CVE-2021-32569

In OSS-RC systems of the release 18B and older customer documentation browsing libraries under ALEX are subject to Cross-Site Scripting. This problem is completely resolved in new Ericsson library browsing tool ELEX used in systems like Ericsson Network Manager. NOTE: This vulnerability only...

CVE-2021-32569

CVE-2021-32569 affects OSS-RC systems using ALEX-based customer documentation browsing libraries (OSS-RC release 18B and older). The issue is Cross-Site Scripting caused by inadequate validation in the web-facing components; Red Hat/NVD entries reiterate the same. Affected products are no longer ...

OSV-2021-1447 UNKNOWN READ

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39900 Crash type: UNKNOWN READ Crash state: NULL...

PT-2021-19786 · Ericsson · Ericsson Network Manager +1

Name of the Vulnerable Software and Affected Versions: OSS-RC versions 18B and older Description: The issue affects OSS-RC systems during data migration procedures, where files containing usernames and passwords are left undeleted in folders accessible by top privileged accounts only. This issue...

OSV-2021-1445 Heap-buffer-overflow in mk_rconf_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39853 Crash type: Heap-buffer-overflow READ 1 Crash state: mkrconfread mkrconfreadglob mkrconfread...

OSV-2021-1442 Heap-use-after-free in find_es_header

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39842 Crash type: Heap-use-after-free READ 4 Crash state: findesheader analyzechunk probestream...

OSV-2021-1440 Heap-buffer-overflow in internal_huf_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39836 Crash type: Heap-buffer-overflow READ 1 Crash state: internalhufdecompress internalexrundopiz defaultdecompresschunk...

OSV-2021-1437 Heap-buffer-overflow in unpack_32bit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39799 Crash type: Heap-buffer-overflow WRITE 4 Crash state: unpack32bit exrdecodingrun Imf31::checkCoreFile...

OSV-2021-1430 Heap-buffer-overflow in diagnosticInfoOrder

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39741 Crash type: Heap-buffer-overflow READ 8 Crash state: diagnosticInfoOrder structureOrder UAorder...

OSV-2021-1427 Global-buffer-overflow in fr_base16_decode_nstd

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39699 Crash type: Global-buffer-overflow READ 1 Crash state: frbase16decodenstd frvalueboxfromstr frpairvaluefromstr...

OSV-2021-1425 Heap-buffer-overflow in fr_dns_label_to_value_box

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39689 Crash type: Heap-buffer-overflow READ 1 Crash state: frdnslabeltovaluebox decodevaluetrampoline frstructfromnetwork...

OSV-2021-1423 Heap-buffer-overflow in fr_struct_from_network

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39660 Crash type: Heap-buffer-overflow READ 1 Crash state: frstructfromnetwork frstructfromnetwork decoderecord...

OSV-2021-1422 Heap-buffer-overflow in fr_dns_label_uncompressed_length

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39657 Crash type: Heap-buffer-overflow READ 1 Crash state: frdnslabeluncompressedlength decodevaluetrampoline frstructfromnetwork...

OSV-2021-1420 Heap-buffer-overflow in unpack_16bit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39623 Crash type: Heap-buffer-overflow WRITE Crash state: unpack16bit exrdecodingrun Imf31::checkCoreFile...

OSV-2021-1417 Heap-buffer-overflow in openhtj2k::T1OpenHTJ2K::decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39632 Crash type: Heap-buffer-overflow WRITE 4 Crash state: openhtj2k::T1OpenHTJ2K::decompress std::1::packagedtaskfuncstd::1::bindgrk::T1DecompressScheduler::deco std::1::packagedtaskint...

OSV-2021-1414 Heap-buffer-overflow in internal_huf_decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39601 Crash type: Heap-buffer-overflow READ 1 Crash state: internalhufdecompress internalexrundopiz defaultdecompresschunk...

OSV-2021-1410 Heap-buffer-overflow in generic_unpack

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39571 Crash type: Heap-buffer-overflow WRITE 4 Crash state: genericunpack exrdecodingrun Imf31::checkCoreFile...

OSV-2021-1408 Heap-buffer-overflow in unpack_16bit_4chan_planar

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39532 Crash type: Heap-buffer-overflow WRITE Crash state: unpack16bit4chanplanar exrdecodingrun Imf31::checkCoreFile...

OSV-2021-1406 Heap-buffer-overflow in Imf_3_1::memstream_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39542 Crash type: Heap-buffer-overflow WRITE Crash state: Imf31::memstreamread dispatchread readuncompresseddirect...

FreeBSD : nexus2-oss -- Apache ActiveMQ JMX vulnerability (730e922f-20e7-11ec-a574-080027eedc6a)

Sonatype reports : - CVE-2020-13920: Apache ActiveMQ JMX is vulnerable to a MITM attack %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2021 Jacques Vidrine and contributors...