GLSA-202006-15 : OpenConnect: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202006-15 OpenConnect: Multiple vulnerabilities Multiple vulnerabilities have been discovered in OpenConnect. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers fo...

GLSA-202006-20 : Asterisk: Root privilege escalation

The remote host is affected by the vulnerability described in GLSA-202006-20 Asterisk: Root privilege escalation It was discovered that Gentoos Asterisk ebuild does not properly set permissions on its data directories. This only affects OpenRC systems, as the flaw was exploitable via the init...

GLSA-202006-18 : Bubblewrap: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-202006-18 Bubblewrap: Arbitrary code execution Bubblewrap misuses temporary directories in /tmp as a mount point. Impact : This flaw may allow possible execution of code or prevention of running Bubblewrap. Workaround : There is n...

GLSA-202006-09 : Adobe Flash Player: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-202006-09 Adobe Flash Player: Arbitrary code execution An unspecified flaw has been discovered in Adobe Flash Player. Impact : This flaw can be exploited by attackers for remote code execution. Workaround : There is no known...

GLSA-202006-16 : PCRE2: Denial of service

The remote host is affected by the vulnerability described in GLSA-202006-16 PCRE2: Denial of service PCRE2 has a flaw when handling JIT-compiled regex using the \X pattern. Impact : An attacker could cause a possible Denial of Service condition. Workaround : There is no known workaround at this...

GLSA-202006-12 : GNU Mailutils: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-202006-12 GNU Mailutils: Privilege escalation GNU Mailutils runs maidag by default with setuid root permissions. Impact : An attacker can use this to write to arbitrary files as root. Workaround : There is no known workaround at...

GLSA-202006-07 : Mozilla Firefox: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202006-07 Mozilla Firefox: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Mozilla Firefox. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE...

GLSA-202006-06 : ssvnc: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202006-06 ssvnc: Multiple vulnerabilities Multiple vulnerabilities have been discovered in ssvnc. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

GLSA-202006-22 : OpenJDK, IcedTea: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202006-22 OpenJDK, IcedTea: Multiple vulnerabilities Multiple vulnerabilities have been discovered in OpenJDK and IcedTea. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE...

CVE-2020-14152

In IJG JPEG aka libjpeg before 9d, jpegmemavailable in jmemnobs.c in djpeg does not honor the maxmemorytouse setting, possibly causing excessive memory consumption...

CVE-2020-14155

libpcre in PCRE before 8.44 allows an integer overflow via a large number after a ?C substring...

Asterisk: Root privilege escalation

Background A Modular Open Source PBX System. Description It was discovered that Gentoo’s Asterisk ebuild does not properly set permissions on its data directories. This only affects OpenRC systems, as the flaw was exploitable via the init script. Impact A local attacker could escalate privileges...

ssvnc: Multiple vulnerabilities

Background The Enhanced TightVNC Viewer, SSVNC, adds encryption security to VNC connections. Description Multiple vulnerabilities have been discovered in ssvnc. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details...

GLSA-202006-03 : Perl: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202006-03 Perl: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Perl. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

GLSA-202005-07 : FreeRDP: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202005-07 FreeRDP: Multiple vulnerabilities Multiple vulnerabilities have been discovered in FreeRDP. Please review the CVE identifiers referenced below for details. Impact : An attacker could possibly cause a Denial of Service...

GLSA-202005-12 : OpenSLP: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202005-12 OpenSLP: Multiple vulnerabilities Multiple vulnerabilities have been discovered in OpenSLP. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for detail...

GLSA-202005-08 : Xen: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202005-08 Xen: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Xen. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

GLSA-202005-09 : Python: Denial of service

The remote host is affected by the vulnerability described in GLSA-202005-09 Python: Denial of service An issue was discovered in urllib.request.AbstractBasicAuthHandler which allowed a remote attacker to send malicious data causing extensive regular expression backtracking. Impact : An attacker...

GLSA-202005-06 : LIVE555 Media Server: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202005-06 LIVE555 Media Server: Multiple vulnerabilities Multiple vulnerabilities have been discovered in LIVE555 Media Server. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced...

GLSA-202005-10 : libmicrodns: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202005-10 libmicrodns: Multiple vulnerabilities Multiple vulnerabilities have been discovered in libmicrodns. Please review the CVE identifiers and the upstream advisory referenced below for details. Impact : Please review the...