EulerOS Virtualization 2.9.0 : rpm (EulerOS-SA-2021-2197)

According to the versions of the rpm packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the RPM package in the read functionality. This flaw allows an attacker who can convince a victim to install a...

The vulnerability of the library/glob.html package in Python programs, which allows a perpetrator to compromise the integrity of protected information

The vulnerability of the library/glob.html package in Python is related to incorrect calculations. Exploiting this vulnerability could allow a remote attacker to compromise the integrity of the protected information...

The vulnerability of QEMU’s emulation software lies in its ability to write beyond the buffer boundaries, allowing attackers to compromise data integrity and cause service failures.

The vulnerability of QEMU’s emulation software-related hardware lies in the execution of operations that exceed the permissible buffer data size. Exploiting this vulnerability allows an attacker to compromise data integrity and cause system failures...

The vulnerability of the WriteSGIImage function in the console-based image editing tool ImageMagick, related to writing beyond buffer boundaries, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WriteSGIImage function in the console-based image editing tool ImageMagick is related to the execution of operations that exceed the allowable buffer data size. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its...

The vulnerability in the upload.php PHP form creator of Machform allows a hacker to compromise the confidentiality and integrity of the protected information.

The vulnerability in the upload.php PHP form builder of Machform exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the protected information...

EulerOS Virtualization 2.9.1 : cifs-utils (EulerOS-SA-2021-2191)

According to the version of the cifs-utils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file system from within a container can...

Huawei EulerOS: Security Advisory for cifs-utils (EulerOS-SA-2021-2207)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

netty: Request smuggling via content-length header

A flaw was found in Netty. There is an issue where the content-length header is not validated correctly if the request uses a single Http2HeaderFrame with the endstream set to true. This flaw leads to request smuggling if the request is proxied to a remote peer and translated to HTTP/1.1. The...

XStream: remote command execution attack by manipulating the processed input stream

A flaw was found in XStream. By manipulating the processed input stream, a remote attacker may be able to obtain sufficient rights to execute commands. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

CVE-2021-32625

A flaw was found in Redis. An integer overflow could be exploited using the STRALGO LCS command to corrupt the heap and potentially result with remote code execution. This is a result of an incomplete fix by CVE-2021-29477. The highest threat from this vulnerability is to data confidentiality and...

Critical Flaws Reported in Philips Vue PACS Medical Imaging Systems

Multiple security vulnerabilities have been disclosed in Philips Clinical Collaboration Platform Portal aka Vue PACS, some of which could be exploited by an adversary to take control of an affected system. "Successful exploitation of these vulnerabilities could allow an unauthorized person or...

Updated grub2 packages fix security vulnerabilities

All CVEs below are against the SecureBoot functionality in GRUB2. We do not ship this as part of Mageia. Therefore, we ship an updated grub2 package to 2.06 for Mageia 8 fixing upstream bugfixes. A flaw was found in grub2, prior to version 2.06. An attacker may use the GRUB 2 flaw to hijack and...

The vulnerability of the raptor_xml_writer_start_element_common component in the Raptor library, related to writing beyond buffer boundaries, allows attackers to compromise data integrity or cause service failures.

The vulnerability of the raptorxmlwriterstartelementcommon component in the Raptor library is related to an incorrect definition of the maximum number of announcements allowed. Exploiting this vulnerability allows a remote attacker to compromise data integrity or cause service failures...

The vulnerability of the software for interacting with servers via CURL is related to errors in the certificate validation process, which allows attackers to compromise data integrity.

The vulnerability of the software for interacting with servers via CURL is related to errors in the certificate validation process. Exploiting this vulnerability allows a malicious actor to manipulate data integrity through OCSP responses...

The vulnerability of the OpenJPEG library for image encoding and decoding, related to buffer overflows, allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the OpenJPEG library for image encoding and decoding is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker who operates remotely to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the CUPS printing system lies in the copying of buffers without checking the size of the input data, which allows an attacker to compromise the integrity of the data.

The vulnerability of the CUPS printing system lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor to compromise the integrity of data...

kernel: use-after-free in net/bluetooth/hci_event.c when destroying an hci_chan

A use-after-free flaw was found in hcisendacl in the bluetooth host controller interface HCI in Linux kernel, where a local attacker with an access rights could cause a denial of service problem on the system The issue results from the object hchan, freed in hcidisconnloglinkcompleteevt, yet stil...

The vulnerability of the ReadXPMImage function in the coders/xpm.c component of the console-based image editing tool ImageMagick allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ReadXPMImage function in the coders/xpm.c component of the console-based image editing tool ImageMagick involves allowing the operation to be within acceptable buffer data limits. Exploiting this vulnerability allows a remote attacker to gain access to confidential data,...

PT-2021-7706 · Dnsmasq +2 · Dnsmasq +2

Name of the Vulnerable Software and Affected Versions: Dnsmasq affected versions not specified Description: The issue is related to a buffer overflow in the resize packet function of the fuzz rfc1035.c component of the Dnsmasq DNS server. Exploitation of this issue may allow a remote attacker to...

PT-2021-7710 · Dnsmasq +2 · Dnsmasq +2

Name of the Vulnerable Software and Affected Versions: Dnsmasq affected versions not specified Description: The issue is related to a buffer overflow in the print mac function of the Dnsmasq DNS server. Exploitation of this issue may allow a remote attacker to access confidential data, compromise...