USN-5243-2 aide vulnerability

USN-5243-1 fixed a vulnerability in aide. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: David Bouman discovered that AIDE incorrectly handled base64 operations. A local attacker could use this issue to cause AIDE to crash,...

CVE-2021-45417

AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata such as XFS extended attributes or tmpfs ACLs, because of a heap-based buffer overflow...

Aide 缓冲区错误漏洞

Aide is a tool for monitoring file system changes. It can be used to detect unauthorized monitored files and directories. Aide has a buffer error vulnerability that stems from a heap-based buffer overflow vulnerability in AIDE's base64 function. An attacker could crash the program and possibly...

kernel: xfs: raw block device data leak in XFS_IOC_ALLOCSP IOCTL

A data leak flaw was found in the way XFSIOCALLOCSP IOCTL in the XFS filesystem allowed for size increase of files with unaligned size. A local attacker could use this flaw to leak data on the XFS filesystem otherwise not accessible to them...

KB5010799: Out-of-band update for Windows Server 2008 SP2: January 17, 2022

KB5010799: Out-of-band update for Windows Server 2008 SP2: January 17, 2022 Summary This update resolves the following issues: Active Directory attributes are not written correctly during a Lightweight Directory Access Protocol LDAP modify operation with multiple specific attribute changes. Windo...

CVE-2021-44234

SAP Business One - version 10.0, extended log stores information that can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information...

CVE-2021-44234

SAP Business One - version 10.0, extended log stores information that can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information...

Information disclosure

SAP Business One - version 10.0, extended log stores information that can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information...

CVE-2021-44234

The CVE relates to SAP Business One (v10.0) where the extended log stores information that can be of a sensitive nature, potentially exposing sensitive user information. Connected sources corroborate an information-disclosure issue affecting SAP Business One, with references indicating the vulner...

UBUNTU-CVE-2022-22739

Malicious websites could have tricked users into accepting launching a program to handle an external URL protocol. This vulnerability affects Firefox ESR 91.5, Firefox 96, and Thunderbird 91.5...

IBM i 安全漏洞

IBM i is a set of operating systems from IBM USA running in IBM Power Systems and IBM PureSystems. IBM i 7.1, 7.2, 7.3 and 7.4 Extended Dynamic Remote SQL server EDRSQL has a security vulnerability that could be exploited by an attacker to send specially designed requests to a remotely...

UBUNTU-CVE-2022-22742

When inserting text while in edit mode, some characters might have lead to out-of-bounds memory access causing a potentially exploitable crash. This vulnerability affects Firefox ESR 91.5, Firefox 96, and Thunderbird 91.5...

Mozilla: Memory safety bugs fixed in Firefox 96 and Firefox ESR 91.5

The Mozilla Foundation Security Advisory describes this flaw as: Mozilla developers Calixte Denizet, Kershaw Chang, Christian Holler, Jason Kratzer, Gabriele Svelto, Tyson Smith, Simon Giesecke, and Steve Fink reported memory safety bugs present in Firefox 95 and Firefox ESR 91.4. Some of these...

Mozilla: Memory safety bugs fixed in Firefox 96 and Firefox ESR 91.5

The Mozilla Foundation Security Advisory describes this flaw as: Mozilla developers Calixte Denizet, Kershaw Chang, Christian Holler, Jason Kratzer, Gabriele Svelto, Tyson Smith, Simon Giesecke, and Steve Fink reported memory safety bugs present in Firefox 95 and Firefox ESR 91.4. Some of these...

January 11, 2022—KB5009601 (Security-only update)

None None...

OESA-2022-1484 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel through 5.15.2, mwifiexusbrecv in drivers/net/wireless/marvell/mwifiex/usb.c allows an attacker who can connect a crafted USB device to cause a denial of service skboverpanic.CVE-2021-43976 In bpfskbchangehead...

SUSE-SU-2022:0030-1 Security update for net-snmp

This update for net-snmp fixes the following issues: - CVE-2020-15862: Make extended MIB read-only bsc1174961...

Security Bulletin: Vulnerability in Node.js affects IBM Event Streams (CVE-2021-22959)

Summary There is a vulnerability in the Node.js open source runtime. The runtime is used by the IBM Event Streams. The CVE has been addressed. Vulnerability Details CVEID: CVE-2021-22959 DESCRIPTION: Node.js is vulnerable to HTTP request smuggling, caused by an error related to a space in headers...

PT-2025-53933

Name of the Vulnerable Software and Affected Versions linux affected versions not specified Description The Linux kernel contains a flaw related to the ext2 filesystem. Insufficient sanity checks for group and filesystem size could allow mounting crafted filesystems with extremely large group...

[SECURITY] [DLA 2863-1] firefox-esr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2863-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort December 29, 2021 https://wiki.debian.org/LTS -...