CVE-2020-8631

CVE-2020-8631 affects cloud-init up to version 19.4, where the random password is generated using rand_str in cloudinit/util.py that calls random.choice (Mersenne Twister). This weak RNG can allow a local attacker to predict the generated password; CVE-2020-8632 reports a short default password l...

CVE-2020-8631

cloud-init through 19.4 relies on Mersenne Twister for a random password, which makes it easier for attackers to predict passwords, because randstr in cloudinit/util.py calls the random.choice function...

CVE-2020-8631

cloud-init through 19.4 relies on Mersenne Twister for a random password, which makes it easier for attackers to predict passwords, because randstr in cloudinit/util.py calls the random.choice function...

CVE-2020-8631

cloud-init through 19.4 relies on Mersenne Twister for a random password, which makes it easier for attackers to predict passwords, because randstr in cloudinit/util.py calls the random.choice function...

PT-2020-20242

Name of the Vulnerable Software and Affected Versions cloud-init versions prior to 19.4 Description The issue is related to the rand user password function in cloudinit/config/cc set passwords.py, which has a small default password length pwlen value. This makes it easier for attackers to guess...

PT-2020-20241

Name of the Vulnerable Software and Affected Versions cloud-init versions prior to 19.4 Description The issue is related to the use of Mersenne Twister for generating random passwords, which can make it easier for attackers to predict passwords. This is because the rand str function in...

CVE-2020-8631: Use of Insufficiently Random Values

cloud-init through 19.4 relies on Mersenne Twister for a random password, which makes it easier for attackers to predict passwords, because randstr in cloudinit/util.py calls the random.choice function...

CVE-2020-8632: Weak Password Requirements

In cloud-init through 19.4, randuserpassword in cloudinit/config/ccsetpasswords.py has a small default pwlen value, which makes it easier for attackers to guess passwords...

Huawei EulerOS: Security Advisory for cloud-init (EulerOS-SA-2019-2132)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for poppler (EulerOS-SA-2019-2015)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for cloud-init (openSUSE-SU-2019:2633-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

DEBIAN-CVE-2019-20161

An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is heap-based buffer overflow in the function ReadGFIPMPXWatermarkingInit in odf/ipmpxcode.c...

GPAC buffer overflow vulnerability (CNVD-2020-00228)

GPAC is an open source multimedia framework. A buffer error vulnerability exists in the 'ReadGFIPMPXWatermarkingInit' function of the odf/ipmpxcode.c file in GPAC versions 0.8.0 and 0.9.0-development-20191109. The vulnerability stems from a network system or product performing operations in memor...

UBUNTU-CVE-2019-20094

An issue was discovered in libsixel 1.8.4. There is a heap-based buffer overflow in the function gifinitframe at fromgif.c...

libsixel heap buffer overflow vulnerability (CNVD-2020-02546)

libsixel is a package that provides encoding/decoding implementations for DEC SIXEL graphics and other converter programs. A buffer overflow vulnerability exists in the 'gifinitframe' function of the fromgif.c file in libsixel version 1.8.4. The vulnerability stems from a networked system or...

PT-2019-16092

Name of the Vulnerable Software and Affected Versions libsixel version 1.8.4 Description A heap-based buffer overflow issue was found in the function gif init frame at fromgif.c. Recommendations For libsixel version 1.8.4, at the moment, there is no information about a newer version that contains...

PT-2019-16106 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: GPAC versions 0.8.0 through 0.9.0-development-20191109 Description: A heap-based buffer overflow issue was found in the function ReadGF IPMPX WatermarkingInit in odf/ipmpx code.c. Recommendations: For GPAC version 0.8.0, update to a version...

The vulnerability of the `mwifiex_pcie_init_evt_ring()` function (driver/net/wireless/marvell/mwifiex/pcie.c) in the Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the mwifiexpcieinitevtring function drivers/net/wireless/marvell/mwifiex/pcie.c in the Linux kernel involves an uncontrolled resource consumption. Exploiting this vulnerability could allow a attacker to cause service failures...

Vulnerability of the acpHWInit() function (driver/gpu/drm/amd/amdgpu/amdgpu_acp.c) in the Linux kernel, allowing a hacker to trigger a service failure

The vulnerability of the acpHWInit function drivers/gpu/drm/amd/amdgpu/amdgpuacp.c in the Linux kernel involves uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Security Bulletin: Multiple Vulnerabilities in MongoDB affects IBM Watson Studio Local

Summary Multiple Vulnerabilities in MongoDB affects IBM Watson Studio Local Vulnerability Details CVEID: CVE-2019-2389 DESCRIPTION: Incorrect scoping of kill operations in MongoDB Server's packaged SysV init scripts allow users with write access to the PID file to insert arbitrary PIDs to be kill...