GLSA-202211-02 : lesspipe: Arbitrary Code Exeecution

The remote host is affected by the vulnerability described in GLSA-202211-02 lesspipe: Arbitrary Code Exeecution - lesspipe before 2.06 allows attackers to execute code via Perl Storable pst files, because of deserialized object destructor execution via a key/value pair in a hash. CVE-2022-44542...

GLSA-202210-20 : Nicotine+: Denial of Service

The remote host is affected by the vulnerability described in GLSA-202210-20 Nicotine+: Denial of Service - Denial of service DoS vulnerability in Nicotine+ 3.0.3 and later allows a user with a modified Soulseek client to crash Nicotine+ by sending a file download request with a file path...

编号撤回

Gentoo is an open source Linux system from the Gentoo Foundation. This CVE number has been withdrawn...

Gentoo 代码问题漏洞

Gentoo is an open source Linux system from the Gentoo Foundation. A code issue vulnerability exists in Gentoo lesspipe versions prior to 2.06. An attacker can exploit this vulnerability to execute code via a Perl Storable pst file...

GLSA-202210-23 : libksba: Remote Code Execution

The remote host is affected by the vulnerability described in GLSA-202210-23 libksba: Remote Code Execution - libksba: integer overflow may lead to remote code execution CVE-2022-3515 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...

GLSA-202210-26 : Shadow: TOCTOU Race

The remote host is affected by the vulnerability described in GLSA-202210-26 Shadow: TOCTOU Race - shadow: TOCTOU time-of-check time-of-use race condition when copying and removing directory trees CVE-2013-4235 Note that Nessus has not tested for this issue but has instead relied only on the...

GLSA-202210-41 : android-tools: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202210-41 android-tools: Multiple Vulnerabilities - Please review the referenced CVE identifiers for details. CVE-2022-20128, CVE-2022-3168 Note that Nessus has not tested for these issues but has instead relied only on the...

GLSA-202210-39 : libxml2: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202210-39 libxml2: Multiple Vulnerabilities - Please review the referenced CVE identifiers for details. CVE-2022-40303, CVE-2022-40304 Note that Nessus has not tested for these issues but has instead relied only on the application...

GLSA-202210-15 : GDAL: Heap Buffer Overflow

The remote host is affected by the vulnerability described in GLSA-202210-15 GDAL: Heap Buffer Overflow - GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile called from PCIDSK::CPCIDSKSegment::ReadFromFile and...

GLSA-202210-11 : schroot: Denial of Service

The remote host is affected by the vulnerability described in GLSA-202210-11 schroot: Denial of Service - Schroot before 1.6.13 had too permissive rules on chroot or session names, allowing a denial of service on the schroot service for all users that may start a schroot session. CVE-2022-2787 No...

CVE-2021-46848

GNU Libtasn1 before 4.19.0 has an ETYPEOK off-by-one array size check that affects asn1encodesimpleder...

GLSA-202210-01 : Open Asset Import Library (assimp): Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202210-01 Open Asset Import Library assimp: Multiple Vulnerabilities - Open Asset Import Library aka assimp 5.1.0 and 5.1.1 has a heap-based buffer overflow in m3dsafestr called from m3dload and Assimp::M3DWrapper::M3DWrapper...

GLSA-202209-25 : Zutty: Arbitrary Code Execution

The remote host is affected by the vulnerability described in GLSA-202209-25 Zutty: Arbitrary Code Execution - In Zutty before 0.13, DECRQSS in text written to the terminal can achieve arbitrary code execution. CVE-2022-41138 Note that Nessus has not tested for this issue but has instead relied...

GLSA-202209-10 : Logcheck: Root privilege escalation

The remote host is affected by the vulnerability described in GLSA-202209-10 Logcheck: Root privilege escalation - In the ebuild package through logcheck-1.3.23.ebuild for Logcheck on Gentoo, it is possible to achieve root privilege escalation from the logcheck user because of insecure recursive...

GLSA-202209-07 : Mrxvt: Arbitrary Code Execution

The remote host is affected by the vulnerability described in GLSA-202209-07 Mrxvt: Arbitrary Code Execution - rxvt-unicode 9.22, rxvt 2.7.10, mrxvt 0.5.4, and Eterm 0.9.7 allow potentially remote code execution because of improper handling of certain escape sequences ESC G Q. A response is...

libaacplus: Denial of Service

Background libaacplus is an HE-AAC+ v2 library, based on the reference implementation. Description Multiple vulnerabilities have been discovered in libaacplus. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workarou...

Logcheck: Root privilege escalation

Background Logcheck mails anomalies in the system logfiles to the administrator. Description The pkgpostinst phase of the Logcheck ebuilds recursively chown the /etc/logcheck and /var/lib/logcheck directories. If the logcheck adds hardlinks to other files in these directories, the chown call will...

Mrxvt: Arbitrary Code Execution

Background Mrxvt is a multi-tabbed rxvt clone with XFT, transparent background and CJK support. Description Mrxvt mishandles certain escape sequences, some of which allow for shell command execution. Impact An attacker with sufficient access to write arbitrary text to the Mrxvt terminal could...

Oracle JDK/JRE: Multiple vulnerabilities

Background Java Platform, Standard Edition Java SE lets you develop and deploy Java applications on desktops and servers, as well as in today's demanding embedded environments. Java offers the rich user interface, performance, versatility, portability, and security that today's applications...

GLSA-202209-08 : Smokeping: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202209-08 Smokeping: Multiple vulnerabilities - In the ebuild package through smokeping-2.7.3-r1 for SmokePing on Gentoo, the initscript uses a PID file that is writable by the smokeping user. By writing arbitrary PIDs to that fil...