GLSA-201405-10 : Rack: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201405-10 Rack: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Rack. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly execute arbitrary code with...

GLSA-201405-24 : Apache Portable Runtime, APR Utility Library: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201405-24 Apache Portable Runtime, APR Utility Library: Denial of Service Multiple vulnerabilities have been discovered in Apache Portable Runtime and APR Utility Library. Please review the CVE identifiers referenced below for...

GLSA-201405-01 : udisks: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201405-01 udisks: Arbitrary code execution A stack-based buffer overflow can be triggered when udisks is given a long path name as a mount point. Impact : A local attacker could possibly execute arbitrary code with the privileges ...

GLSA-201403-03 : file: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201403-03 file: Denial of Service A flaw was found in the way the file utility determines the type of a file. Impact : A remote attacker could entice a user to open a specially crafted file, possibly resulting in a Denial of Servi...

GLSA-201402-10 : PulseAudio: Insecure temporary file usage

The remote host is affected by the vulnerability described in GLSA-201402-10 PulseAudio: Insecure temporary file usage The pamakesecuredir function in core-util.c does not handle temporary files securely. Impact : A local attacker could perform symlink attacks to overwrite arbitrary files with th...

GLSA-201402-11 : Links: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201402-11 Links: Denial of Service An integer overflow vulnerability was found in the parsing of HTML tables in the Links web browser when running in graphical mode. Impact : A remote attacker could possibly cause a Denial of...

GLSA-201402-09 : Apache mod_fcgid: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201402-09 Apache modfcgid: Arbitrary code execution Apache modfcgid fails to perform a boundary check on user-supplied input, potentially resulting in a heap-based buffer overflow. Impact : A remote attacker can supply a crafted...

GLSA-201402-02 : NVIDIA Drivers: Privilege Escalation

The remote host is affected by the vulnerability described in GLSA-201402-02 NVIDIA Drivers: Privilege Escalation The vulnerability is caused due to the driver allowing unprivileged user-mode software to access the GPU. Impact : A local attacker could gain escalated privileges. Workaround : There...

GLSA-201401-33 : Perl Digest-Base module: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201401-33 Perl Digest-Base module: Arbitrary code execution The vulnerability is caused due to the Digest-new function not properly sanitising input before using it in an eval call. Impact : The vulnerability might allow an attack...

GLSA-201401-34 : BIND: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201401-34 BIND: Denial of Service Multiple vulnerabilities have been discovered in BIND. Please review the CVE identifiers referenced below for details. Impact : A remote attacker may be able to cause a Denial of Service condition...

GLSA-201401-19 : GMime: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201401-19 GMime: Arbitrary code execution GMime contains a buffer overflow flaw in the GMIMEUUENCODELEN macro in gmime/gmime-encodings.h. Impact : A context-dependent attacker could possibly execute arbitrary code or cause a Denia...

PT-2014-1875

Name of the Vulnerable Software and Affected Versions memcached versions prior to 1.4.17 Description The issue affects the memcached package in Gentoo Linux, potentially leading to breaches of confidentiality, integrity, and availability of protected information. Exploitation of these...

GLSA-201401-04 : Python: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201401-04 Python: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Python. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly cause a Denial of Servic...

GLSA-201312-07 : OpenEXR: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201312-07 OpenEXR: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in OpenEXR. Please review the CVE identifiers referenced below for details. Impact : A context-dependent attacker could execute arbitrary co...

GLSA-201312-03 : OpenSSL: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201312-03 OpenSSL: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in OpenSSL. Please review the CVE identifiers referenced below for details. Impact : Remote attackers can determine private keys, decrypt...

GNU C Library: Multiple vulnerabilities

Background The GNU C library is the standard C library used by Gentoo Linux systems. Description Multiple vulnerabilities have been discovered in GNU C Library. Please review the CVE identifiers referenced below for details. Impact A local attacker could trigger vulnerabilities in dynamic library...

GLSA-201311-04 : Vixie cron: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201311-04 Vixie cron: Denial of Service Vixie cron contains a race condition relating to atime and mtime values of temporary files. Impact : A local attacker could change the modification time of files, possibly resulting in a...

GLSA-201310-20 : acpid2: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-201310-20 acpid2: Privilege escalation acpid2 does not properly use the pidof program in powerbtn.sh. Impact : A local attacker could gain escalated privileges. Workaround : There is no known workaround at this time. %NASLMINLEVEL...

Oracle Java SE CVE-2013-5838 Remote Security Vulnerability

Description Oracle Java SE is prone to a remote security vulnerability. The vulnerability can be exploited over multiple protocols. This issue affects the 'Libraries' sub-component. This vulnerability affects the following supported versions: Java SE 7u25, Java SE Embedded 7u25 Technologies...

GLSA-201310-09 : Setuptools: Man-in-the-Middle attack

The remote host is affected by the vulnerability described in GLSA-201310-09 Setuptools: Man-in-the-Middle attack Setuptools does not check the integrity of downloaded Python packages. Impact : A remote attacker could perform man-in-the-middle attacks to execute arbitrary code with the privileges...