SUSE: Security Advisory (SUSE-SU-2023:4512-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15: libblkid-devel / libblkid-devel-static / libblkid1 / etc (SUSE-SU-2023:4512-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4512-1 advisory. - CVE-2018-7738: Fixed shell code injection in umount bash-completions bsc1213865. Tenable has extracted the preceding description block...

SUSE-SU-2023:4512-1 Security update for util-linux

This update for util-linux fixes the following issues: - CVE-2018-7738: Fixed shell code injection in umount bash-completions bsc1213865...

Moderate Photon OS Security Update - PHSA-2023-4.0-0508

Updates of 'apr-util', 'gdb' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2023-3.0-0684

Updates of 'apr-util', 'linux-aws', 'vim', 'linux', 'linux-secure', 'linux-esx', 'linux-rt' packages of Photon OS have been released...

NewStart CGSL MAIN 6.06 : apr-util Vulnerability (NS-SA-2023-0131)

The remote NewStart CGSL host, running version MAIN 6.06, has apr-util packages installed that are affected by a vulnerability: - Integer Overflow or Wraparound vulnerability in aprbase64 functions of Apache Portable Runtime Utility APR-util allows an attacker to write beyond bounds of a buffer...

Use Of Hardcoded Cryptographic Key

lamp-core and lamp-util are vulnerable to hard coded credential vulnerability. The vulnerability is due to usage of a hardcoded cryptographic key while creating and verifying a JWT token.The vulnerability allows an attacker to authenticate to the application via a specially crafted token...

SUSE-SU-2023:4372-1 Security update for util-linux

This update for util-linux fixes the following issues: - CVE-2018-7738: Fixed shell code injection in umount bash-completions bsc1213865...

SUSE CVE-2019-15718

In systemd 240, busopensystemwatchbindwithdescription in shared/bus-util.c as used by systemd-resolved to connect to the system D-Bus instance, calls sdbussettrusted, which disables access controls for incoming D-Bus messages. An unprivileged user can exploit this by executing D-Bus methods that...

Slackware: Security Advisory (SSA:2023-290-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[slackware-security] util-linux

New util-linux packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/util-linux-2.37.4-i586-2slack15.0.txz: Rebuilt. Copy /etc/pam.d/login to /etc/pam.d/remote. This is needed for /bin/login's '-h'...

Slackware Linux 15.0 / current util-linux Vulnerability (SSA:2023-290-01)

The version of util-linux installed on the remote host is prior to 2.37.4 / 2.39.2. It is, therefore, affected by a vulnerability as referenced in the SSA:2023-290-01 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...

CVE-2023-21252

In validatePassword of WifiConfigurationUtil.java, there is a possible way to get the device into a boot loop due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

Critical Photon OS Security Update - PHSA-2023-5.0-0110

Updates of 'apr-util', 'glibc' packages of Photon OS have been released...

CVE-2020-21583

A vulnerability was found in hwclock in util-linux, which allowed non-root users to access the hardware clock. This flaw allows an attacker to execute arbitrary code via the path parameter when setting the date...

Malicious code in xweb_3.0_util_lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9395190d3b87df26bea461b71b3c6883af0dc1f6152bf4415a68881b850b780e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2023-28307 · Hutool · Hutool

Name of the Vulnerable Software and Affected Versions: hutool version 5.8.21 Description: The issue is related to a buffer overflow in the JSONUtil.parse component. Recommendations: For hutool version 5.8.21, consider disabling the JSONUtil.parse function until a patch is available. Restrict the...

Oracle Linux 6 : util-linux-ng (ELSA-2011-1691)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1691 advisory. - fix CVE-2011-1675 - mount fails to anticipate RLIMITFSIZE - fix CVE-2011-1677 - umount may fail to remove /etc/mtab lock file Tenable has extracted t...

Oracle Linux 7 : nss, / nss-softokn, / nss-util, / and / nspr (ELSA-2019-2237)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-2237 advisory. nspr 4.21.0-1 - Rebase to NSPR 4.21 nss 3.44.0-4 - Fix certutil man page - Fix extracting a public key from a private key for dh, ec, and dsa 3.44.0-3 ...

PT-2023-26973 · Tracker Software Products · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. It requires user interaction, such as visiting a malicious page or opening a...