Mozilla: Race condition when reading from disk while verifying signatures

Signatures are written to disk before and read during verification, which might be subject to a race condition when a malicious local process or user is replacing the file. This vulnerability affects Thunderbird 78.10...

Mozilla: Race condition when reading from disk while verifying signatures

Signatures are written to disk before and read during verification, which might be subject to a race condition when a malicious local process or user is replacing the file. This vulnerability affects Thunderbird 78.10...

Mozilla: Race condition when reading from disk while verifying signatures

Signatures are written to disk before and read during verification, which might be subject to a race condition when a malicious local process or user is replacing the file. This vulnerability affects Thunderbird 78.10...

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

CVE-2021-0238

When a MX Series is configured as a Broadband Network Gateway BNG based on Layer 2 Tunneling Protocol L2TP, executing certain CLI command may cause the system to run out of disk space, excessive disk usage may cause other complications. An administrator can use the following CLI command to monito...

CVE-2021-0238

When a MX Series is configured as a Broadband Network Gateway BNG based on Layer 2 Tunneling Protocol L2TP, executing certain CLI command may cause the system to run out of disk space, excessive disk usage may cause other complications. An administrator can use the following CLI command to monito...

Command injection

When a MX Series is configured as a Broadband Network Gateway BNG based on Layer 2 Tunneling Protocol L2TP, executing certain CLI command may cause the system to run out of disk space, excessive disk usage may cause other complications. An administrator can use the following CLI command to monito...

CVE-2021-0238

CVE-2021-0238 affects Junos OS on MX Series: repeatedly executing a CLI command may exhaust disk space, causing partial availability impact. Vulnerable versions include MX Series 17.3R1 and newer, up to but not including 17.4R3-S5, then 18.1–20.4 with various sub-versions listed; the issue does n...

CVE-2021-0238 Junos OS: MX Series: Executing CLI command repetitively may cause the system to run out of disk space

When a MX Series is configured as a Broadband Network Gateway BNG based on Layer 2 Tunneling Protocol L2TP, executing certain CLI command may cause the system to run out of disk space, excessive disk usage may cause other complications. An administrator can use the following CLI command to monito...

UBUNTU-CVE-2021-29948

Signatures are written to disk before and read during verification, which might be subject to a race condition when a malicious local process or user is replacing the file. This vulnerability affects Thunderbird 78.10...

QEMU Buffer Overflow Vulnerability (CNVD-2021-41095)

QEMU is a suite of analog processor software from the French individual developer Fabrice Bellard. The software is fast and cross-platform. QEMU suffers from a buffer overflow vulnerability that stems from a heap buffer overflow found in the floppy disk emulator, which can be exploited by an...

IBM i Resource Management Error Vulnerability

IBM i is a set of operating systems from IBM in the United States that run on IBM Power Systems and IBM PureSystems. A security vulnerability exists in IBM i SMTP, which can be exploited by an attacker to consume network bandwidth and disk space that may not be necessary and send spam...

CVE-2021-20501

IBM i 7.1, 7.2, 7.3, and 7.4 SMTP allows a network attacker to send emails to non-existent local-domain recipients to the SMTP server, caused by using a non-default configuration. An attacker could exploit this vulnerability to consume unnecessary network bandwidth and disk space, and allow remot...

IBM i 资源管理错误漏洞

IBM i is a set of operating systems from IBM in the United States that run on IBM Power Systems and IBM PureSystems. A security vulnerability exists in IBM i SMTP, which can be exploited by an attacker to consume network bandwidth and disk space that may not be necessary and send spam...

CVE-2021-3507

A heap buffer overflow was found in the floppy disk emulator of QEMU. It could occur in fdctrltransferhandler in hw/block/fdc.c while processing DMA read data transfers from the floppy drive to the guest system. A privileged guest user could use this flaw to crash the QEMU process on the host...

QEMU 缓冲区错误漏洞

QEMU is a suite of analog processor software from the French individual developer Fabrice Bellard. The software is fast and cross-platform. QEMU suffers from a buffer overflow vulnerability that stems from a heap buffer overflow found in the floppy disk emulator, which can be exploited by an...

SUSE: Security Advisory (SUSE-SU-2020:1842-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2021-7719

Name of the Vulnerable Software and Affected Versions QEMU versions up to 6.0.0 Description A heap buffer overflow was found in the floppy disk emulator of QEMU. It could occur in fdctrl transfer handler in hw/block/fdc.c while processing DMA read data transfers from the floppy drive to the guest...

Mozilla Thunderbird 竞争条件问题漏洞

Mozilla Thunderbird is the United States Mozilla Foundation's set of independent from the Mozilla Application Suite e-mail client software. The program supports IMAP, POP mail protocols and HTML mail format. A security bypass vulnerability exists in Mozilla Thunderbird, which can be exploited by...

GHSA-PW4V-GR34-2553 Sydent DoS (via resource exhaustion) due to improper input validation

Impact Missing input validation of some parameters on the endpoints used to confirm third-party identifiers could cause excessive use of disk space and memory leading to resource exhaustion. Patches Fixed by 3175fd3. For more information If you have any questions or comments about this advisory,...