GLSA-202008-14 : Wireshark: Denial of service

The remote host is affected by the vulnerability described in GLSA-202008-14 Wireshark: Denial of service A double free error was discovered in Wiresharks Kafka dissector. Impact : A remote attacker could exploit these vulnerabilities by sending a malformed packet or enticing a user to read a...

GLSA-202008-12 : Net-SNMP: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202008-12 Net-SNMP: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Net-SNMP. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for...

GLSA-202008-16 : Mozilla Firefox, Mozilla Thunderbird: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202008-16 Mozilla Firefox, Mozilla Thunderbird: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Mozilla Firefox and Mozilla Thunderbird. Please review the CVE identifiers referenced below for details...

GLSA-202008-13 : PostgreSQL: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202008-13 PostgreSQL: Multiple vulnerabilities Multiple vulnerabilities have been discovered in PostgreSQL. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for...

GLSA-202008-15 : Docker: Information disclosure

The remote host is affected by the vulnerability described in GLSA-202008-15 Docker: Information disclosure It was found that Docker created network bridges which by default accept IPv6 router advertisements. Impact : An attacker who gained access to a container with CAPNETRAW capability may be...

GLSA-202008-11 : Chromium, Google Chrome: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202008-11 Chromium, Google Chrome: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the CVE identifiers referenced below for details. Impact : Please review the...

GLSA-202008-09 : Shadow: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-202008-09 Shadow: Privilege escalation When Shadow was installed with the PAM use flag, setuid binaries provided by Shadow were not properly restricted. Impact : A local attacker could escalate privileges to root. Workaround : The...

GLSA-202008-10 : Chromium, Google Chrome: Heap buffer overflow

The remote host is affected by the vulnerability described in GLSA-202008-10 Chromium, Google Chrome: Heap buffer overflow A buffer overflow has been discovered in Chromium and Google Chromes SwiftShader component. Impact : A remote attacker, by enticing a user to visit a specially crafted websit...

GLSA-202008-02 : GNU GLOBAL: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-202008-02 GNU GLOBAL: Arbitrary code execution A vulnerability was found in an undocumented function of gozilla. Impact : A remote attacker could entice a user to open a specially crafted URL using GNU GLOBAL, possibly resulting i...

GLSA-202008-04 : Apache: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202008-04 Apache: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Apache. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

GLSA-202008-06 : iproute2: Denial of service

The remote host is affected by the vulnerability described in GLSA-202008-06 iproute2: Denial of service iproute2 was found to contain a use-after-free in getnetnsidfromname in ip/ipnetns.c. Impact : A remote attacker, able to feed iproute2 crafted data, may be able to cause a Denial of Service...

GLSA-202008-01 : Python: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202008-01 Python: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Python. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

GLSA-202007-62 : PyCrypto: Weak key generation

The remote host is affected by the vulnerability described in GLSA-202007-62 PyCrypto: Weak key generation It was discovered that PyCrypto incorrectly generated ElGamal key parameters. Impact : Attackers may be able to obtain sensitive information by reading ciphertext data. Workaround : There is...

GLSA-202007-61 : WebKitGTK+: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202007-61 WebKitGTK+: Multiple vulnerabilities Multiple vulnerabilities have been discovered in WebKitGTK+. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for...

GLSA-202007-65 : libsndfile: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202007-65 libsndfile: Multiple vulnerabilities Multiple vulnerabilities have been discovered in libsndfile. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for...

GLSA-202007-64 : Mozilla Thunderbird: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202007-64 Mozilla Thunderbird: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Mozilla Thunderbird. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CV...

PyCrypto: Weak key generation

Background PyCrypto is the Python Cryptography Toolkit. Description It was discovered that PyCrypto incorrectly generated ElGamal key parameters. Impact Attackers may be able to obtain sensitive information by reading ciphertext data. Workaround There is no known workaround at this time. Resoluti...

GLSA-202007-54 : rsync: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202007-54 rsync: Multiple vulnerabilities Multiple vulnerabilities have been discovered in rsync within bundled zlib. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE...

GLSA-202007-52 : mujs: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202007-52 mujs: Multiple vulnerabilities Multiple vulnerabilities have been discovered in mujs. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

GLSA-202007-56 : Claws Mail: Improper STARTTLS handling

The remote host is affected by the vulnerability described in GLSA-202007-56 Claws Mail: Improper STARTTLS handling It was discovered that Claws Mail was not properly handling state within the STARTTLS protocol handshake. Impact : There may be a breach of integrity or confidentiality in connectio...