Ubuntu 20.04 LTS / 22.04 LTS / 23.04 : Bind vulnerabilities (USN-6183-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6183-1 advisory. Shoham Danino, Anat Bremler-Barr, Yehuda Afek, and Yuval Shavitt discovered that Bind incorrectly handled the cache size limit. A...

PT-2023-6785 · Isc +12 · Bind 9 +12

Name of the Vulnerable Software and Affected Versions: BIND 9 versions 9.11.0 through 9.16.41 BIND 9 versions 9.18.0 through 9.18.15 BIND 9 versions 9.19.0 through 9.19.13 BIND 9 versions 9.11.3-S1 through 9.16.41-S1 BIND 9 versions 9.18.11-S1 through 9.18.15-S1 Description: The effectiveness of...

SUSE CVE-2021-26933

An issue was discovered in Xen 4.9 through 4.14.x. On Arm, a guest is allowed to control whether memory accesses are bypassing the cache. This means that Xen needs to ensure that all writes such as the ones during scrubbing have reached the memory before handing over the page to a guest...

The vulnerability of the software for implementing the hypertext environment MediaWiki allows a perpetrator to compromise the confidentiality of the protected information.

The vulnerability of the software for implementing the hypertext environment MediaWiki arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious individual to compromise the confidentiality of the protected information due to...

The vulnerability of Google Chrome browser allows a hacker to replace website URLs.

The vulnerability of the browser/browsingdata/browsingdataremover.cc component in Google Chrome relates to the removal of HPKP elements during cache cleaning. Exploiting this vulnerability could allow a malicious actor to replace websites with valid certificates from any authorized certification...