3874 matches found
RHEL 7 : rh-mariadb105-galera and rh-mariadb105-mariadb (RHSA-2023:7633)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7633 advisory. MariaDB is a multi-user, multi-threaded SQL database server. For all practical purposes, MariaDB is binary-compatible with MySQL. The...
OPENSUSE-SU-2023:0388-1 Security update for optipng
This update for optipng fixes the following issues: Update to 0.7.8: CVE-2023-43907: Fixed a global-buffer-overflow vulnerability in the GIF reader boo1215937. Fixed a stack-print-after-scope defect in the error handler. Fixed an assertion failure in the image reduction module. Fixed the...
Oracle Linux 9 : frr (ELSA-2023-6434)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-6434 advisory. 8.3.1-11 - Resolves: RHEL-2263 - bgpd: Do not explicitly print MAXTTL value for ebgp-multihop vty output 8.3.1-10 - Related: 2216912 - adding sysadmin ...
mariadb: assertion failure at table->get_ref_count() == 0 in dict0dict.cc
MariaDB v10.5 to v10.7 was discovered to contain an assertion failure at table-getrefcount == 0 in dict0dict.cc...
gdb security update
10.2.11.0.1 - Merge Oracle patches for ol9 Reviewed-by: Jose E. Marchesi 10.2-11.el9 - Backport 'libiberty: prevent buffer overflow when decoding user input' Luis Ferreira, RHBZ2132600 Mon Mar 27 2023 Bruno Larsen - Backport 'gdb/breakpoint Fix assert in jiteventhandler' Tom de Vries, RHBZ 213062...
mariadb: assertion failure at table->get_ref_count() == 0 in dict0dict.cc
MariaDB v10.5 to v10.7 was discovered to contain an assertion failure at table-getrefcount == 0 in dict0dict.cc...
mariadb: assertion failure in VDec::VDec at /sql/sql_type.cc
A flaw was found in the MariaDB Server. It contains a use-after-free in the component, VDec::VDec at /sql/sqltype.cc, affecting availability...
mariadb: crash in multi-update and implicit grouping
An assertion failure was found in the MariaDB Server. This issue is via, 'node-pcur-relpos == BTRPCURON' at /row/row0mysql.cc, affecting availability...
mariadb: assertion failure at table->get_ref_count() == 0 in dict0dict.cc
MariaDB v10.5 to v10.7 was discovered to contain an assertion failure at table-getrefcount == 0 in dict0dict.cc...
mariadb: assertion failure in compare_order_elements
A flaw was found in the MariaDB Server. It contains a segmentation fault via the component, sql/sqlwindow.cc, impacting availability...
mariadb: assertion failure in sql/item_cmpfunc.cc
A flaw was found in the MariaDB Server. It contains a segmentation fault via the component, sql/itemcmpfunc.cc, affecting availability...
kernel: net: IPv6 RPL protocol reachable assertion leads to DoS
A flaw was found in the Linux kernel's networking subsystem within the RPL protocol's handling. This issue results from the improper handling of user-supplied data, which can lead to an assertion failure. This flaw allows an unauthenticated, remote attacker to create a denial of service condition...
kernel: ALSA: ymfpci: Fix BUG_ON in probe function
An assertion failure was found in the Linux kernel's Yamaha YMF sound card driver during buffer validation. The probe function includes a BUGON assertion that compares DMA buffer sizes without accounting for alignment, causing the assertion to fail when the aligned buffer size doesn't exactly mat...
frr: denial of service by crafting a BGP OPEN message with an option of type in bgp_open_option_parse in the bgp_open.c 0xff
A vulnerability was found in FRRouting. The issue occurs in bgpd in FRRouting FRR. By crafting a BGP OPEN message with an option of type 0xff Extended Length from RFC 9072, attackers may cause a denial of service assertion failure and daemon restart or out-of-bounds read. This flaw is possible du...
frr: denial of service by crafting a BGP OPEN message with an option of type 0xff
A vulnerability was found in FRRouting. The issue occurs in bgpd in FRRouting FRR. By crafting a BGP OPEN message with an option of type 0xff Extended Length from RFC 9072, attackers may cause a denial of service assertion failure and daemon restart or out-of-bounds read. This flaw is possible du...
RHEL 9 : frr (RHSA-2023:6434)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:6434 advisory. FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR,...
Rocky Linux 8 : varnish:6 (RLSA-2020:4756)
The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2020:4756 advisory. - An issue was discovered in Varnish Cache before 6.0.4 LTS, and 6.1.x and 6.2.x before 6.2.1. An HTTP/1 parsing failure allows a remote attacker to...
RockyLinux 8 : virt:rhel and virt-devel:rhel (RLSA-2021:1762)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:1762 advisory. libvirt: double free in qemuAgentGetInterfaces in qemuagent.c CVE-2020-25637 QEMU: heap buffer overflow in msixtablemmiowrite in hw/pci/msix.c...
Rocky Linux 8 : unbound (RLSA-2021:1853)
The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:1853 advisory. - DISPUTED Unbound before 1.9.5 allows an integer overflow in the regional allocator via regionalalloc. NOTE: The vendor disputes that this is a...
