GLSA-201612-07 : dpkg: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201612-07 dpkg: Arbitrary code execution Gentoo Linux developer, Hanno Bck, discovered an off-by-one error in the dpkg-deb component of dpkg, the Debian package management system, which triggers a stack-based buffer overflow. Impa...

dpkg: Arbitrary code execution

Background Debian package management system. Description Gentoo Linux developer, Hanno Böck, discovered an off-by-one error in the dpkg-deb component of dpkg, the Debian package management system, which triggers a stack-based buffer overflow. Impact An attacker could potentially execute arbitrary...

GLSA-201611-22 : PHP: Multiple vulnerabilities (httpoxy)

The remote host is affected by the vulnerability described in GLSA-201611-22 PHP: Multiple vulnerabilities Multiple vulnerabilities have been discovered in PHP. Please review the CVE identifiers referenced below for details. Impact : An attacker can possibly execute arbitrary code or create a...

GLSA-201611-06 : xinetd: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-201611-06 xinetd: Privilege escalation Xinetd does not enforce the user and group configuration directives for TCPMUX services, which causes these services to be run as root. Impact : Attackers could escalate privileges outside of...

GLSA-201607-17 : BeanShell: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201607-17 BeanShell: Arbitrary code execution An application that includes BeanShell on the classpath may be vulnerable if another part of the application uses Java serialization or XStream to deserialize data from an untrusted...

GLSA-201607-14 : Ansible: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-201607-14 Ansible: Privilege escalation The createscript function in the lxccontainer module of Ansible uses predictable temporary file names, making it vulnerable to a symlink attack. Impact : Local attackers could write arbitrar...

GLSA-201607-16 : arpwatch: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-201607-16 arpwatch: Privilege escalation Arpwatch does not properly drop supplementary groups. Impact : Attackers, if able to exploit arpwatch, could escalate privileges outside of the running process. Workaround : There is no kno...

GLSA-201607-15 : NTP: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201607-15 NTP: Multiple vulnerabilities Multiple vulnerabilities have been discovered in NTP. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly cause a Denial of Service...

GLSA-201607-09 : Commons-BeanUtils: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201607-09 Commons-BeanUtils: Arbitrary code execution Apache Commons BeanUtils does not suppress the class property, which allows for the manipulation of the ClassLoader. Impact : Remote attackers could potentially execute arbitra...

GLSA-201606-10 : PHP: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201606-10 PHP: Multiple vulnerabilities Multiple vulnerabilities have been discovered in PHP. Please review the CVE identifiers referenced below for details. Impact : An attacker can possibly execute arbitrary code or create a...

GLSA-201606-02 : Puppet Server and Agent: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201606-02 Puppet Server and Agent: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Puppet Server and Agent. Please review the CVE identifiers referenced below for details. Impact : Remote attackers,...

Gentoo Security Advisory GLSA 201604-03

Gentoo Linux Local Security Checks SPDX-FileCopyrightText: 2016 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.121460";...

Gentoo Security Advisory GLSA 201603-15

Gentoo Linux Local Security Checks GLSA 201603-15 SPDX-FileCopyrightText: 2016 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Gentoo Security Advisory GLSA 201603-09

Gentoo Linux Local Security Checks SPDX-FileCopyrightText: 2016 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.121451";...

Gentoo Security Advisory GLSA 201603-05

Gentoo Linux Local Security Checks GLSA 201603-05 SPDX-FileCopyrightText: 2016 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

ffmpeg and Libav cross-domain information disclosure vulnerability

Overview ffmpeg is a "cross-platform solution to record, convert and stream audio and video". ffmpeg is vulnerable to local file disclosure due to improper enforcement of domain restrictions when processing playlist files. Description CWE-201: Information Exposure Through Sent Data- CVE-2016-1897...

Gentoo Security Advisory GLSA 201512-07

Gentoo Linux Local Security Checks GLSA 201512-07 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

GLSA-201512-01 : Dnsmasq: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201512-01 Dnsmasq: Denial of Service An out-of-bounds read vulnerability has been found in the tcprequest function in Dnsmasq. Impact : A remote attacker could send a specially crafted DNS request, possibly resulting in a Denial o...

GLSA-201512-02 : IPython: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201512-02 IPython: User-assisted execution of arbitrary code IPython does not properly check the MIME type of a file. Impact : A remote attacker could entice a user to open a specially crafted text file using IPython, possibly...

Gentoo Security Advisory GLSA 201510-08

Gentoo Linux Local Security Checks GLSA 201510-08 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...