Amazon Linux 2 : lftp (ALAS-2020-1453)

The version of lftp installed on the remote host is prior to 4.4.8-12. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1453 advisory. It has been discovered that lftp up to and including version 4.8.3 does not properly sanitize remote file names, leading to a loss of...

Medium: lftp

Issue Overview: It has been discovered that lftp up to and including version 4.8.3 does not properly sanitize remote file names, leading to a loss of integrity on the local system when reverse mirroring is used. A remote attacker may trick a user to use reverse mirroring on an attacker controlled...

The vulnerability of the component libvncserver/corre.c in the cross-platform library LibVNCServer allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the component libvncserver/corre.c in the cross-platform library LibVNCServer arises from an operation that occurs outside the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and...

The vulnerability of the consoleinst.sh component of the Installation Manager IBM allows a malicious individual to gain unauthorized access to confidential data, cause service failures, or compromise data integrity.

The vulnerability of the consoleinst.sh component of the Installation Manager IBM is related to privilege management errors. Exploiting this vulnerability could allow an attacker to gain unauthorized access to confidential data, cause service failures, or compromise data integrity...

The vulnerability of the WW8ListManager function in the OpenOffice office package allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WW8ListManager function in the OpenOffice office package is related to the improper handling of an unspecified number of list levels in the list styles defined by the user. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data,...

The vulnerability of the Lighttpd web server, related to integer overflows, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Lighttpd web server is related to a potential integer overflow. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions through malicious GET requests...

The vulnerability of the GIFLZWDecompressor function in the OpenOffice office package allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the GIFLZWDecompressor function in the OpenOffice office package is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause...

The vulnerability of the OpenOffice office suite relates to the issue of operations occurring outside the buffer boundaries in memory. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the OpenOffice office suite is related to the issue of operations occurring outside the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and even cause service failures...

The vulnerability of the OpenOffice office suite relates to the issue of operations occurring outside the buffer boundaries in memory. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the OpenOffice office suite is related to the issue of operations occurring outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures through...

The vulnerability of the OpenOffice office suite relates to the issue of operations occurring outside the buffer boundaries in memory. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the OpenOffice office package is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service interruptions through unauthorized entries in the created Word...

The vulnerability of the OpenOffice office suite relates to the issue of operations occurring outside the buffer boundaries in memory. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the OpenOffice office suite is related to the issue of operations occurring outside the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and even cause service failures...

The vulnerability of the OpenOffice office suite arises from integer overflows that occur during the creation of records in the document table. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the OpenOffice office suite is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures due to the records created by the attack...

The vulnerability of the FreeRDP remote desktop protocol, caused by a full integer overflow, allows an attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the FreeRDP remote desktop protocol is caused by a numerical overflow condition. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

The vulnerability of the Google Chrome audio browser component, related to the use of memory after it is freed, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the Google Chrome audio browser component is related to a memory management issue after deallocation. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the Google Chrome multimedia browser component allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the Google Chrome multimedia browser component is related to a memory management flaw after memory is released. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of Google Chrome relates to improper control of resources throughout their lifecycle. This allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of Google Chrome relates to improper control over the resource throughout its lifecycle. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise their integrity, and cause service failures...

The vulnerability of the Linux operating system, related to an error in determining network connections for VPNs, allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the Linux operating system is related to an error in determining network connections for VPNs. Exploiting this vulnerability allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of Google Chrome’s browser, related to insufficient validation of input data, allows attackers to compromise data integrity.

The vulnerability of Google Chrome is related to insufficient security of its interface. Exploiting this vulnerability could allow a malicious actor to compromise data integrity remotely...

The vulnerability of the libxl function in Xen hypervisors allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the libxl function in Xen hypervisors is related to insufficient validation of input data. Exploiting this vulnerability allows attackers to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of Firefox browser, related to copying buffers without checking the size of the input data, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of Firefox browsers is related to a memory buffer overflow error. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...