OPENSUSE-SU-2021:0636-1 Security update for samba

This update for samba fixes the following issues: - CVE-2021-20277: Fixed an out of bounds read in ldbhandlerfold bsc1183574. - CVE-2021-20254: Fixed a buffer overrun in sidstounixids bsc1184677. - CVE-2020-27840: Fixed an unauthenticated remote heap corruption via bad DNs bsc1183572. - Avoid...

Security fix for the ALT Linux 10 package samba version 4.14.4-alt1

April 30, 2021 Evgeny Sinelnikov 4.14.4-alt1 - Fix buffer overrun in sidstounixids Fixes: CVE-2021-20254 - Final migration to /run directory Closes: 35891, 36652, 39992 - Avoid build problems on e2k...

SUSE SLES12 Security Update : samba (SUSE-SU-2021:1438-1)

This update for samba fixes the following issues : CVE-2021-20254: Fixed a buffer overrun in sidstounixids bsc1184677. Avoid free'ing our own pointer in memcache when memcachetrim attempts to reduce cache size bsc1179156. Adjust smbcacls '--propagate-inheritance' feature to align with upstream...

SUSE SLES12 Security Update : samba (SUSE-SU-2021:1439-1)

This update for samba fixes the following issues : CVE-2021-20254: Fixed a buffer overrun in sidstounixids bsc1184677. Adjust smbcacls '--propagate-inheritance' feature to align with upstream bsc1178469. Note that Tenable Network Security has extracted the preceding description block directly fro...

SUSE SLES15 Security Update : samba (SUSE-SU-2021:1445-1)

This update for samba fixes the following issues : CVE-2021-20254: Fixed a buffer overrun in sidstounixids bsc1184677. Avoid free'ing our own pointer in memcache when memcachetrim attempts to reduce cache size bsc1179156. Adjust smbcacls '--propagate-inheritance' feature to align with upstream...

SUSE SLES12 Security Update : samba (SUSE-SU-2021:1442-1)

This update for samba fixes the following issues : CVE-2021-20254: Fixed a buffer overrun in sidstounixids bsc1184677. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format...

Valve: Buffer overrun in Steam SILK voice decoder

Vulnerability The SteamWorks SDK has a function available named DecompressVoice, which takes as input some compressed voice data, and returns the raw audio data. The format for the input voice data is as follows: 8 bytes - steamid 1 byte - payload type 2 bytes - payload size 4 bytes - CRC checksu...

SUSE-SU-2021:1445-1 Security update for samba

This update for samba fixes the following issues: - CVE-2021-20254: Fixed a buffer overrun in sidstounixids bsc1184677. - Avoid free'ing our own pointer in memcache when memcachetrim attempts to reduce cache size bsc1179156. - Adjust smbcacls '--propagate-inheritance' feature to align with upstre...

SUSE-SU-2021:1444-1 Security update for samba

This update for samba fixes the following issues: - CVE-2021-20277: Fixed an out of bounds read in ldbhandlerfold bsc1183574. - CVE-2021-20254: Fixed a buffer overrun in sidstounixids bsc1184677. - CVE-2020-27840: Fixed an unauthenticated remote heap corruption via bad DNs bsc1183572. - Avoid...

SUSE-SU-2021:1442-1 Security update for samba

This update for samba fixes the following issues: - CVE-2021-20254: Fixed a buffer overrun in sidstounixids bsc1184677...

SUSE-SU-2021:14709-1 Security update for samba

This update for samba fixes the following issues: - CVE-2021-20254: Fixed a buffer overrun in sidstounixids bsc1184677. - Adjust smbcacls '--propagate-inheritance' feature to align with upstream bsc1178469...

SUSE-SU-2021:1440-1 Security update for ldb, samba

This update for ldb, samba fixes the following issues: - ldb was updated to 2.2.1 - CVE-2021-20277: Fixed an out of bounds read in ldbhandlerfold bsc1183574. - CVE-2021-20254: Fixed a buffer overrun in sidstounixids bsc1184677. - CVE-2020-27840: Fixed an unauthenticated remote heap corruption via...

SUSE-SU-2021:1439-1 Security update for samba

This update for samba fixes the following issues: - CVE-2021-20254: Fixed a buffer overrun in sidstounixids bsc1184677. - Adjust smbcacls '--propagate-inheritance' feature to align with upstream bsc1178469...

SUSE-SU-2021:1438-1 Security update for samba

This update for samba fixes the following issues: - CVE-2021-20254: Fixed a buffer overrun in sidstounixids bsc1184677. - Avoid free'ing our own pointer in memcache when memcachetrim attempts to reduce cache size bsc1179156. - Adjust smbcacls '--propagate-inheritance' feature to align with upstre...

Desktop Window Managers Privilege Escalation

The vulnerability of desktop window managers in Windows operating systems relates to the issue of operations going beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially crafted application...

Redis memtest_preserving_test Buffer Overflow DoS

The vulnerability of the memtestpreservingtest function in the memtest.c component of the Redis database management system is related to the issue where an operation is executed outside the buffer in memory when creating an emergency dump. Exploiting this vulnerability can allow a malicious actor...

Mozilla Firefox Use-After-Free

The vulnerability of the Mozilla Firefox browser is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

SUSE: Security Advisory (SUSE-SU-2021:0608-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2018:0122-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2016:1228-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...