GLSA-201801-11 : PySAML2: Security bypass

The remote host is affected by the vulnerability described in GLSA-201801-11 PySAML2: Security bypass It was found that the PySAML2 relies on an assert statement to check the users password. A python optimizations might remove this assertion. Impact : A remote attacker could bypass security...

GLSA-201801-07 : GNU Emacs: Command injection

The remote host is affected by the vulnerability described in GLSA-201801-07 GNU Emacs: Command injection A command injection flaw within the Emacs enriched mode handling has been discovered. Impact : A remote attacker, by enticing a user to open a specially crafted file, could execute arbitrary...

GLSA-201711-13 : Adobe Flash Player: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201711-13 Adobe Flash Player: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Adobe Flash Player. Please review the referenced CVE identifiers and Adobe Security Bulletin for details. Impact : A remote...

GLSA-201711-06 : GNU Wget: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201711-06 GNU Wget: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Wget. Please review the referenced CVE identifiers for details. Impact : A remote attacker, by enticing a user to connect to a malicious...

GLSA-201711-12 : eGroupWare: Remote code execution

The remote host is affected by the vulnerability described in GLSA-201711-12 eGroupWare: Remote code execution It was found that eGroupWare contains multiple code injection vulnerabilities in multiple parameters and routes because of improper input sanitization. Impact : A remote attacker could...

GLSA-201711-05 : X.Org Server: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201711-05 X.Org Server: Multiple vulnerabilities Multiple vulnerabilities have been discovered in X.Org Server. Please review the referenced CVE identifiers for details. Impact : Attackers could execute arbitrary code or cause a...

GLSA-201710-30 : X.Org Server: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201710-30 X.Org Server: Multiple vulnerabilities Multiple vulnerabilities have been discovered in X.Org Server. Please review the referenced CVE identifiers for details. Impact : A local attacker could cause a global buffer overfl...

GLSA-201710-23 : Go: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201710-23 Go: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Go. Please review the references below for details. Impact : Remote attackers could execute arbitrary Go commands or conduct a man in the midd...

GLSA-201710-22 : Adobe Flash Player: Remote execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201710-22 Adobe Flash Player: Remote execution of arbitrary code A critical type confusion vulnerability was discovered in Adobe Flash Player. Impact : A remote attacker could execute arbitrary code. Workaround : There is no known...

GLSA-201710-18 : Ruby: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201710-18 Ruby: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Ruby. Please review the referenced CVE identifiers for details. Impact : A remote attacker could execute arbitrary code, cause a Denial of...

GLSA-201710-12 : Puppet Agent: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201710-12 Puppet Agent: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Puppet Agent. Please review the references for details. Impact : A remote attacker could possibly execute arbitrary code with the...

GLSA-201710-04 : sudo: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-201710-04 sudo: Privilege escalation The fix present in app-admin/sudo-1.8.20p1 GLSA 201705-15 was incomplete as it did not address the problem of a command with a newline in the name. Impact : A local attacker could execute...

GLSA-201606-06 : nginx: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201606-06 nginx: Multiple vulnerabilities Multiple vulnerabilities have been discovered in nginx. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly cause a Denial of Service...

GLSA-201709-16 : Adobe Flash Player: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201709-16 Adobe Flash Player: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Adobe Flash Player. Please review the referenced CVE identifiers for details. Impact : A remote attacker could possibly execut...

GLSA-201709-13 : SquirrelMail: Remote Code Execution

The remote host is affected by the vulnerability described in GLSA-201709-13 SquirrelMail: Remote Code Execution It was discovered that the sendmail.cf file is mishandled in a popen call. Impact : A remote attacker, by enticing a user to open an e-mail attachment, could execute arbitrary shell...

GLSA-201709-02 : Binutils: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201709-02 Binutils: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Binutils. Please review References for additional information. Impact : A remote attacker, by enticing a user to compile/execute a...

bzip2: Denial of service

Background bzip2 is a high-quality data compressor used extensively by Gentoo Linux. Description A use-after-free flaw was found in bzip2recover, leading to a null pointer dereference, or a write to a closed file descriptor. Please review the CVE identifier referenced below for details. Impact A...

GLSA-201708-01 : BIND: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201708-01 BIND: Multiple vulnerabilities Multiple vulnerabilities have been discovered in BIND. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could send a specially crafted DNS request ...

GNU C Library: Multiple vulnerabilities

Background The GNU C library is the standard C library used by Gentoo Linux systems. Description Multiple vulnerabilities have been discovered in the GNU C Library. Please review the CVE identifiers and Qualys’ security advisory referenced below for details. Impact An attacker could possibly...

GLSA-201706-15 : WebKitGTK+: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201706-15 WebKitGTK+: Multiple vulnerabilities Multiple vulnerabilities have been discovered in WebKitGTK+. Please review the CVE identifiers referenced below for details. Impact : A remote attack can use multiple vectors to execu...