29 matches found
ECHO-0BED-7F18-C574
Bulletin has no description...
ECHO-86E0-D033-FD17
Bulletin has no description...
ECHO-0C7D-8BF7-6495
Bulletin has no description...
ECHO-499C-4D4D-DFFA
Bulletin has no description...
ECHO-3210-1530-12EF
Bulletin has no description...
ECHO-B744-CD2D-C43A Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-49C7-4E0E-F2A6
Bulletin has no description...
ECHO-6A5C-AA96-1773
Bulletin has no description...
ECHO-3EC8-5247-877B
Bulletin has no description...
ECHO-89C6-C3E9-D8D2
Bulletin has no description...
ECHO-063C-9C61-C3D6
Bulletin has no description...
ECHO-EB35-96D5-2BC7
Bulletin has no description...
ECHO-6FA6-0A51-9517
Bulletin has no description...
ECHO-FD67-8AD6-639B
Bulletin has no description...
ECHO-B327-9A88-AF60
Bulletin has no description...
ECHO-F759-D499-AD5C DoS (bandwidth consumption) via a Range header specifying multiple copies of the same fragment over a TCP connection with a large window size. The severity is explicitly disputed by third parties (NVD carries the "disputed" tag) because the large TCP window size the attack relies on is not normally supported or configured by the server, and the same effect is achievable by simply downloading the file. Red Hat states it "does not consider this issue to be a security vulnerability". Debian classifies it as an unimportant issue. No code change required in the shipped 2.4.68 build. https://security-tracker.debian.org/tracker/CVE-2007-0086
Bulletin has no description...
ECHO-0BD8-3C77-95C2 Vulnerability is in libheif's image-sequence / ISOBMFF track parsing, which was added in v1.20.0. v1.19.8 — the version we ship — has no track parsing at all (no Box_stsc / Box_stts / Box_saiz / TrackBox / MovieBox), so the vulnerable code is not present.
Bulletin has no description...
ECHO-A687-A125-AE85
Bulletin has no description...