GLSA-202107-20 : Redis: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202107-20 Redis: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Redis. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

GLSA-202107-01 : corosync: Denial of service

The remote host is affected by the vulnerability described in GLSA-202107-01 corosync: Denial of service It was discovered that corosync allowed an unauthenticated user to cause a Denial of Service by application crash. Impact : A remote attacker could send a malicious crafted packet, possibly...

GLSA-202107-10 : TCG TPM2 Software Stack: Information disclosure

The remote host is affected by the vulnerability described in GLSA-202107-10 TCG TPM2 Software Stack: Information disclosure TCG TPM2 Software Stack did not appropriately apply FAPI policies to protect data encrypted with the trusted platform module. Impact : Data encrypted using TCG TPM2 Softwar...

GLSA-202105-34 : Bash: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-202105-34 Bash: Privilege escalation It was discovered that Bash incorrectly dropped privileges by setting its effective UID to its real UID. Impact : A local attacker could possibly escalate privileges. Workaround : There is no...

GLSA-202107-55 : SDL 2: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202107-55 SDL 2: Multiple vulnerabilities Multiple vulnerabilities have been discovered in SDL 2. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

GLSA-202104-09 : Mozilla Thunderbird: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202104-09 Mozilla Thunderbird: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Mozilla Thunderbird. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CV...

GLSA-202104-02 : X.Org X Server: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-202104-02 X.Org X Server: Privilege escalation It was discovered that X.Org X Server did not sufficiently check the length of the XInput extensions ChangeFeedbackControl request. Impact : An authorized attacker could possibly...

GLSA-202103-04 : SQLite: Remote code execution

The remote host is affected by the vulnerability described in GLSA-202103-04 SQLite: Remote code execution It was discovered that SQLite incorrectly handled certain sub-queries. Impact : A remote attacker could possibly execute arbitrary code with the privileges of the process, or cause a Denial ...

GLSA-202101-38 : NSD: Symbolic link traversal

The remote host is affected by the vulnerability described in GLSA-202101-38 NSD: Symbolic link traversal A local vulnerability was discovered that would allow for a local symlink attack due to how NSD handles PID files. Impact : A local attacker could cause a Denial of Service condition...

GLSA-202101-35 : phpMyAdmin: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202101-35 phpMyAdmin: Multiple vulnerabilities Multiple vulnerabilities have been discovered in phpMyAdmin. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for...

GLSA-202101-24 : cfitsio: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202101-24 cfitsio: Multiple vulnerabilities Multiple vulnerabilities have been discovered in cfitsio. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for detail...

GLSA-202101-28 : ncurses: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202101-28 ncurses: Multiple vulnerabilities Multiple vulnerabilities have been discovered in ncurses. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for detail...

GLSA-202101-23 : PEAR Archive_Tar: Directory traversal

The remote host is affected by the vulnerability described in GLSA-202101-23 PEAR ArchiveTar: Directory traversal Multiple vulnerabilities have been discovered in PEAR ArchiveTar. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers...

GLSA-202101-20 : glibc: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202101-20 glibc: Multiple vulnerabilities Multiple vulnerabilities have been discovered in glibc. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

GLSA-202101-14 : Mozilla Thunderbird: Remote code execution

The remote host is affected by the vulnerability described in GLSA-202101-14 Mozilla Thunderbird: Remote code execution A use-after-free bug was discovered in Mozilla Thunderbird handling of SCTP. Impact : A remote attacker could possibly execute arbitrary code with the privileges of the process ...

GLSA-202101-18 : Python: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202101-18 Python: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Python. Please review the bugs referenced below for details. Impact : A remote attacker could possibly execute arbitrary code with the...

GLSA-202101-06 : Ark: Symlink vulnerability

The remote host is affected by the vulnerability described in GLSA-202101-06 Ark: Symlink vulnerability KDE Ark did not fully verify symlinks contained within tar archives. Impact : A remote attacker could entice a user to open a specially crafted tar archive using KDE Ark, possibly resulting in...

Gentoo Linux Buffer Overflow Vulnerability

Gentoo is an open source Linux system from the Gentoo Foundation. Gentoo Linux prior to version 8.1.0 suffers from a buffer overflow vulnerability that stems from improper handling of system offsets and length tables, where SGIRleDecode has a 4-byte buffer overflow when decoding a carefully craft...

Gentoo Linux Security Advisory 202101-03

Gentoo Linux Security Advisory GLSA 202101-03 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -...

Pillow 缓冲区错误漏洞

Gentoo is an open source Linux system from the Gentoo Foundation. Gentoo Linux prior to version 8.1.0 suffers from a buffer overflow vulnerability that stems from improper handling of system offsets and length tables, where SGIRleDecode has a 4-byte buffer overflow when decoding a carefully craft...