GLSA-201709-13 : SquirrelMail: Remote Code Execution

The remote host is affected by the vulnerability described in GLSA-201709-13 SquirrelMail: Remote Code Execution It was discovered that the sendmail.cf file is mishandled in a popen call. Impact : A remote attacker, by enticing a user to open an e-mail attachment, could execute arbitrary shell...

bzip2: Denial of service

Background bzip2 is a high-quality data compressor used extensively by Gentoo Linux. Description A use-after-free flaw was found in bzip2recover, leading to a null pointer dereference, or a write to a closed file descriptor. Please review the CVE identifier referenced below for details. Impact A...

GLSA-201708-01 : BIND: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201708-01 BIND: Multiple vulnerabilities Multiple vulnerabilities have been discovered in BIND. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could send a specially crafted DNS request ...

GNU C Library: Multiple vulnerabilities

Background The GNU C library is the standard C library used by Gentoo Linux systems. Description Multiple vulnerabilities have been discovered in the GNU C Library. Please review the CVE identifiers and Qualys’ security advisory referenced below for details. Impact An attacker could possibly...

GLSA-201706-15 : WebKitGTK+: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201706-15 WebKitGTK+: Multiple vulnerabilities Multiple vulnerabilities have been discovered in WebKitGTK+. Please review the CVE identifiers referenced below for details. Impact : A remote attack can use multiple vectors to execu...

GLSA-201706-12 : Wireshark: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201706-12 Wireshark: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Wireshark. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to process a...

GLSA-201706-11 : PCRE library: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201706-11 PCRE library: Denial of Service It was found that the compilebracketmatchingpath function in pcrejitcompile.c in PCRE library is vulnerable to an out-of-bounds read. Impact : A remote attacker could possibly cause a Deni...

GLSA-201706-07 : Libtirpc and RPCBind: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201706-07 Libtirpc and RPCBind: Denial of Service It was found that due to the way RPCBind uses libtirpc libntirpc, a memory leak can occur when parsing specially crafted XDR messages. Impact : A remote attacker could send thousan...

GLSA-201702-19 : TigerVNC: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-201702-19 TigerVNC: Buffer overflow A buffer overflow vulnerability in ModifiablePixelBuffer::fillRect in vncviewer was found. Impact : A remote attacker, utilizing a malicious VNC server, could execute arbitrary code with the...

GLSA-201702-03 : Firejail: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-201702-03 Firejail: Privilege escalation The unaffected packages listed in GLSA 201612-48 had an incomplete fix as reported by Sebastian Krahmer of SuSE. This has been properly patched in the latest releases. Impact : An attacker...

GLSA-201701-75 : Perl: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201701-75 Perl: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Perl. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly execute arbitrary code with...

GLSA-201701-67 : a2ps: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201701-67 a2ps: Arbitrary code execution a2ps fixps script does not invoke gs with the -dSAFER option. Impact : Remote attackers, by enticing a user to process a specially crafted PostScript file, could delete arbitrary files or...

GLSA-201701-44 : CVS: Heap-based overflow

The remote host is affected by the vulnerability described in GLSA-201701-44 CVS: Heap-based overflow A heap-based buffer overflow was discovered in the proxyconnect function in src/client.c in CVS. Impact : An attacker, utilizing a remote HTTP proxy server, could cause a Denial of Service...

GLSA-201701-39 : VLC: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-201701-39 VLC: Buffer overflow A buffer overflow was discovered in the DecodeAdpcmImaQT function in modules/codec/adpcm.c in the VideoLAN VLC media player. Impact : Remote attackers, by enticing a user to execute a specially craft...

GLSA-201701-33 : PostgreSQL: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201701-33 PostgreSQL: Multiple vulnerabilities Multiple vulnerabilities have been discovered in PostgreSQL. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly execute arbitrar...

GLSA-201701-17 : Adobe Flash Player: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201701-17 Adobe Flash Player: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Adobe Flash Player. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly...

GLSA-201612-49 : mod_wsgi: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-201612-49 modwsgi: Privilege escalation modwsgi, when creating a daemon process group, does not properly handle dropping group privileges. Impact : Context-dependent attackers could escalate privileges due to the improper handling...

GLSA-201701-13 : HDF5: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201701-13 HDF5: Multiple vulnerabilities Multiple arbitrary code execution vulnerabilities have been discovered in HDF5. Please review the CVE identifiers referenced below for details. Impact : An attacker could execute arbitrary...

GLSA-201612-45 : Tor: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201612-45 Tor: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Tor. Please review the CVE identifier and change log referenced below for details. Impact : A remote attacker could possibly cause a Denial o...

GLSA-201612-43 : Node.js: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201612-43 Node.js: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Node.js. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly cause a Denial of...