71 matches found
SUSE-SU-2019:1389-1 Security update for cronie
This update for cronie fixes the following issues: Security issues fixed: - CVE-2019-9704: Fixed an insufficient check in the return value of calloc which could allow a local user to create Denial of Service by crashing the daemon bsc1128937. - CVE-2019-9705: Fixed an implementation vulnerability...
MGASA-2019-0157 Updated cronie packages fix security vulnerabilities
Updated cronie packages fix security vulnerabilities: Cronie before 1.5.3 allows local users to cause a denial of service daemon crash via a large crontab file because the calloc return value is not checked CVE-2019-9704. Cronie before 1.5.3 allows local users to cause a denial of service memory...
Updated cronie packages fix security vulnerabilities
Updated cronie packages fix security vulnerabilities: Cronie before 1.5.3 allows local users to cause a denial of service daemon crash via a large crontab file because the calloc return value is not checked CVE-2019-9704. Cronie before 1.5.3 allows local users to cause a denial of service memory...
Fedora Update for cronie FEDORA-2019-7104a00054
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora 30 : cronie (2019-676e120269)
Minor security and bugfix update to version 1.5.4. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues....
[SECURITY] Fedora 30 Update: cronie-1.5.4-1.fc30
Cronie contains the standard UNIX daemon crond that runs specified programs at scheduled times and related tools. It is a fork of the original vixie-cron and has security and configuration enhancements like the ability to use pam and SELinux...
[SECURITY] Fedora 29 Update: cronie-1.5.4-1.fc29
Cronie contains the standard UNIX daemon crond that runs specified programs at scheduled times and related tools. It is a fork of the original vixie-cron and has security and configuration enhancements like the ability to use pam and SELinux...
Fedora 29 : cronie (2019-7104a00054)
Minor security and bugfix update to version 1.5.4. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues....
openSUSE Security Update : cron (openSUSE-SU-2011:0452-1)
Cronie does not drop all privileges before calling sendmail. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update cron-4495. The text description of this plugin is C SUSE LLC...
openSUSE Security Update : cronie (openSUSE-SU-2013:0205-1)
Fix Bug 786096 - cron: does not close file descriptors before invocation of commands - bug-786096cronie-fdleak.diff CVE-2012-6097 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...
Mandriva Linux Security Advisory : cronie (MDVSA-2013:033)
Updated cronie package fixes the following issue : It was reported that cronie 1.4.8 would leak certain file descriptors. On systems where /etc/crontab is not world-readable this could be an information disclosure concern CVE-2012-6097. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
CVE-2012-6097
File descriptor leak in cronie 1.4.8, when running in certain environments, might allow local users to read restricted files, as demonstrated by reading /etc/crontab...
Design/Logic Flaw
File descriptor leak in cronie 1.4.8, when running in certain environments, might allow local users to read restricted files, as demonstrated by reading /etc/crontab...
CVE-2012-6097
File descriptor leak in cronie 1.4.8, when running in certain environments, might allow local users to read restricted files, as demonstrated by reading /etc/crontab...
CVE-2012-6097
CVE-2012-6097 concerns a file descriptor leak in cronie 1.4.8 that, in certain environments, could let local users read restricted files (demonstrated via /etc/crontab). The issue is caused by cronie leaking FDs, enabling information disclosure. Affected product is cronie 1.4.8; impact is local d...
cronie: Race condition by setting timestamp of user's crontab file, when editing the file
The editcmd function in crontab.c in 1 cronie before 1.4.4 and 2 Vixie cron vixie-cron allows local users to change the modification times of arbitrary files, and consequently cause a denial of service, via a symlink attack on a temporary file in the /tmp directory...
RHEL 5 : vixie-cron (RHSA-2012:0304)
The remote Redhat Enterprise Linux 5 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2012:0304 advisory. - vixie-cron, cronie: Race condition by setting timestamp of user's crontab file, when editing the file CVE-2010-0424 Note that Nessus has not tested...
Fedora 12 : cronie-1.4.3-4.fc12 (2010-2751)
CVE-2010-0424 vixie-cron, cronie: Race condition by setting timestamp of user's crontab file, when editing the file . Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and forma...
Fedora 11 : cronie-1.3-4.fc11 (2010-4300)
https://vulners.com/cve/CVE-2010-0424 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...
Fedora 13 : cronie-1.4.4-1.fc13 (2010-3642)
Bug 565809 - CVE-2010-0424 vixie-cron, cronie: Race condition by setting timestamp of user's crontab file, when editing the file Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...