Scientific Linux Security Update : xorg-x11-server on SL7.x i686/x86_64 (2020:5408)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2020:5408-1 advisory. - xorg-x11-server: Out-of-bounds access in XkbSetMap function CVE-2020-14360 - xorg-x11-server: XkbSetDeviceInfo heap-based buffer overflow...

P11-glue P11-kit Buffer Error Vulnerability

P11-glue P11-kit is a utility software for loading and enumerating PKCS modules by the individual developer of P11-glue. A buffer error vulnerability exists in P11-glue P11-kit server/remote versions 0.23.6 through 0.23.21, which stems from a heap-based buffer over-read found in the RPC protocol...

Oracle Linux 8 : librabbitmq (ELSA-2020-4445)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4445 advisory. 0.9.0-2 - Resolves: 1809992, CVE-2019-18609 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

CVE-2020-21674

Heap-based buffer overflow in archivestringappendfromwcs archivestring.c in libarchive-3.4.1dev allows remote attackers to cause a denial of service out-of-bounds write in heap memory resulting into a crash via a crafted archive file. NOTE: this only affects users who downloaded the development...

CVE-2020-21674

Heap-based buffer overflow in archivestringappendfromwcs archivestring.c in libarchive-3.4.1dev allows remote attackers to cause a denial of service out-of-bounds write in heap memory resulting into a crash via a crafted archive file. NOTE: this only affects users who downloaded the development...

CVE-2020-21674

Heap-based buffer overflow in archivestringappendfromwcs archivestring.c in libarchive-3.4.1dev allows remote attackers to cause a denial of service out-of-bounds write in heap memory resulting into a crash via a crafted archive file. NOTE: this only affects users who downloaded the development...

PYSEC-2020-327

In TensorFlow Lite before versions 2.2.1 and 2.3.1, models using segment sum can trigger writes outside of bounds of heap allocated buffers by inserting negative elements in the segment ids tensor. Users having access to segmentidsdata can alter outputindex and then write to outside of outputdata...

Information Disclosure

QEMU is vulnerable to information disclosure. A race condition in the v9fsxattrwalk function in hw/9pfs/9p.c allows local guest OS users to obtain confidential information from host heap memory via vectors related to reading extended attributes...

Amazon Linux 2 : squid (ALAS-2020-1486)

The version of squid installed on the remote host is prior to 3.5.20-15. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1486 advisory. An issue was discovered in Squid before 4.10. It allows a crafted FTP server to trigger disclosure of sensitive informatio...

openSUSE Security Update : xorg-x11-server (openSUSE-2020-1302)

This update for xorg-x11-server fixes the following issues : - CVE-2020-14347: Leak of uninitialized heap memory from the X server to clients on pixmap allocation bsc1174633, ZDI-CAN-11426. - CVE-2020-14346: XIChangeHierarchy Integer Underflow Privilege Escalation Vulnerability bsc1174638,...

OPENSUSE-SU-2020:1302-1 Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: - CVE-2020-14347: Leak of uninitialized heap memory from the X server to clients on pixmap allocation bsc1174633, ZDI-CAN-11426. - CVE-2020-14346: XIChangeHierarchy Integer Underflow Privilege Escalation Vulnerability bsc1174638,...

OPENSUSE-SU-2020:1279-1 Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: - CVE-2020-14347: Leak of uninitialized heap memory from the X server to clients on pixmap allocation bsc1174633, ZDI-CAN-11426. - CVE-2020-14346: XIChangeHierarchy Integer Underflow Privilege Escalation Vulnerability bsc1174638,...

Security update for xorg-x11-server (important)

openSUSE Security Update: Security update for xorg-x11-server Announcement ID: openSUSE-SU-2020:1279-1 Rating: important References: 1174633 1174635 1174638 Cross-References: CVE-2020-14345 CVE-2020-14346 CVE-2020-14347 Affected Products: openSUSE Leap 15.1 An update that fixes three...

SUSE SLES12 Security Update : xorg-x11-server (SUSE-SU-2020:2325-1)

This update for xorg-x11-server fixes the following issues : CVE-2020-14347: Leak of uninitialized heap memory from the X server to clients on pixmap allocation bsc1174633, ZDI-CAN-11426. CVE-2020-14346: XIChangeHierarchy Integer Underflow Privilege Escalation Vulnerability bsc1174638,...

SUSE SLED15 / SLES15 Security Update : xorg-x11-server (SUSE-SU-2020:2241-1)

This update for xorg-x11-server fixes the following issues : CVE-2020-14347: Leak of uninitialized heap memory from the X server to clients on pixmap allocation bsc1174633, ZDI-CAN-11426. CVE-2020-14346: XIChangeHierarchy Integer Underflow Privilege Escalation Vulnerability bsc1174638,...

SUSE SLED15 / SLES15 Security Update : xorg-x11-server (SUSE-SU-2020:2240-1)

This update for xorg-x11-server fixes the following issues : CVE-2020-14347: Leak of uninitialized heap memory from the X server to clients on pixmap allocation bsc1174633, ZDI-CAN-11426. CVE-2020-14346: XIChangeHierarchy Integer Underflow Privilege Escalation Vulnerability bsc1174638,...

SUSE SLES12 Security Update : xorg-x11-server (SUSE-SU-2020:2242-1)

This update for xorg-x11-server fixes the following issues : CVE-2020-14347: Leak of uninitialized heap memory from the X server to clients on pixmap allocation bsc1174633, ZDI-CAN-11426. CVE-2020-14346: XIChangeHierarchy Integer Underflow Privilege Escalation Vulnerability bsc1174638,...

SUSE-SU-2020:2326-1 Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: - CVE-2020-14347: Leak of uninitialized heap memory from the X server to clients on pixmap allocation bsc1174633, ZDI-CAN-11426. - CVE-2020-14346: XIChangeHierarchy Integer Underflow Privilege Escalation Vulnerability bsc1174638,...

SUSE-SU-2020:2325-1 Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: - CVE-2020-14347: Leak of uninitialized heap memory from the X server to clients on pixmap allocation bsc1174633, ZDI-CAN-11426. - CVE-2020-14346: XIChangeHierarchy Integer Underflow Privilege Escalation Vulnerability bsc1174638,...

SUSE-SU-2020:2240-1 Security update for xorg-x11-server

This update for xorg-x11-server fixes the following issues: - CVE-2020-14347: Leak of uninitialized heap memory from the X server to clients on pixmap allocation bsc1174633, ZDI-CAN-11426. - CVE-2020-14346: XIChangeHierarchy Integer Underflow Privilege Escalation Vulnerability bsc1174638,...