1257 matches found
[SECURITY] Fedora 32 Update: curl-7.69.1-7.fc32
curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...
SUSE SLES15 Security Update : openssh (SUSE-SU-2020:3882-1)
This update for openssh fixes the following issues : CVE-2020-14145: Fixed a potential information leak during host key exchange bsc1173513. Fixed an issue where oracle cluster with cluvfy using 'scp' failing/missinterpreted bsc1148566. Note that Tenable Network Security has extracted the precedi...
Fedora: Security Advisory for curl (FEDORA-2020-7ab62c73bc)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
SUSE-SU-2020:3882-1 Security update for openssh
This update for openssh fixes the following issues: - CVE-2020-14145: Fixed a potential information leak during host key exchange bsc1173513. - Fixed an issue where oracle cluster with cluvfy using 'scp' failing/missinterpreted bsc1148566...
SUSE SLED15 / SLES15 Security Update : openssh (SUSE-SU-2020:3866-1)
This update for openssh fixes the following issues : CVE-2020-14145: Fixed a potential information leak during host key exchange bsc1173513. Supplement libgtk-3-0 instead of libX11-6 to avoid installation on a textmode install bsc1142000 Fixed an issue where oracle cluster with cluvfy using 'scp'...
SUSE-SU-2020:3844-1 Security update for openssh
This update for openssh fixes the following issues: - CVE-2020-14145: Fixed an observable discrepancy leading to an information leak in the algorithm negotiation bsc1173513. - Fixed an issue where AuthorizedKeysCommand produced a lot of output bsc1161684. - Fixed an issue where oracle cluster wit...
Fedora: Security Advisory for curl (FEDORA-2020-ceaf490686)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2020-12595
An information disclosure flaw allows a malicious, authenticated, privileged web UI user to obtain a password for a remote SCP backup server that they might not otherwise be authorized to access. This affects SMG prior to 10.7.4...
CVE-2020-12595: Undefined Security Weakness
An information disclosure flaw allows a malicious, authenticated, privileged web UI user to obtain a password for a remote SCP backup server that they might not otherwise be authorized to access. This affects SMG prior to 10.7.4...
PT-2020-13161
Name of the Vulnerable Software and Affected Versions SMG versions prior to 10.7.4 Description An information disclosure flaw allows a malicious, authenticated, privileged web UI user to obtain a password for a remote SCP backup server that they might not otherwise be authorized to access...
Security Bulletin: Vulnerability in OpenSSH affects IBM Integrated Analytics System
Summary Redhat provided OpenSSH is used by IBM Integrated Analytics System. This bulletin provides mitigation for the reported CVE. Vulnerability Details CVEID: CVE-2019-6109 DESCRIPTION: OpenSSH could allow a remote attacker to conduct spoofing attacks, caused by missing character encoding in th...
wolfssl:fuzzer-wolfssh-server-randomize: Heap-buffer-overflow in wolfSSH_CleanPath
Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=4901641429712896 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-wolfssh-server-randomize Job Type: libfuzzerasanwolfssl Platform Id: linux Crash Type: Heap-buffer-overflow READ 16...
Huawei EulerOS: Security Advisory for openssh (EulerOS-SA-2020-2451)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Moderate: libssh security, bug fix, and enhancement update
libssh is a library which implements the SSH protocol. It can be used to implement client and server applications. The following packages have been upgraded to a later upstream version: libssh 0.9.4. BZ1804797 Security Fixes: libssh: denial of service when handling AES-CTR or DES ciphers...
EulerOS 2.0 SP2 : openssh (EulerOS-SA-2020-2376)
According to the version of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The scp client in OpenSSH 8.2 incorrectly sends duplicate responses to the server upon a utimes system call failure, which allows a malicious...
VulnCheck KEV: CVE-2019-6111
An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. However, the scp client only performs cursory validation of the object name returned only directory traversal attacks are prevented...
wolfssl:fuzzer-wolfssh-server: Heap-buffer-overflow in clean_path
Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=6046775766679552 Project: wolfssl Fuzzing Engine: honggfuzz Fuzz Target: fuzzer-wolfssh-server Job Type: honggfuzzasanwolfssl Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...
Huawei EulerOS: Security Advisory for openssh (EulerOS-SA-2020-2112)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP3 : openssh (EulerOS-SA-2020-2112)
According to the version of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The scp client in OpenSSH 8.2 incorrectly sends duplicate responses to the server upon a utimes system call failure, which allows a malicious...
ProFTPD: Denial of service
Background ProFTPD is an advanced and very configurable FTP server. Description It was found that ProFTPD did not properly handle invalid SCP commands. Impact An authenticated remote attacker could issue invalid SCP commands, possibly resulting in a Denial of Service condition. Workaround There i...