EulerOS 2.0 SP3 : libvncserver (EulerOS-SA-2020-2116)

According to the versions of the libvncserver package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - LibVNCServer makes writing a VNC server or more correctly, a program exporting a frame-buffer via the Remote Frame Buffer protocol easy. It...

QEMU infinite loop vulnerability

QEMU is a set of simulation processors written by Fabrice Bellard and distributed with source code under the GPL license, widely used on the GNU/Linux platform. An infinite loop vulnerability exists in hw/usb/hcd-ohci.c in QEMU 5.0.0 when the TD list has a loop. An attacker can exploit this...

EulerOS 2.0 SP3 : cairo (EulerOS-SA-2020-2057)

According to the versions of the cairo packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in cairo 1.16.0. There is an assertion problem in the function cairoarcindirection in the file cairo-arc.c.CVE-2019-6461 ...

EulerOS 2.0 SP3 : python (EulerOS-SA-2020-2095)

According to the version of the python packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open,...

EulerOS 2.0 SP3 : ImageMagick (EulerOS-SA-2020-2090)

According to the versions of the ImageMagick packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - ImageMagick version 7.0.7-28 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c.CVE-2018-10805 - ImageMagick version 7.0.7-28...

Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.

...

CVE-2020-25625

hw/usb/hcd-ohci.c in QEMU 5.0.0 has an infinite loop when a TD list has a loop...

DEBIAN-CVE-2020-25625

hw/usb/hcd-ohci.c in QEMU 5.0.0 has an infinite loop when a TD list has a loop...

CVE-2020-25625

hw/usb/hcd-ohci.c in QEMU 5.0.0 has an infinite loop when a TD list has a loop...

CVE-2020-25625

hw/usb/hcd-ohci.c in QEMU 5.0.0 has an infinite loop when a TD list has a loop...

Code injection

hw/usb/hcd-ohci.c in QEMU 5.0.0 has an infinite loop when a TD list has a loop...

UBUNTU-CVE-2020-25625

hw/usb/hcd-ohci.c in QEMU 5.0.0 has an infinite loop when a TD list has a loop...

CVE-2020-25625

hw/usb/hcd-ohci.c in QEMU 5.0.0 has an infinite loop when a TD list has a loop...

CVE-2020-25625

hw/usb/hcd-ohci.c in QEMU 5.0.0 has an infinite loop when a TD list has a loop...

CVE-2020-25625

QEMU before 5.2.0 is vulnerable to an infinite loop in the USB OHCI emulator (hw/usb/hcd-ohci.c) when a TD list contains a loop, potentially allowing a guest or host process to exhaust CPU or cause a denial of service. The issue is observed in QEMU 5.0.0; remediation is to upgrade to 5.2.0 or new...

CVE-2020-25625

hw/usb/hcd-ohci.c in QEMU 5.0.0 has an infinite loop when a TD list has a loop...

FreeBSD : libxml -- multiple vulnerabilities (f5abafc0-fcf6-11ea-8758-e0d55e2a8bf9)

CVE mitre reports : CVE-2019-20388 xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak. CVE-2020-7595 xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation. CVE-2020-24977 GNOME project libxml2...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.4.23 cluster-network-operator-container security update

An update for cluster-network-operator-container is now available for Red Hat OpenShift Container Platform 4.4. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Denial Of Service (DoS)

binutils is vulnerable to denial of service DoS. The vulnerability exists through an integer overflow and infinite loop caused by the ISCONTAINEDBYLMA macro in elf.c...

CVE-2020-25625

An infinite loop flaw was found in the USB OHCI controller emulator of QEMU. This flaw occurs while servicing OHCI isochronous transfer descriptors TD in the ohciserviceisotd routine, as it retires a TD if it has passed its time frame. It does not check if the TD was already processed and holds a...