Security Bulletin: Multiple vulnerabilities in IBM Java SDK (January 2021) affect IBM InfoSphere Information Server

Summary There are multiple vulnerabilities in the IBM® SDK Java™ Technology Edition, Versions 7 and 8 that are used by IBM InfoSphere Information Server. These issues were disclosed as part of the IBM Java SDK updates in January 2021. Vulnerability Details CVEID: CVE-2020-27221 DESCRIPTION: Eclip...

SUSE SLED15 / SLES15 Security Update : sqlite3 (SUSE-SU-2021:2320-1)

The remote SUSE Linux SLED15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2320-1 advisory. - Update to version 3.36.0 - CVE-2020-15358: heap-based buffer overflow in multiSelectOrderBy due to mishandling of...

Google Chrome Buffer Overflow (CVE-2021-21153)

A buffer overflow vulnerability exists in Google Chrome. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Ambarella Oryx RTSP Server Buffer Overflow (CVE-2020-24918)

A buffer overflow vulnerability exists in Ambarella Oryx RTSP Server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

DjVuLibre 缓冲区错误漏洞

DjVuLibre is an open source implementation of DjVu computer file format that includes a DjVu file viewer, browser plug-in, DjVu file decoder/encoder and other utilities. A buffer error vulnerability exists in DjVuLibre. An attacker could cause application crashes and other consequences with a...

Adobe Acrobat and Reader Heap-based Buffer Overflow (APSB21-29: CVE-2021-28560)

A buffer overflow vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

April 13, 2021—KB5001389 (Monthly Rollup)

None None...

OpenSSL 1.1.1 < 1.1.1j Multiple Vulnerabilities

The version of OpenSSL installed on the remote host is prior to 1.1.1j. It is, therefore, affected by multiple vulnerabilities as referenced in the 1.1.1j advisory. - The OpenSSL public API function X509issuerandserialhash attempts to create a unique hash value based on the issuer and serial numb...

OpenSSL Vulnerabilities Mar 2021

Summary Symantec Network and Information Security NIS products using affected versions of OpenSSL may be susceptible to two vulnerabilities. A remote attacker may be able to cause denial of service through application crashes. An application may successfully validate an invalid X.509 certificate...

Apache Tomcat mod_jk Buffer Overflow

A buffer overflow vulnerability exists in Apache Tomcat. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Netgear ProSAFE Buffer Overflow (CVE-2020-35227)

A buffer overflow vulnerability exists in Netgear ProSAFE. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Netgear ProSAFE Integer Overflow (CVE-2020-35230)

An integer overflow vulnerability exists in Netgear ProSAFE. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : OpenSSL vulnerabilities (USN-4738-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4738-1 advisory. Paul Kehrer discovered that OpenSSL incorrectly handled certain input lengths in EVP functions. A remote attacker could possibly...

CVE-2021-27594

SAP 3D Visual Enterprise Viewer for Windows has a BMP input validation flaw (CVE-2021-27594) that causes the application to crash and become temporarily unavailable when opening manipulated BMP files from untrusted sources. Multiple sources (NVD, CNVD/CNNVD, Red Hat/other cve records) describe a ...

Amazon Linux 2 : openssl11 (ALAS-2021-1612)

The version of openssl11 installed on the remote host is prior to 1.1.1g-12. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2021-1612 advisory. Calls to EVPCipherUpdate, EVPEncryptUpdate and EVPDecryptUpdate may overflow the output length argument in some cases...

Huawei EulerOS: Security Advisory for openjpeg2 (EulerOS-SA-2021-1587)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[ASA-202102-36] python-cryptography: incorrect calculation

Arch Linux Security Advisory ASA-202102-36 ========================================== Severity: Medium Date : 2021-02-27 CVE-ID : CVE-2020-36242 Package : python-cryptography Type : incorrect calculation Remote : No Link : https://security.archlinux.org/AVG-1541 Summary ======= The package...

OpenJPEG Buffer Overflow (CVE-2016-1681)

A buffer overflow vulnerability exists in the opjj2kreadSPCodSPCoc function in j2k.c in OpenJPEG. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

CVE-2021-23840

Calls to EVPCipherUpdate, EVPEncryptUpdate and EVPDecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissible length for an integer on the platform. In such cases the return value from the function call will be 1 indicating succes...

CVE-2021-23840

Calls to EVPCipherUpdate, EVPEncryptUpdate and EVPDecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 indicating succes...