985 matches found
CVE-2021-41034
The build of some language stacks of Eclipse Che version 6 includes pulling some binaries from an unsecured HTTP endpoint. As a consequence the builds of such stacks are vulnerable to MITM attacks that allow the replacement of the original binaries with arbitrary ones. The stacks involved are Jav...
Slackware Linux 14.0 / 14.1 / 14.2 / current alpine Vulnerability (SSA:2021-264-01)
The version of alpine installed on the remote host is prior to 2.25. It is, therefore, affected by a vulnerability as referenced in the SSA:2021-264-01 advisory. - In Alpine through 2.24, untagged responses from an IMAP server are accepted before STARTTLS. CVE-2021-38370 Note that Nessus has not...
[slackware-security] alpine
New alpine packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/alpine-2.25-i586-1slack14.2.txz: Upgraded. Fixed a denial-of-service security issue where untagged responses from an IMA...
openSUSE 15 Security Update : haserl (openSUSE-SU-2021:1279-1)
The remote SUSE Linux SUSE15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE-SU-2021:1279-1 advisory. - Lack of verification in haserl, a component of Alpine Linux Configuration Framework, before 0.9.36 allows local users to read the contents of any...
ALPINE-CVE-2020-21598
libde265 v1.0.4 contains a heap buffer overflow in the ffhevcputunweightedpred8sse function, which can be exploited via a crafted a file...
ALPINE-CVE-2020-21601
libde265 v1.0.4 contains a stack buffer overflow in the putqpelfallback function, which can be exploited via a crafted a file...
ALPINE-CVE-2021-3796
vim is vulnerable to Use After Free...
ALPINE-CVE-2021-3770
vim is vulnerable to Heap-based Buffer Overflow...
DEBIAN-CVE-2021-38370
In Alpine before 2.25, untagged responses from an IMAP server are accepted before STARTTLS...
CVE-2021-38370
In Alpine before 2.25, untagged responses from an IMAP server are accepted before STARTTLS...
CVE-2021-38370
In Alpine before 2.25, untagged responses from an IMAP server are accepted before STARTTLS...
CVE-2021-38370
In Alpine before 2.25, untagged responses from an IMAP server are accepted before STARTTLS...
CVE-2021-38370
In Alpine before 2.25, untagged responses from an IMAP server are accepted before STARTTLS...
UBUNTU-CVE-2021-38370
In Alpine before 2.25, untagged responses from an IMAP server are accepted before STARTTLS...
Design/Logic Flaw
In Alpine before 2.25, untagged responses from an IMAP server are accepted before STARTTLS...
CVE-2021-38370
The CVE describes Alpine before 2.25 allowing untagged IMAP responses before STARTTLS, potentially leaking information. Affected component: Alpine IMAP handling. Root cause: insecure handling of IMAP responses prior to TLS upgrade. Impact per sources: information leakage (and related issues) when...
CVE-2021-38370
In Alpine before 2.25, untagged responses from an IMAP server are accepted before STARTTLS...
CVE-2021-38370
In Alpine before 2.25, untagged responses from an IMAP server are accepted before STARTTLS...
