PT-2021-3423

Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader DC versions 2021.001.20150 and earlier Adobe Acrobat Reader DC versions 2020.001.30020 and earlier Adobe Acrobat Reader DC versions 2017.011.30194 and earlier Description The issue is related to an Out-of-bounds Write...

PT-2021-3424

Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader DC versions 2021.001.20150 and earlier Adobe Acrobat Reader DC versions 2020.001.30020 and earlier Adobe Acrobat Reader DC versions 2017.011.30194 and earlier Description The issue is related to a Use After Free...

PT-2021-6046

Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader DC versions 2021.001.20155 and earlier Adobe Acrobat Reader DC versions 2020.001.30025 and earlier Adobe Acrobat Reader DC versions 2017.011.30196 and earlier Description The issue is related to an Out-of-bounds Read...

PT-2021-3418

Name of the Vulnerable Software and Affected Versions Acrobat Reader DC versions 2021.001.20150 and earlier Acrobat Reader DC versions 2020.001.30020 and earlier Acrobat Reader DC versions 2017.011.30194 and earlier Description The issue is related to an out-of-bounds read vulnerability. An...

PT-2021-3435

Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader DC versions 2021.001.20150 and earlier Adobe Acrobat Reader DC versions 2020.001.30020 and earlier Adobe Acrobat Reader DC versions 2017.011.30194 and earlier Description The issue is related to a memory corruption...

PT-2021-3421

Name of the Vulnerable Software and Affected Versions Acrobat Reader DC versions 2021.001.20150 and earlier Acrobat Reader DC versions 2020.001.30020 and earlier Acrobat Reader DC versions 2017.011.30194 and earlier Description The issue is related to a use-after-free vulnerability that could all...

PT-2021-3422

Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader DC versions 2021.001.20150 and earlier Adobe Acrobat Reader DC versions 2020.001.30020 and earlier Adobe Acrobat Reader DC versions 2017.011.30194 and earlier Description The issue is caused by a heap-based buffer overflow...

A Ransomware Group Hit DC Police—Then Pivoted to Extortion

Warrantless searches, tracking troops, and more of the week’s top security news...

Hackers Threaten to Leak D.C. Police Informants' Info If Ransom Is Not Paid

The Metropolitan Police Department MPD of the District of Columbia has become the latest high-profile government agency to fall victim to a ransomware attack. The Babuk Locker gang claimed in a post on the dark web that they had compromised the DC Police's networks and stolen 250 GB of unencrypte...

Important: Red Hat Security Advisory: libldb security update

An update for libldb is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

grok:grk_decompress_fuzzer: Use-of-uninitialized-value in grk::N_AVX2::hwy_decompress_dc_shift_irrev

Project: https://github.com/GrokImageCompression/grok.git https://github.com/GrokImageCompression/grok-test-data.git Detailed Report: https://oss-fuzz.com/testcase?key=4845319075528704 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id...

RHEL 8 : libldb (RHSA-2021:1197)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:1197 advisory. The libldb packages provide an extensible library that implements an LDAP-like API to access remote LDAP servers, or use local TDB databases. Securit...

RHEL 8 : libldb (RHSA-2021:1213)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:1213 advisory. The libldb packages provide an extensible library that implements an LDAP-like API to access remote LDAP servers, or use local TDB databases. Securit...

Important: libldb security update

The libldb packages provide an extensible library that implements an LDAP-like API to access remote LDAP servers, or use local TDB databases. Security Fixes: samba: Out of bounds read in AD DC LDAP server CVE-2021-20277 For more details about the security issues, including the impact, a CVSS scor...

Oracle Linux 8 : libldb (ELSA-2021-1197)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-1197 advisory. 2.1.3-3 - resolves: rhbz1941514 - Fix CVE-2021-20277 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Not...

CVE-2021-28546

Acrobat Reader DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and 2017.011.30188 and earlier are missing support for an integrity check. An unauthenticated attacker could leverage this vulnerability to modify content in a certified PDF without invalidating the...

CVE-2021-28545

Acrobat Reader DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and 2017.011.30188 and earlier are missing support for an integrity check. An unauthenticated attacker would have the ability to completely manipulate data in a certified PDF without invalidating the origin...

Design/Logic Flaw

Acrobat Reader DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and 2017.011.30188 and earlier are missing support for an integrity check. An unauthenticated attacker would have the ability to completely manipulate data in a certified PDF without invalidating the origin...

CVE-2021-28546 Acrobat Reader DC Missing Support for Integrity Check

Acrobat Reader DC versions versions 2020.013.20074 and earlier, 2020.001.30018 and earlier and 2017.011.30188 and earlier are missing support for an integrity check. An unauthenticated attacker could leverage this vulnerability to modify content in a certified PDF without invalidating the...

CVE-2021-28546

CVE-2021-28546 affects Adobe Acrobat Reader DC. Affected builds (e.g., 2020.013.20074 and earlier; 2020.001.30018 and earlier; 2017.011.30188 and earlier) lack support for an integrity check, allowing an unauthenticated attacker to modify content in a certified PDF without invalidating the certif...