CVE-2020-22885: Buffer Copy without Checking Size of Input

Buffer overflow vulnerability in mujs before 1.0.8 due to recursion in the GC scanning phase, allows remote attackers to cause a denial of service...

PT-2021-28335

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-use-after-free READ 4 crash has been reported. The crash state includes zend gc addref, ZEND ASSIGN OP SPEC VAR TMPVAR HANDLER, and fuzzer execute...

UVI-2021-1000789 neighbour: allow NUD_NOARP entries to be forced GCed

neighbour: allow NUDNOARP entries to be forced GCed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.43 by commit...

PT-2021-29289

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.10 Description The issue allows NUD NOARP entries to be forced GCed. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.12.10, update t...

PT-2021-25232

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.125 Description The issue allows NUD NOARP entries to be forced GCed. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.4.125, update t...

SUSE: Security Advisory (SUSE-SU-2021:0275-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2016:3057-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2021-28213

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free READ 4 crash type. The crash state involves several functions: zend gc delref, zval delref p, and zval ptr...

openSUSE: Security Advisory for java-11-openjdk (openSUSE-SU-2021:0269-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2021-28177

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash, specifically a segmentation fault on an unknown address. The crash state involves several function calls, including GC...

openSUSE Security Update : java-11-openjdk (openSUSE-2021-269)

This update for java-11-openjdk fixes the following issues : java-11-openjdk was upgraded to include January 2021 CPU bsc1181239 - Enable Sheandoah GC for x8664 jscECO-3171 This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc. The descriptive text a...

Security update for java-11-openjdk (important)

openSUSE Security Update: Security update for java-11-openjdk Announcement ID: openSUSE-SU-2021:0269-1 Rating: important References: 1181239 Affected Products: openSUSE Leap 15.2 An update that contains security fixes can now be installed. Description: This update for java-11-openjdk fixes the...

PT-2021-27326

Name of the Vulnerable Software and Affected Versions: java-11-openjdk affected versions not specified Description: The issue is related to an update for java-11-openjdk, which includes the January 2021 CPU. This update enables the Sheandoah GC for x86 64. Recommendations: At the moment, there is...

SUSE SLED15 / SLES15 Security Update : java-11-openjdk (SUSE-SU-2021:0352-1)

This update for java-11-openjdk fixes the following issues : java-11-openjdk was upgraded to include January 2021 CPU bsc1181239 Enable Sheandoah GC for x8664 jscECO-3171 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

PT-2021-28404

Name of the Vulnerable Software and Affected Versions: java-11-openjdk versions prior to the version that includes January 2021 CPU Description: The issue is related to an update for java-11-openjdk that includes the January 2021 CPU. The update enables Sheandoah GC for x86 64. Recommendations: A...

SUSE SLES12 Security Update : java-11-openjdk (SUSE-SU-2021:0275-1)

This update for java-11-openjdk fixes the following issues : java-11-openjdk was upgraded to include January 2021 CPU bsc1181239 Enable Sheandoah GC for x8664 jscECO-3171 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE-SU-2021:0275-1 Security update for java-11-openjdk

This update for java-11-openjdk fixes the following issues: java-11-openjdk was upgraded to include January 2021 CPU bsc1181239 - Enable Sheandoah GC for x8664 jscECO-3171...

PT-2021-28403

Name of the Vulnerable Software and Affected Versions: java-11-openjdk affected versions not specified Description: The issue is related to an update for java-11-openjdk, which includes the January 2021 CPU. This update enables the Sheandoah GC for x86 64. Recommendations: At the moment, there is...

Oracle Linux 7 : thunderbird (ELSA-2021-0297)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-0297 advisory. 78.7.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 78.7.0-1 - Update to 78.7.0 Tenable has extracted...

Oracle Linux 7 : firefox (ELSA-2021-0290)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-0290 advisory. 78.7.0-2.0.1 - Remove upstream references Orabug: 30143292 - Update distribution for Oracle Linux Orabug: 30143292 - Add firefox-oracle-default-prefs.j...