SUSE-SU-2021:1438-1 Security update for samba

This update for samba fixes the following issues: - CVE-2021-20254: Fixed a buffer overrun in sidstounixids bsc1184677. - Avoid free'ing our own pointer in memcache when memcachetrim attempts to reduce cache size bsc1179156. - Adjust smbcacls '--propagate-inheritance' feature to align with upstre...

Desktop Window Managers Privilege Escalation

The vulnerability of desktop window managers in Windows operating systems relates to the issue of operations going beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially crafted application...

Redis memtest_preserving_test Buffer Overflow DoS

The vulnerability of the memtestpreservingtest function in the memtest.c component of the Redis database management system is related to the issue where an operation is executed outside the buffer in memory when creating an emergency dump. Exploiting this vulnerability can allow a malicious actor...

Mozilla Firefox Use-After-Free

The vulnerability of the Mozilla Firefox browser is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

SUSE: Security Advisory (SUSE-SU-2016:2618-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2016:2008-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2021:0653-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2016:1228-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2021:0608-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2018:0122-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2017:2294-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2021-8010 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.12.0-rc5 Description: The issue is related to an array overrun in the rtw get tx power params function. This occurs when the value of group is 5 for channel 14, causing an out-of-bounds access in the bw40 base...

openSUSE: Security Advisory for evolution-data-server (openSUSE-SU-2021:0482-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Microsoft Outlook Buffer Overflow

The vulnerability of the Microsoft Outlook email client, as well as the Microsoft 365 Apps for Enterprise and Microsoft Office products, is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

Remote Code Execution

system.text.encodings.web is vulnerable to remote code execution. A buffer overrun allows an attacker to remotely execute arbitrary code on the host OS...

Apache Guacamole RCE

The vulnerability of the Apache Guacamole software for remote administration of client machines is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

Google Chrome TabStrip Code Execution

The vulnerability of the TabStrip control element in Google Chrome browsers is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure...

Google Chrome Screen Capture Code Execution

The vulnerability of the Screen Capture function in Google Chrome browsers is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or trigger a denial-of-service attack using a specially created...

Google Chrome TabStrip Code Execution

The vulnerability of the TabStrip control element in Google Chrome browsers is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure...

Google Chrome IPC Unauthorized Access

The vulnerability of the Google Chrome browser’s IPC implementation relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to protected information...