The vulnerability of the XvdiSelectVideoNotify function in the X Window System X.Org Server, and the Wayland protocol for X.Org XWayland, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the XvdiSelectVideoNotify function in the X Window System X.Org Server, and the Wayland protocol for X.Org, is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cau...

The vulnerability of the server software HAProxy, related to deficiencies in HTTP request processing, allows attackers to compromise data integrity.

The vulnerability of the server software HAProxy is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to compromise data integrity from a remote location...

The vulnerability of the getaddrinfo function in the GNU C Library allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failure.

The vulnerability of the getaddrinfo function in the GNU C Library is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the Libxml2 library, related to the lack of measures taken to protect the structure of web pages, allows attackers to access confidential data and compromise its integrity.

The vulnerability of the Libxml2 library is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise its integrity...

The vulnerability of the Shadow account management tool is related to insufficient checking of the status of shared resources. This allows a perpetrator to compromise data integrity and also cause service interruptions.

The vulnerability of the Shadow account management tool is related to insufficient checks on the status of the shared resource. Exploiting this vulnerability can allow an attacker to compromise data integrity and cause service failures...

The vulnerability in the cr parser_parse_any_core function of the cr-parser.c library, which is used for working with cascade CSS2 Libcroco tables, allows a attacker to compromise the integrity of data and also cause service failures.

The vulnerability of the cr parserparseanycore function in the cr-parser.c library, which is used for working with cascading CSS2 Libcroco tables, is related to an uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor to compromise data integrity and cause service...

The vulnerability of the goption_group_addEntries() function in the Glib library allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the goptiongroupaddEntries function in the Glib library is related to integer overflow. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its integrity, and even cause service failures...

The vulnerability of the httplib2 component from the Python-httplib2 library allows attackers to compromise data integrity.

The vulnerability of the httplib2 component in the Python-httplib2 library is related to the lack of measures taken to neutralize CRLF sequences. Exploiting this vulnerability can allow an attacker to compromise data integrity...

The vulnerability of the notification mechanism of the operating system “Avrora”, which allows a perpetrator to increase their privileges

The vulnerability of the “Avora” operating system’s notification mechanism is related to deficiencies in permission control for applications that send notifications. Exploiting this vulnerability allows attackers to execute privileged requests to system components, which can lead to violations of...

The vulnerability of Intel Microcode processors lies in the possibility of unauthorized errors causing malfunctions in backup equipment. This allows attackers to gain access to confidential data, compromise its integrity, and even cause service failures.

The vulnerability of Intel Microcode processors lies in the possibility that backup equipment may malfunction due to unauthorized introduction of errors. Exploiting this vulnerability can allow a perpetrator to gain access to confidential data, compromise its integrity, and even cause service...

The vulnerability of the LZ4 data compression algorithm, which allows unauthorized access to confidential data by writing beyond the buffer boundaries, thereby enabling attackers to compromise the integrity of sensitive information and cause service interruptions.

The vulnerability of the lossless LZ4 data compression algorithm is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service interruptions...

The vulnerability of the sssctl command in the access control service allows attackers to gain access to sensitive data, compromise its integrity, and cause service failures.

The vulnerability of the sssctl command in the access control service, which manages access to remote directories and the SSSD authentication mechanism, is related to the lack of measures for input data cleansing. Exploiting this vulnerability could allow a malicious actor to gain access to...

The vulnerability of the WPE WebKit and WebKitGTK web page rendering modules, related to insufficient input data validation, allows attackers to compromise data integrity.

The vulnerability of the WPE WebKit and WebKitGTK page rendering modules is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to compromise data integrity...

The vulnerability of the PDF component in the Google Chrome web browser allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the PDF component in the Google Chrome web browser relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions through a specially created PD...

The vulnerability of the yaml.load() component in the YAML parsing library for Python, PyYAML, allows a attacker to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the yaml.load component in the YAML parsing library for Python, PyYAML, is related to the restoration of unreliable data in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Advisory ROSA-SA-2023-2288

software: libreoffice 7.6.2 OS: ROSA-CHROME packageevrstring: libreoffice-7.6.2-4.src.rpm CVE-ID: CVE-2023-1183 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: An error has been detected in the Libreoffice package. An attacker could create an odb containing a "database/script" file using the SCRIPT...

Rocky Linux 8 : rpm (RLSA-2022:0368)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:0368 advisory. - There is a flaw in RPM's signature functionality. OpenPGP subkeys are associated with a primary key via a binding signature. RPM does not check the binding...

flaw in the RPM package in the read functionality

A flaw was found in the RPM package in the read functionality. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package or compromise an RPM repository, to cause RPM database corruption. The highest threat from this vulnerability is to data integrity...

Oracle Linux 7 : dnsmasq (ELSA-2023-12971)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12971 advisory. - Fixed heap-based buffer overflow in sortrrset CVE-2020-25681 Orabug: 35904921 Tenable has extracted the preceding description block directly from th...

Rocky Linux 8 : dnsmasq (RLSA-2021:4153)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:4153 advisory. - A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while...