[SECURITY] [DSA 4941-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4941-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 20, 2021 https://www.debian.org/security/faq -...

CVE-2021-20108

Manage Engine Asset Explorer Agent 1.0.34 listens on port 9000 for incoming commands over HTTPS from Manage Engine Server. The HTTPS certificates are not verified which allows any arbitrary user on the network to send commands over port 9000. While these commands may not be executed due to...

OpenSSL Information Disclosure Vulnerability (20191206) - Linux

OpenSSL is prone to an information disclosure vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2021-2221)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE 15 Security Update : squid (openSUSE-SU-2021:1961-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1961-1 advisory. - An issue was discovered in Squid through 4.13 and 5.x through 5.0.4. Due to improper input validation, it allows a trusted client to...

Ubuntu 18.04 LTS / 20.04 LTS : QEMU vulnerabilities (USN-5010-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5010-1 advisory. Lei Sun discovered that QEMU incorrectly handled certain MMIO operations. An attacker inside the guest could possibly use this issue to cause...

Security update for qemu (moderate)

openSUSE Security Update: Security update for qemu Announcement ID: openSUSE-SU-2021:1043-1 Rating: moderate References: 1149813 1163019 1172380 1175534 1176681 1178683 1178935 1179477 1179484 1182846 1182975 1183979 1184574 1185591 1185981 1185990 1186010 1186290 1187013 SLE-17785...

OPENSUSE-SU-2021:1043-1 Security update for qemu

This update for qemu fixes the following issues: Security issues fixed: - CVE-2021-3546: Fix out-of-bounds write in virglcmdgetcapset bsc1185981 - CVE-2021-3544: Fix memory leaks found in the virtio vhost-user GPU device bsc1186010 - CVE-2021-3545: Fix information disclosure due to uninitialized...

OPENSUSE-SU-2021:2305-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-3573: Fixed an UAF vulnerability in function that can allow attackers to corrupt kernel heaps and adopt further exploitations. bsc1186666 -...

The vulnerability of many components of the JSON processing library in C# relates to writing beyond buffer boundaries. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of many components of the JSON file processing library in C is related to the operation that goes beyond the allowable buffer size limits. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

EulerOS Virtualization 2.9.0 : qemu (EulerOS-SA-2021-2211)

According to the versions of the qemu packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A NULL pointer dereference flaw was found in the SCSI emulation support of QEMU in versions before 6.0.0. This flaw allows a...

Vulnerability of the Cisco Discovery Protocol and Link Layer Discovery Protocol (LLDP) implementations in Cisco Video Surveillance IP cameras of the 7000 series; device reboot or service failure

The vulnerability of the Cisco Discovery Protocol and Link Layer Discovery Protocol LLDP implemented in Cisco Video Surveillance devices of the 7000 series is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a perpetrator to cause slow memory leaks, device...

Vulnerability of the Cisco Discovery Protocol and Link Layer Discovery Protocol (LLDP) implementations in Cisco Video Surveillance IP cameras of the 7000 series; device reboot or service failure

The vulnerability of the Cisco Discovery Protocol and Link Layer Discovery Protocol LLDP implemented in Cisco Video Surveillance devices of the 7000 series is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a perpetrator to cause slow memory leaks, device...

EulerOS Virtualization 2.9.1 : qemu (EulerOS-SA-2021-2192)

According to the versions of the qemu packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A NULL pointer dereference flaw was found in the SCSI emulation support of QEMU in versions before 6.0.0. This flaw allows a...

OPENSUSE-SU-2021:2213-1 Security update for qemu

This update for qemu fixes the following issues: - CVE-2021-3546: Fixed out-of-bounds write in virglcmdgetcapset bsc1185981. - CVE-2021-3544: Fixed memory leaks found in the virtio vhost-user GPU device bsc1186010. - CVE-2021-3545: Fixed information disclosure due to uninitialized memory read...

OPENSUSE-SU-2021:1012-1 Security update for gstreamer-plugins-bad

This update for gstreamer-plugins-bad fixes the following issues: - Update to version 1.16.3: - CVE-2021-3185: buffer overflow in gsth264sliceparsedecrefpicmarking bsc1181255 - amcvideodec: fix sync meta copying not taking a reference - audiobuffersplit: Perform discont tracking on running time -...

Security update for qemu (moderate)

openSUSE Security Update: Security update for qemu Announcement ID: openSUSE-SU-2021:2213-1 Rating: moderate References: 1185981 1185990 1186010 Cross-References: CVE-2021-3544 CVE-2021-3545 CVE-2021-3546 CVSS scores: CVE-2021-3544 NVD : 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H...

Coursera Flunks API Test in Researchers’ Security Exam

Researchers have discovered multiple application programming interface API issues in Coursera, the online learning platform used by 82 million learners and hundreds of Fortune 500 companies. On Thursday, the Checkmarx Security Research Team published a report on its findings, which included user...

EulerOS Virtualization 3.0.2.2 : kernel (EulerOS-SA-2021-2140)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A memory leak in the ath10kusbhiftxsg function in drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel through 5.3.11 allows...

CVE-2021-32639

Emissary is a P2P-based, data-driven workflow engine. Emissary version 6.4.0 is vulnerable to Server-Side Request Forgery SSRF. In particular, the RegisterPeerAction endpoint and the AddChildDirectoryAction endpoint are vulnerable to SSRF. This vulnerability may lead to credential leaks. Emissary...