Fedora 29 : yum-utils (2018-357e8e07ce)

Security fix for CVE-2018-10897 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 7030...

Fedora 28 : 2:shadow-utils (2018-35254ad97d)

Minor security update to version 4.6 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

CVE-2018-6342

react-dev-utils on Windows allows developers to run a local webserver for accepting various commands, including a command to launch an editor. The input to that command was not properly sanitized, allowing an attacker who can make a network request to the server either via CSRF or by direct reque...

CVE-2018-6342

react-dev-utils on Windows allows developers to run a local webserver for accepting various commands, including a command to launch an editor. The input to that command was not properly sanitized, allowing an attacker who can make a network request to the server either via CSRF or by direct reque...

@enact/cli (>=0.9.6, <=0.9.8), abt.api.web (0.0.3) +26 more potentially affected by CVE-2018-6342 via react-dev-utils (>=3.0.0, <=3.1.1)

react-dev-utils NPM version =3.0.0, =0.9.6, =4.2.0, =1.5.1, =0.15.0, =0.7.0, =0.7.0, =0.1.0, =0.1.4, =1.9.2, =0.0.1, =0.0.1, =0.0.3 and more Source cves: CVE-2018-6342 Source advisory: MEND:CVE-2018-6342...

@5minutes2start/react-scripts (>=1.1.2, <=1.1.4), @biko/react-scripts (>=0.1.0, <=0.4.0) +132 more potentially affected by CVE-2018-6342 via react-dev-utils (>=4.0.0, <=4.2.1)

react-dev-utils NPM version =4.0.0, =1.1.2, =0.1.0, =0.8.12, =0.1.0, =0.0.1, =2.13.0, =2.14.0, =0.2.0, =0.3.0, =0.2.2, =0.2.10-SNAPSHOT.481, =0.2.10-SNAPSHOT.673 - @leizeng/react-scripts-ts 2.13.0 and more Source cves: CVE-2018-6342 Source advisory: MEND:CVE-2018-6342...

@yaochuxia/roadhog (1.0.9), svmx-react-scripts (>=1.1.4, <=1.1.17) +1 more potentially affected by CVE-2018-6342 via react-dev-utils (2.0.1)

react-dev-utils NPM version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on react-dev-utils and may be impacted: - @yaochuxia/roadhog 1.0.9 - svmx-react-scripts =1.1.4, =0.1.0, =0.1.1 Source cves: CVE-2018-6342 Source advisory: MEND:CVE-2018-6342...

@1337lawyers/design (>=0.1.0, <=0.1.38), @9188/w-cli (>=1.0.0, <=1.0.4) +50 more potentially affected by CVE-2018-6342 via react-dev-utils (>=5.0.0, <=5.0.1)

react-dev-utils NPM version =5.0.0, =0.1.0, =1.0.0, =0.4.1, =0.1.0-latest.1a450bb3, =1.0.5, =1.0.0-beta.28, =1.0.1, =1.0.0, =1.0.0, =0.26.4, =0.0.0-legacy, =3.10.0-beta.0, =0.1.0-alpha.0, =2.1.16, =2.3.5 - aqxy-common-ui 0.0.1 and more Source cves: CVE-2018-6342 Source advisory: MEND:CVE-2018-634...

CVE-2018-6342

The CVE-2018-6342 entry concerns react-dev-utils on Windows, where a local webserver accepts commands including one to launch an editor. The input to that command is not properly sanitized, enabling an attacker who can issue a network request (via CSRF or direct request) to execute arbitrary comm...

PT-2018-17490

Name of the Vulnerable Software and Affected Versions react-dev-utils versions 1.x.x through 1.0.3 react-dev-utils versions 2.x.x through 2.0.1 react-dev-utils versions 3.x.x through 3.1.1 react-dev-utils versions 4.x.x through 4.2.1 react-dev-utils versions 5.x.x through 5.0.1 Description The...

PT-2022-19552

Name of the Vulnerable Software and Affected Versions GPAC version 2.1-DEV-rev87-g053aae8-master Description The issue is related to a failed assertion in the BS ReadByte function located in utils/bitstream.c, which causes a Denial of Service. Recommendations For GPAC version...

PT-2022-26810 · Gpac +2 · Gpac +2

Name of the Vulnerable Software and Affected Versions: GPAC version 2.1-DEV-rev368-gfd054169b-master Description: A memory leak was discovered in GPAC via the component gf list new at utils/list.c. Recommendations: For GPAC version 2.1-DEV-rev368-gfd054169b-master, consider restricting access to...

PT-2020-10607

Name of the Vulnerable Software and Affected Versions GPAC versions prior to 0.8.0 Description An issue was discovered in libgpac.a that can cause a denial of service via a crafted MP4 file. It contains an invalid pointer dereference in the gf list count function in utils/list.c. Recommendations...

PT-2020-10606

Name of the Vulnerable Software and Affected Versions GPAC versions prior to 0.8.0 Description A heap-based buffer over-read issue exists in the BS ReadByte function, which is called from gf bs read bit in utils/bitstream.c. This can cause a denial of service when a crafted MP4 file is processed...

WavPack denial of service vulnerability

WavPack is an open source, free audio lossless compression software. A security vulnerability exists in the openutils.c file 'WavpackVerifySingleBlock' function of the libwavpack.a static link library in WavPack 5.1.0 and earlier versions. An attacker can exploit this vulnerability to cause a...

PT-2018-2833

Name of the Vulnerable Software and Affected Versions alsa-utils affected versions not specified Description The issue is caused by a buffer overflow when processing command line parameters in the alsa in utility. This can be exploited by an attacker to cause a denial of service by inputting a...

PT-2018-19341

Уязвимость утилиты преобразования pdf документов в формат html pdftohtml из состава пакета poppler-utils связана с разыменованием нулевого указателя. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании приложения или выполнить произвольный код путем ввода в командную...

PT-2018-2934

Name of the Vulnerable Software and Affected Versions mesa-utils affected versions not specified Description The issue is related to a buffer overflow error in the ppdcSource::find variable function, located in the /usr/lib/x86 64-linux-gnu/libcupsppdc.so.1 library, which is part of the mesa-util...

PT-2018-19342

Уязвимость утилиты преобразования pdf документов в формат postscript pdftops из состава пакета poppler-utils связана с разыменованием нулевого указателя. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании приложения путем ввода в командную строку специально...

PT-2018-14840

Name of the Vulnerable Software and Affected Versions JEESNS version 1.3 Description The issue in JEESNS allows stored XSS via an HTML EMBED element. This is a different issue than previously identified vulnerabilities. Recommendations For JEESNS version 1.3, consider disabling the...