Vulnerability of the Cisco Discovery Protocol and Link Layer Discovery Protocol (LLDP) implementations in Cisco Video Surveillance IP cameras of the 7000 series; device reboot or service failure

The vulnerability of the Cisco Discovery Protocol and Link Layer Discovery Protocol LLDP implemented in Cisco Video Surveillance devices of the 7000 series is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a perpetrator to cause slow memory leaks, device...

EulerOS Virtualization 2.9.1 : qemu (EulerOS-SA-2021-2192)

According to the versions of the qemu packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A NULL pointer dereference flaw was found in the SCSI emulation support of QEMU in versions before 6.0.0. This flaw allows a...

Security update for qemu (moderate)

openSUSE Security Update: Security update for qemu Announcement ID: openSUSE-SU-2021:2213-1 Rating: moderate References: 1185981 1185990 1186010 Cross-References: CVE-2021-3544 CVE-2021-3545 CVE-2021-3546 CVSS scores: CVE-2021-3544 NVD : 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H...

OPENSUSE-SU-2021:2213-1 Security update for qemu

This update for qemu fixes the following issues: - CVE-2021-3546: Fixed out-of-bounds write in virglcmdgetcapset bsc1185981. - CVE-2021-3544: Fixed memory leaks found in the virtio vhost-user GPU device bsc1186010. - CVE-2021-3545: Fixed information disclosure due to uninitialized memory read...

OPENSUSE-SU-2021:1012-1 Security update for gstreamer-plugins-bad

This update for gstreamer-plugins-bad fixes the following issues: - Update to version 1.16.3: - CVE-2021-3185: buffer overflow in gsth264sliceparsedecrefpicmarking bsc1181255 - amcvideodec: fix sync meta copying not taking a reference - audiobuffersplit: Perform discont tracking on running time -...

EulerOS Virtualization 3.0.2.2 : kernel (EulerOS-SA-2021-2140)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A memory leak in the ath10kusbhiftxsg function in drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel through 5.3.11 allows...

SUSE SLED15: qemu / qemu-arm / qemu-audio-alsa / qemu-audio-pa / etc (SUSE-SU-2021:2213-1)

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2213-1 advisory. - CVE-2021-3546: Fixed out-of-bounds write in virglcmdgetcapset bsc1185981. - CVE-2021-3544: Fixed memory leaks found in the virtio...

SUSE SLED15: qemu / qemu-arm / qemu-audio-alsa / qemu-audio-pa / qemu-block-curl / etc (SUSE-SU-2021:2212-1)

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2212-1 advisory. Security issues fixed: - CVE-2021-3546: Fix out-of-bounds write in virglcmdgetcapset bsc1185981 - CVE-2021-3544: Fix memory leaks foun...

SUSE-SU-2021:2213-1 Security update for qemu

This update for qemu fixes the following issues: - CVE-2021-3546: Fixed out-of-bounds write in virglcmdgetcapset bsc1185981. - CVE-2021-3544: Fixed memory leaks found in the virtio vhost-user GPU device bsc1186010. - CVE-2021-3545: Fixed information disclosure due to uninitialized memory read...

SUSE-SU-2021:2212-1 Security update for qemu

This update for qemu fixes the following issues: Security issues fixed: - CVE-2021-3546: Fix out-of-bounds write in virglcmdgetcapset bsc1185981 - CVE-2021-3544: Fix memory leaks found in the virtio vhost-user GPU device bsc1186010 - CVE-2021-3545: Fix information disclosure due to uninitialized...

openSUSE 15 Security Update : squid (openSUSE-SU-2021:0879-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:0879-1 advisory. - An issue was discovered in Squid through 4.13 and 5.x through 5.0.4. Due to improper input validation, it allows a trusted client to...

OPENSUSE-SU-2021:0909-1 Security update for wireshark, libvirt, sbc, libqt5-qtmultimedia

This update for wireshark, libvirt, sbc and libqt5-qtmultimedia fixes the following issues: Update wireshark to version 3.4.5 - New and updated support and bug fixes for multiple protocols - Asynchronous DNS resolution is always enabled - Protobuf fields can be dissected as Wireshark header field...

OESA-2021-1227 qemu security update

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: A flaw was found in vhost-user-gpu of QEMU in versions up to and including 6.0. An out-of-bounds write vulnerability can allow a malicious guest to crash the QEMU process on the host...

Debian DLA-2685-1 : squid3 security update

Several vulnerabilities were discovered in Squid, a proxy caching server. CVE-2021-28651 Due to a buffer-management bug, it allows a denial of service. When resolving a request with the urn: scheme, the parser leaks a small amount of memory. However, there is an unspecified attack methodology tha...

MGASA-2021-0255 Updated irssi packages fix security vulnerabilities

The irssi packages are updated to irssi 1.2.3 to fix several issues among some security vulnerabilities: memory handling issues memory leaks erroneous free crashes / freezes null pointer dereference when receiving broken JOIN record...

Updated irssi packages fix security vulnerabilities

The irssi packages are updated to irssi 1.2.3 to fix several issues among some security vulnerabilities: memory handling issues memory leaks erroneous free crashes / freezes null pointer dereference when receiving broken JOIN record...

SUSE SLES15 Security Update : squid (SUSE-SU-2021:1961-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:1961-1 advisory. - update to 4.15: - CVE-2021-28652: Broken cache manager URL parsing bsc1185918 - CVE-2021-28651: Memory leak in RFC 2169 response...

SUSE SLES11 Security Update : LibVNCServer (SUSE-SU-2020:14355-1)

The remote SUSE Linux SLES11 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2020:14355-1 advisory. - LibVNC commit before d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a contains a memory leak CWE-655 in VNC server code, which allow an attacker to...

SUSE: Security Advisory (SUSE-SU-2018:1368-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2013:1852-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...