Denial of Service...

GLSA-202008-02 : GNU GLOBAL: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-202008-02 GNU GLOBAL: Arbitrary code execution A vulnerability was found in an undocumented function of gozilla. Impact : A remote attacker could entice a user to open a specially crafted URL using GNU GLOBAL, possibly resulting i...

GLSA-202008-04 : Apache: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202008-04 Apache: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Apache. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

GLSA-202008-01 : Python: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202008-01 Python: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Python. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...