SUSE SLES12 Security Update : ovmf (SUSE-SU-2021:2117-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2117-1 advisory. - Fixed a possible buffer overflow in IScsiDxe bsc1186151 - CVE-2021-28211: ovmf: edk2: possible heap corruption with...

SUSE-SU-2021:2161-1 Security update for ovmf

This update for ovmf fixes the following issues: - Fixed a possible buffer overflow in IScsiDxe bsc1186151 - CVE-2021-28211: ovmf: edk2: possible heap corruption with LzmaUefiDecompressGetInfo bsc1183578 - CVE-2021-28210: ovmf: unlimited FV recursion, round 2 bsc1183579...

SUSE: Security Advisory (SUSE-SU-2021:2161-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Xen Hypervisor Emergency Shutdown

The vulnerability of the Xen hypervisor is caused by an uncontrolled recursion. Exploiting this vulnerability can allow an attacker to cause the application to terminate abnormally...

SUSE-SU-2021:2117-1 Security update for ovmf

This update for ovmf fixes the following issues: - Fixed a possible buffer overflow in IScsiDxe bsc1186151 - CVE-2021-28211: ovmf: edk2: possible heap corruption with LzmaUefiDecompressGetInfo bsc1183578 - CVE-2021-28210: ovmf: unlimited FV recursion, round 2 bsc1183579 - CVE-2019-14584: ovmf,shi...

CVE-2021-28210

An unlimited recursion in DxeCore in EDK II...

DEBIAN-CVE-2021-28210

An unlimited recursion in DxeCore in EDK II...

CVE-2021-28210

An unlimited recursion in DxeCore in EDK II...

CVE-2021-28210

An unlimited recursion in DxeCore in EDK II...

CVE-2021-28210

An unlimited recursion in DxeCore in EDK II...

CVE-2021-28210

An unlimited recursion in DxeCore in EDK II...

CVE-2021-28210

CVE-2021-28210 corresponds to an unlimited recursion vulnerability in the DxeCore component of EDK II. Affects EDK II implementations (DxeCore) across multiple platforms as cited in connected advisories (AstraLinux, EulerOS, Red Hat, SUSE, Ubuntu, etc.). The NVD data indicates a CVSS v3.1 base sc...

CVE-2021-28210

An unlimited recursion in DxeCore in EDK II...

krb5 security update

1.15.1-50.0.1 - Add recursion limit for ASN.1 indefinite lengths Orabug: 32582360...

CVE-2021-28210: Uncontrolled Recursion

An unlimited recursion in DxeCore in EDK II...

SUSE-SU-2021:1951-1 Security update for salt

This update for salt fixes the following issues: - Check if dpkgnotify is executable bsc1186674 - Update to Salt release version 3002.2 jscECO-3212, jscSLE-18033, jscSLE-18028 - Drop support for Python2. Obsoletes python2-salt package jscSLE-18028 - Fix issue parsing errors in ansiblegate state...

Oracle Linux 7 : krb5 (ELSA-2021-9294)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-9294 advisory. 1.15.1-50.0.1 - Add recursion limit for ASN.1 indefinite lengths Orabug: 32582360 Tenable has extracted the preceding description block directly from the Oracle...

SUSE: Security Advisory (SUSE-SU-2020:3377-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2014:0759-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2014:1321-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...