5556 matches found
PT-2019-16106 · Gpac +1 · Gpac +1
Name of the Vulnerable Software and Affected Versions: GPAC versions 0.8.0 through 0.9.0-development-20191109 Description: A heap-based buffer overflow issue was found in the function ReadGF IPMPX WatermarkingInit in odf/ipmpx code.c. Recommendations: For GPAC version 0.8.0, update to a version...
libsixel heap buffer overflow vulnerability (CNVD-2020-02546)
libsixel is a package that provides encoding/decoding implementations for DEC SIXEL graphics and other converter programs. A buffer overflow vulnerability exists in the 'gifinitframe' function of the fromgif.c file in libsixel version 1.8.4. The vulnerability stems from a networked system or...
Vulnerability of the acpHWInit() function (driver/gpu/drm/amd/amdgpu/amdgpu_acp.c) in the Linux kernel, allowing a hacker to trigger a service failure
The vulnerability of the acpHWInit function drivers/gpu/drm/amd/amdgpu/amdgpuacp.c in the Linux kernel involves uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
The vulnerability of the `mwifiex_pcie_init_evt_ring()` function (driver/net/wireless/marvell/mwifiex/pcie.c) in the Linux kernel allows a hacker to trigger a service failure.
The vulnerability of the mwifiexpcieinitevtring function drivers/net/wireless/marvell/mwifiex/pcie.c in the Linux kernel involves an uncontrolled resource consumption. Exploiting this vulnerability could allow a attacker to cause service failures...
Security Bulletin: Multiple Vulnerabilities in MongoDB affects IBM Watson Studio Local
Summary Multiple Vulnerabilities in MongoDB affects IBM Watson Studio Local Vulnerability Details CVEID: CVE-2019-2389 DESCRIPTION: Incorrect scoping of kill operations in MongoDB Server's packaged SysV init scripts allow users with write access to the PID file to insert arbitrary PIDs to be kill...
kernel: Missing check in fs/inode.c:inode_init_owner() does not clear SGID bit on non-directories for non-members
A vulnerability was found in the fs/inode.c:inodeinitowner function logic of the LInux kernel that allows local users to create files with an unintended group ownership and with group execution and SGID permission bits set, in a scenario where a directory is SGID and belongs to a certain group an...
kernel: Missing check in fs/inode.c:inode_init_owner() does not clear SGID bit on non-directories for non-members
A vulnerability was found in the fs/inode.c:inodeinitowner function logic of the LInux kernel that allows local users to create files with an unintended group ownership and with group execution and SGID permission bits set, in a scenario where a directory is SGID and belongs to a certain group an...
Fedora 30 : librabbitmq (2019-dd7c8f5435)
Added: - amqpsslsocketgetcontext can be used to get the current OpenSSL CTX associated with a connection. Changed: - openssl: missing OpenSSL config is ignored as an OpenSSL init error 523 - AMQPDEFAULTMAXCHANNELS is now set to 2047 to follow current default channel limit in the RabbitMQ broker...
New Linux Bug Lets Attackers Hijack Encrypted VPN Connections
A team of cybersecurity researchers has disclosed a new severe vulnerability affecting most Linux and Unix-like operating systems, including FreeBSD, OpenBSD, macOS, iOS, and Android, that could allow remote 'network adjacent attackers' to spy on and tamper with encrypted VPN connections. The...
SUSE-SU-2019:3191-1 Security update for cloud-init
This update for cloud-init fixes the following issues: Security issue fixed: - CVE-2019-0816: Fixed the unnecessary extra ssh keys that were added to authorizedkeys bsc1129124. Non-security issues fixed: - Add cloud-init-renderer-detect.patch bsc1154092, bsc1142988 + Short curcuit the conditional...
Security update for cloud-init (moderate)
openSUSE Security Update: Security update for cloud-init Announcement ID: openSUSE-SU-2019:2633-1 Rating: moderate References: 1099358 1129124 1136440 1142988 1144363 1151488 1154092 Cross-References: CVE-2019-0816 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability and...
openSUSE Security Update : cloud-init (openSUSE-2019-2621)
This update for cloud-init to version 19.2 fixes the following issues : Security issue fixed : - CVE-2019-0816: Fixed the unnecessary extra ssh keys that were added to authorizedkeys bsc1129124. Non-security issues fixed : - Short circuit the conditional for identifying the sysconfig renderer...
openSUSE Security Update : cloud-init (openSUSE-2019-2633)
This update for cloud-init to version 19.2 fixes the following issues : Security issue fixed : - CVE-2019-0816: Fixed the unnecessary extra ssh keys that were added to authorizedkeys bsc1129124. Non-security issues fixed : - Short circuit the conditional for identifying the sysconfig renderer...
OPENSUSE-SU-2019:2633-1 Security update for cloud-init
This update for cloud-init to version 19.2 fixes the following issues: Security issue fixed: - CVE-2019-0816: Fixed the unnecessary extra ssh keys that were added to authorizedkeys bsc1129124. Non-security issues fixed: - Short circuit the conditional for identifying the sysconfig renderer...
DEBIAN-CVE-2019-19543
In the Linux kernel before 5.1.6, there is a use-after-free in serialirinitmodule in drivers/media/rc/serialir.c...
SUSE SLED15 / SLES15 Security Update : cloud-init (SUSE-SU-2019:3097-1)
This update for cloud-init to version 19.2 fixes the following issues : Security issue fixed : CVE-2019-0816: Fixed the unnecessary extra ssh keys that were added to authorizedkeys bsc1129124. Non-security issues fixed: Short circuit the conditional for identifying the sysconfig renderer...
SUSE SLED15 / SLES15 Security Update : cloud-init (SUSE-SU-2019:3096-1)
This update for cloud-init to version 19.2 fixes the following issues : Security issue fixed : CVE-2019-0816: Fixed the unnecessary extra ssh keys that were added to authorizedkeys bsc1129124. Non-security issues fixed: Short circuit the conditional for identifying the sysconfig renderer...
SUSE-SU-2019:3097-1 Security update for cloud-init
This update for cloud-init to version 19.2 fixes the following issues: Security issue fixed: - CVE-2019-0816: Fixed the unnecessary extra ssh keys that were added to authorizedkeys bsc1129124. Non-security issues fixed: - Short circuit the conditional for identifying the sysconfig renderer...
SUSE-SU-2019:3096-1 Security update for cloud-init
This update for cloud-init to version 19.2 fixes the following issues: Security issue fixed: - CVE-2019-0816: Fixed the unnecessary extra ssh keys that were added to authorizedkeys bsc1129124. Non-security issues fixed: - Short circuit the conditional for identifying the sysconfig renderer...
