GLSA-202101-04 : Mozilla Firefox: Remote code execution

The remote host is affected by the vulnerability described in GLSA-202101-04 Mozilla Firefox: Remote code execution A use-after-free bug was discovered in Mozilla Firefoxs handling of SCTP. Impact : A remote attacker could possibly execute arbitrary code with the privileges of the process, or cau...

GLSA-202012-23 : Apache Tomcat: Information disclosure

The remote host is affected by the vulnerability described in GLSA-202012-23 Apache Tomcat: Information disclosure It was discovered that Apache Tomcat could re-use an HTTP request header value from the previous stream received on an HTTP/2 connection for the request associated with the subsequen...

GLSA-202012-20 : Mozilla Firefox, Mozilla Thunderbird: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202012-20 Mozilla Firefox, Mozilla Thunderbird: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Mozilla Firefox and Mozilla Thunderbird. Please review the CVE identifiers referenced below for details...

GLSA-202012-19 : PowerDNS Recursor: Denial of service

The remote host is affected by the vulnerability described in GLSA-202012-19 PowerDNS Recursor: Denial of service It was discovered that it was possible to update the DNSSEC validation state to a bogus state for a cached record via DNS ANY query. Impact : A remote attacker could send specially...

GLSA-202012-17 : D-Bus: Denial of service

The remote host is affected by the vulnerability described in GLSA-202012-17 D-Bus: Denial of service It was discovered that D-Bus did not properly handle the situation when two usernames have the same numeric UID. Impact : An attacker could possibly cause a Denial of Service condition or trigger...

GLSA-202012-18 : PowerDNS: information disclosure

The remote host is affected by the vulnerability described in GLSA-202012-18 PowerDNS: information disclosure It was discovered that PowerDNS did not properly handle certain unknown records. Impact : An authorized attacker with the ability to insert crafted records into a zone might be able to le...

GLSA-202012-16 : PHP: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202012-16 PHP: Multiple vulnerabilities Multiple vulnerabilities have been discovered in PHP. Please review the CVE identifiers and change log referenced below for details. Impact : An attacker could cause a Denial of Service...

GLSA-202011-17 : MIT Kerberos 5: Denial of service

The remote host is affected by the vulnerability described in GLSA-202011-17 MIT Kerberos 5: Denial of service It was discovered that MIT Kerberos network authentication system, krb5, did not properly handle ASN.1-encoded Kerberos messages. Impact : A remote attacker could send a specially crafte...

GLSA-202011-03 : KPMCore: Root privilege escalation

The remote host is affected by the vulnerability described in GLSA-202011-03 KPMCore: Root privilege escalation Improper checks on the D-Bus request received resulted in improper protection for /etc/fstab. Impact : An attacker could esclate privileges to root by exploiting this vulnerability...

GLSA-202011-05 : libssh: Denial of service

The remote host is affected by the vulnerability described in GLSA-202011-05 libssh: Denial of service libssh was found to have a NULL pointer dereference in tftpserver.c if the function sshbuffernew returns NULL. Impact : An attacker could cause a possible Denial of Service condition. Workaround...

GLSA-202010-03 : libjpeg-turbo: Information disclosure

The remote host is affected by the vulnerability described in GLSA-202010-03 libjpeg-turbo: Information disclosure It was discovered that libjpeg-turbo incorrectly handled certain PPM files. Impact : A remote attacker could entice a user to open a specially crafted PPM file using an application...

GLSA-202009-14 : Xen: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-202009-14 Xen: Buffer overflow An out-of-bounds read/write access issue was found in the USB emulator when using QEMU. Impact : A remote attacker could possibly execute arbitrary code with the privileges of the process or cause a...

Discover Gentoo Linux Vulnerabilities using Qualys VMDR

The Qualys vulnerability signatures team has released a new series of signatures detections for Gentoo Linux, allowing security teams to identify Gentoo Linux hosts and detect their vulnerabilities. Gentoo Linux is a Linux distribution built using the Portage package management system. It is a fr...

GLSA-202009-10 : PHP: Denial of service

The remote host is affected by the vulnerability described in GLSA-202009-10 PHP: Denial of service It was discovered that PHP did not properly handle PHAR files. Impact : A remote attacker could entice a user to open a specially crafted PHAR file using PHP, possibly allowing attacker to obtain...

GLSA-202009-04 : Qt GUI: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-202009-04 Qt GUI: Buffer overflow It was discovered that Qt GUIs XBM parser did not properly handle X BitMap files. Impact : Please review the referenced CVE identifiers for details. Workaround : There is no known workaround at th...

GLSA-202009-01 : GnuTLS: Denial of service

The remote host is affected by the vulnerability described in GLSA-202009-01 GnuTLS: Denial of service It was found that GnuTLS didnt handle norenegotiation alert properly. Impact : A remote attacker could entice a user to connect to a malicious TLS endpoint using an application linked against...

GLSA-202008-19 : BIND: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202008-19 BIND: Multiple vulnerabilities Multiple vulnerabilities have been discovered in BIND. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

GLSA-202008-20 : GPL Ghostscript: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202008-20 GPL Ghostscript: Multiple vulnerabilities Multiple vulnerabilities have been discovered in GPL Ghostscript. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE...

GLSA-202008-13 : PostgreSQL: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202008-13 PostgreSQL: Multiple vulnerabilities Multiple vulnerabilities have been discovered in PostgreSQL. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for...

GLSA-202008-16 : Mozilla Firefox, Mozilla Thunderbird: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202008-16 Mozilla Firefox, Mozilla Thunderbird: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Mozilla Firefox and Mozilla Thunderbird. Please review the CVE identifiers referenced below for details...