GLSA-201706-11 : PCRE library: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201706-11 PCRE library: Denial of Service It was found that the compilebracketmatchingpath function in pcrejitcompile.c in PCRE library is vulnerable to an out-of-bounds read. Impact : A remote attacker could possibly cause a Deni...

GLSA-201706-07 : Libtirpc and RPCBind: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201706-07 Libtirpc and RPCBind: Denial of Service It was found that due to the way RPCBind uses libtirpc libntirpc, a memory leak can occur when parsing specially crafted XDR messages. Impact : A remote attacker could send thousan...

GLSA-201706-12 : Wireshark: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201706-12 Wireshark: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Wireshark. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to process a...

GLSA-201702-19 : TigerVNC: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-201702-19 TigerVNC: Buffer overflow A buffer overflow vulnerability in ModifiablePixelBuffer::fillRect in vncviewer was found. Impact : A remote attacker, utilizing a malicious VNC server, could execute arbitrary code with the...

GLSA-201702-03 : Firejail: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-201702-03 Firejail: Privilege escalation The unaffected packages listed in GLSA 201612-48 had an incomplete fix as reported by Sebastian Krahmer of SuSE. This has been properly patched in the latest releases. Impact : An attacker...

GLSA-201701-75 : Perl: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201701-75 Perl: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Perl. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly execute arbitrary code with...

GLSA-201701-67 : a2ps: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201701-67 a2ps: Arbitrary code execution a2ps fixps script does not invoke gs with the -dSAFER option. Impact : Remote attackers, by enticing a user to process a specially crafted PostScript file, could delete arbitrary files or...

GLSA-201701-44 : CVS: Heap-based overflow

The remote host is affected by the vulnerability described in GLSA-201701-44 CVS: Heap-based overflow A heap-based buffer overflow was discovered in the proxyconnect function in src/client.c in CVS. Impact : An attacker, utilizing a remote HTTP proxy server, could cause a Denial of Service...

GLSA-201701-39 : VLC: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-201701-39 VLC: Buffer overflow A buffer overflow was discovered in the DecodeAdpcmImaQT function in modules/codec/adpcm.c in the VideoLAN VLC media player. Impact : Remote attackers, by enticing a user to execute a specially craft...

GLSA-201701-33 : PostgreSQL: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201701-33 PostgreSQL: Multiple vulnerabilities Multiple vulnerabilities have been discovered in PostgreSQL. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly execute arbitrar...

GLSA-201701-17 : Adobe Flash Player: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201701-17 Adobe Flash Player: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Adobe Flash Player. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly...

GLSA-201701-13 : HDF5: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201701-13 HDF5: Multiple vulnerabilities Multiple arbitrary code execution vulnerabilities have been discovered in HDF5. Please review the CVE identifiers referenced below for details. Impact : An attacker could execute arbitrary...

GLSA-201612-49 : mod_wsgi: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-201612-49 modwsgi: Privilege escalation modwsgi, when creating a daemon process group, does not properly handle dropping group privileges. Impact : Context-dependent attackers could escalate privileges due to the improper handling...

GLSA-201612-45 : Tor: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201612-45 Tor: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Tor. Please review the CVE identifier and change log referenced below for details. Impact : A remote attacker could possibly cause a Denial o...

GLSA-201612-43 : Node.js: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201612-43 Node.js: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Node.js. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly cause a Denial of...

GLSA-201612-07 : dpkg: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201612-07 dpkg: Arbitrary code execution Gentoo Linux developer, Hanno Bck, discovered an off-by-one error in the dpkg-deb component of dpkg, the Debian package management system, which triggers a stack-based buffer overflow. Impa...

dpkg: Arbitrary code execution

Background Debian package management system. Description Gentoo Linux developer, Hanno Böck, discovered an off-by-one error in the dpkg-deb component of dpkg, the Debian package management system, which triggers a stack-based buffer overflow. Impact An attacker could potentially execute arbitrary...

GLSA-201611-22 : PHP: Multiple vulnerabilities (httpoxy)

The remote host is affected by the vulnerability described in GLSA-201611-22 PHP: Multiple vulnerabilities Multiple vulnerabilities have been discovered in PHP. Please review the CVE identifiers referenced below for details. Impact : An attacker can possibly execute arbitrary code or create a...

GLSA-201611-06 : xinetd: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-201611-06 xinetd: Privilege escalation Xinetd does not enforce the user and group configuration directives for TCPMUX services, which causes these services to be run as root. Impact : Attackers could escalate privileges outside of...

GLSA-201607-17 : BeanShell: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201607-17 BeanShell: Arbitrary code execution An application that includes BeanShell on the classpath may be vulnerable if another part of the application uses Java serialization or XStream to deserialize data from an untrusted...