GLSA-202407-16 : GNU Coreutils: Buffer Overflow Vulnerability

The remote host is affected by the vulnerability described in GLSA-202407-16 GNU Coreutils: Buffer Overflow Vulnerability A vulnerability has been discovered in the Coreutils split program that can lead to a heap buffer overflow and possibly arbitrary code execution. Tenable has extracted the...

GLSA-202407-04 : Pixman: Heap Buffer Overflow

The remote host is affected by the vulnerability described in GLSA-202407-04 Pixman: Heap Buffer Overflow A vulnerability has been discovered in Pixman. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly from the Gentoo...

GLSA-202407-07 : cpio: Arbitrary Code Execution

The remote host is affected by the vulnerability described in GLSA-202407-07 cpio: Arbitrary Code Execution Multiple vulnerabilities have been discovered in cpio. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly from th...

GLSA-202407-05 : SSSD: Command Injection

The remote host is affected by the vulnerability described in GLSA-202407-05 SSSD: Command Injection A vulnerability has been discovered in SSSD. Please review the CVE identifier referenced below for details. Tenable has extracted the preceding description block directly from the Gentoo Linux...

GLSA-202407-01 : Zsh: Prompt Expansion Vulnerability

The remote host is affected by the vulnerability described in GLSA-202407-01 Zsh: Prompt Expansion Vulnerability Multiple vulnerabilities have been discovered in Zsh. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly fro...

GLSA-202406-06 : GStreamer, GStreamer Plugins: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202406-06 GStreamer, GStreamer Plugins: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in GStreamer, GStreamer Plugins. Please review the CVE identifiers referenced below for details. Tenable has extracted...

GLSA-202406-04 : LZ4: Memory Corruption

The remote host is affected by the vulnerability described in GLSA-202406-04 LZ4: Memory Corruption An attacker who submits a crafted file to an application linked with lz4 may be able to trigger an integer overflow, leading to calling of memmove on a negative size argument, causing an...

GLSA-202405-09 : MediaInfo, MediaInfoLib: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202405-09 MediaInfo, MediaInfoLib: Multiple Vulnerabilities Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. @NOAGENT...

GLSA-202402-32 : btrbk: Remote Code Execution

The remote host is affected by the vulnerability described in GLSA-202402-32 btrbk: Remote Code Execution - Btrbk before 0.31.2 allows command execution because of the mishandling of remote hosts filtering SSH commands using sshfilterbtrbk.sh in authorizedkeys. CVE-2021-38173 Note that Nessus has...

GLSA-202402-30 : Glances: Arbitrary Code Execution

The remote host is affected by the vulnerability described in GLSA-202402-30 Glances: Arbitrary Code Execution Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. @NOAGENT@ The descriptiv...

GLSA-202402-27 : Glade: Denial of Service

The remote host is affected by the vulnerability described in GLSA-202402-27 Glade: Denial of Service - plugins/gtk+/glade-gtk-box.c in GNOME Glade before 3.38.1 and 3.39.x before 3.40.0 mishandles widget rebuilding for GladeGtkBox, leading to a denial of service application crash. CVE-2020-36774...

GLSA-202401-20 : QPDF: Buffer Overflow

The remote host is affected by the vulnerability described in GLSA-202401-20 QPDF: Buffer Overflow - QPDF 9.x through 9.1.1 and 10.x through 10.0.4 has a heap-based buffer overflow in PlASCII85Decoder::write called from PlAESPDF::flush and PlAESPDF::finish when a certain downstream write fails...

GLSA-202401-01 : Joblib: Arbitrary Code Execution

The remote host is affected by the vulnerability described in GLSA-202401-01 Joblib: Arbitrary Code Execution - The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the predispatch flag in Parallel class due to the eval statement. CVE-2022-21797 Note that Ness...

GLSA-202312-10 : Ceph: Root Privilege Escalation

The remote host is affected by the vulnerability described in GLSA-202312-10 Ceph: Root Privilege Escalation - A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a local attacker to escalate privileges to root in the form of a crash dump, and dump privileged information...

GLSA-202312-08 : LibRaw: Heap Buffer Overflow

The remote host is affected by the vulnerability described in GLSA-202312-08 LibRaw: Heap Buffer Overflow - A flaw was found in LibRaw. A heap-buffer-overflow in raw2imageex caused by a maliciously crafted file may lead to an application crash. CVE-2023-1729 Note that Nessus has not tested for th...

GLSA-202311-07 : AIDE: Root Privilege Escalation

The remote host is affected by the vulnerability described in GLSA-202311-07 AIDE: Root Privilege Escalation - AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata such as XFS extended attributes or tmpfs ACLs, because of a heap-based buffer overflow...

GLSA-202310-20 : rxvt-unicode: Arbitrary Code Execution

The remote host is affected by the vulnerability described in GLSA-202310-20 rxvt-unicode: Arbitrary Code Execution - The rxvt-unicode package is vulnerable to a remote code execution, in the Perl background extension, when an attacker can control the data written to the user's terminal and certa...

GLSA-202310-11 : less: Denial of service

The remote host is affected by the vulnerability described in GLSA-202310-11 less: Denial of service - In GNU Less before 609, crafted data can result in less -R not filtering ANSI escape sequences sent to the terminal. CVE-2022-46663 Note that Nessus has not tested for this issue but has instead...

GLSA-202310-05 : dav1d: Denial of Service

The remote host is affected by the vulnerability described in GLSA-202310-05 dav1d: Denial of Service - VideoLAN dav1d before 1.2.0 has a threadtask.c race condition that can lead to an application crash, related to dav1ddecodeframeexit. CVE-2023-32570 Note that Nessus has not tested for this iss...

GLSA-202310-08 : man-db: privilege escalation

The remote host is affected by the vulnerability described in GLSA-202310-08 man-db: privilege escalation - man-db before 2.8.5 on Gentoo allows local users with access to the man user account to gain root privileges because /usr/bin/mandb is executed by root but not owned by root. Also, the owne...