CVE-2023-38469 Reachable assertion in avahi_dns_packet_append_record

A vulnerability was found in Avahi, where a reachable assertion exists in avahidnspacketappendrecord...

Avahi security breach

Avahi is a suite of native service discovery tools for Linux. A security vulnerability exists in Avahi, which stems from an assertion failure in the avahiescapelabel function...

F5 Networks BIG-IP : QEMU vulnerability (K41142448)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3 / 17.5.1.1. It is, therefore, affected by a vulnerability as referenced in the K41142448 advisory. ethgetgsotype in net/eth.c in QEMU 4.2.1 allows guest OS users to trigger an assertion failure. A guest can crash th...

CVE-2023-38469: Reachable Assertion

A vulnerability was found in Avahi, where a reachable assertion exists in avahidnspacketappendrecord...

Avahi security breach

Avahi is a suite of native service discovery tools for Linux. A security vulnerability exists in Avahi that stems from an assertion failure in the avahirdataparse function...

CVE-2023-38473: Reachable Assertion

A vulnerability was found in Avahi. A reachable assertion exists in the avahialternativehostname function...

Avahi security breach

Avahi is a suite of local service discovery tools for Linux. A security vulnerability exists in Avahi that stems from an assertion failure in avahidnspacketappendrecord...

CVE-2023-38470: Reachable Assertion

A vulnerability was found in Avahi. A reachable assertion exists in the avahiescapelabel function...

CVE-2023-38472: Reachable Assertion

A vulnerability was found in Avahi. A reachable assertion exists in the avahirdataparse function...

Avahi security breach

Avahi is a suite of local service discovery tools for Linux. A security vulnerability exists in Avahi that stems from an assertion failure in the avahialternativehostname function...

Avahi security breach

Avahi is a set of local service discovery tools for Linux. A security vulnerability exists in Avahi that stems from an assertion failure in the dbussethostname function...

CVE-2023-38471: Reachable Assertion

A vulnerability was found in Avahi. A reachable assertion exists in the dbussethostname function...

CVE-2023-20264

A vulnerability in the implementation of Security Assertion Markup Language SAML 2.0 single sign-on SSO for remote access VPN in Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to intercept the SAML...

CVE-2023-20264

A vulnerability in the implementation of Security Assertion Markup Language SAML 2.0 single sign-on SSO for remote access VPN in Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to intercept the SAML...

USN-6463-1 open-vm-tools vulnerabilities

It was discovered that Open VM Tools incorrectly handled SAML tokens. A remote attacker Guest Operations privileges could possibly use this issue to escalate privileges. CVE-2023-34058 Matthias Gerstner discovered that Open VM Tools incorrectly handled file descriptors when dropping privileges. A...

SUSE CVE-2018-5742

While backporting a feature for a newer branch of BIND9, RedHat introduced a path leading to an assertion failure in buffer.c:420. Affects RedHat versions bind-9.9.4-65.el7 - bind-9.9.4-72.el7. No ISC releases are affected. Other packages from other distributions who made the same error may also ...

SUSE CVE-2019-3878

A vulnerability was found in modauthmellon before v0.14.2. If Apache is configured as a reverse proxy and modauthmellon is configured to only let through authenticated users with the require valid-user directive, adding special HTTP headers that are normally used to start the special SAML ECP...

libnbd Security Vulnerabilities

libnbd is a library for editing NBD Network Block Device clients. A security vulnerability exists in libnbd that stems from an assertion failure in BLOCKSTATUS...

Mageia: Security Advisory (MGASA-2023-0303)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated bind packages fix security vulnerabilities

The code that processes control channel messages sent to named calls certain functions recursively during packet parsing. Recursion depth is only limited by the maximum accepted packet size; depending on the environment, this may cause the packet-parsing code to run out of available stack memory,...