EUVD-2017-5986

Malware in sbrugna...

GLSA-202409-12 : pypy, pypy3: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202409-12 pypy, pypy3: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in pypy. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly...

GLSA-202408-31 : protobuf, protobuf-python: Denial of Service

The remote host is affected by the vulnerability described in GLSA-202408-31 protobuf, protobuf-python: Denial of Service A vulnerability has been discovered in protobuf and protobuf-python. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding...

GLSA-202107-19 : Jinja: Denial of service

The remote host is affected by the vulnerability described in GLSA-202107-19 Jinja: Denial of service The urlize filter in Jinja utilized an inefficient regular expression that could be exploited to consume excess CPU. Impact : An attacker could cause a Denial of Service condition via crafted inp...

GLSA-202107-36 : urllib3: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202107-36 urllib3: Multiple vulnerabilities Multiple vulnerabilities have been discovered in urllib3. Please review the CVE identifiers referenced below for details. Impact : An attacker could cause a possible Denial of Service...

CVE-2017-14483

CVE-2017-14483 affects the Gentoo dev-python/flower package prior to 0.9.1-r1. The issue arises in flower.initd where the PID file is created with ownership by a non-root account. This can allow local users to terminate arbitrary processes by exploiting access to that non-root account to modify t...

CVE-2017-14483: Concurrent Execution using Shared Resource with Improper Synchronization

flower.initd in the Gentoo dev-python/flower package before 0.9.1-r1 for Celery Flower sets PID file ownership to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root script executes a...

Gentoo Security Advisory GLSA 200505-14 (Cheetah)

The remote host is missing updates announced in advisory GLSA 200505-14. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...