GLSA-202003-40 : Cacti: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202003-40 Cacti: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Cacti. Please review the CVE identifiers referenced below for details. Impact : Remote attackers could execute arbitrary code or bypass...

GLSA-202003-39 : phpMyAdmin: SQL injection

The remote host is affected by the vulnerability described in GLSA-202003-39 phpMyAdmin: SQL injection PhpMyAdmin was vulnerable to a SQL injection attack through the designer feature. Impact : An authenticated remote attacker, by specifying a specially crafted database/table name, could trigger ...

GLSA-202003-42 : libgit2: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202003-42 libgit2: Multiple vulnerabilities Multiple vulnerabilities have been discovered in libgit2. Please review the CVE identifiers referenced below for details. Impact : An attacker could possibly overwrite arbitrary paths,...

GLSA-202003-41 : GNU FriBidi: Heap-based buffer overflow

The remote host is affected by the vulnerability described in GLSA-202003-41 GNU FriBidi: Heap-based buffer overflow A heap-based buffer overflow vulnerability was found in GNU FriBidi. Impact : A remote attacker could possibly cause a memory corruption, execute arbitrary code with the privileges...

GLSA-202003-43 : Apache Tomcat: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202003-43 Apache Tomcat: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Apache Tomcat. Please review the CVE identifiers referenced below for details. Impact : An attacker could possibly smuggle HTTP...

GLSA-202003-36 : libvorbis: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202003-36 libvorbis: Multiple vulnerabilities Multiple vulnerabilities have been discovered in libvorbis. Please review the CVE identifiers referenced below for details. Impact : A remote attacker, by enticing the user to process ...

GLSA-202003-29 : cURL: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202003-29 cURL: Multiple vulnerabilities Multiple vulnerabilities have been discovered in cURL. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly execute arbitrary code with...

GLSA-202003-18 : libvirt: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202003-18 libvirt: Multiple vulnerabilities Multiple vulnerabilities have been discovered in libvirt. Please review the CVE identifiers referenced below for details. Impact : A local privileged attacker could execute arbitrary...

GLSA-202003-31 : gdb: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-202003-31 gdb: Buffer overflow It was discovered that gdb didnt properly validate the ELF section sizes from input file. Impact : A remote attacker could entice a user to open a specially crafted ELF binary using gdb, possibly...

GLSA-202003-25 : libTIFF: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202003-25 libTIFF: Multiple vulnerabilities Multiple vulnerabilities have been discovered in libTIFF. Please review the CVE identifiers referenced below for details. Impact : A remote attacker, by enticing the user to process a...

GLSA-202003-11 : SVG Salamander: Server-Side Request Forgery

The remote host is affected by the vulnerability described in GLSA-202003-11 SVG Salamander: Server-Side Request Forgery A Server-Side Request Forgery was discovered in SVG Salamander. Impact : An attacker, by sending a specially crafted SVG file, can conduct SSRF. Workaround : There is no known...

GLSA-202003-27 : libssh: Arbitrary command execution

The remote host is affected by the vulnerability described in GLSA-202003-27 libssh: Arbitrary command execution It was discovered that libssh incorrectly handled certain scp commands. Impact : A remote attacker could trick a victim into using a specially crafted scp command, possibly resulting i...

GLSA-202003-12 : sudo: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202003-12 sudo: Multiple vulnerabilities Multiple vulnerabilities have been discovered in sudo. Please review the CVE identifiers referenced below for details. Impact : A local attacker could expose or corrupt memory information,...

GLSA-202003-24 : file: Heap-based buffer overflow

The remote host is affected by the vulnerability described in GLSA-202003-24 file: Heap-based buffer overflow It was discovered that file incorrectly handled certain malformed files. Impact : A remote attacker could entice a user to process a specially crafted file via libmagic or file, possibly...

GLSA-202003-32 : Libgcrypt: Side-channel attack

The remote host is affected by the vulnerability described in GLSA-202003-32 Libgcrypt: Side-channel attack A timing attack was found in the way ECCDSA was implemented in Libgcrypt. Impact : A local man-in-the-middle attacker, during signature generation, could possibly recover the private key...

GLSA-202003-20 : systemd: Heap use-after-free

The remote host is affected by the vulnerability described in GLSA-202003-20 systemd: Heap use-after-free It was found that systemd incorrectly handled certain Polkit queries. Impact : A local unprivileged user, by sending a specially crafted Polkit query, could possibly execute arbitrary code wi...

GLSA-202003-16 : SQLite: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202003-16 SQLite: Multiple vulnerabilities Multiple vulnerabilities have been discovered in SQLite. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly execute arbitrary code...

GLSA-202003-13 : musl: x87 floating-point stack adjustment imbalance

The remote host is affected by the vulnerability described in GLSA-202003-13 musl: x87 floating-point stack adjustment imbalance A flaw in musl libcs arch-specific math assembly code for i386 was found which can lead to x87 stack overflow in the execution of subsequent math code. Impact : Impact...

GLSA-202003-21 : runC: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202003-21 runC: Multiple vulnerabilities Multiple vulnerabilities have been discovered in runC. Please review the CVE identifiers referenced below for details. Impact : An attacker, by running a malicious Docker image, could escap...

SVG Salamander: Server-Side Request Forgery

Background SVG Salamander is a light weight SVG renderer and animator for Java. Description A Server-Side Request Forgery was discovered in SVG Salamander. Impact An attacker, by sending a specially crafted SVG file, can conduct SSRF. Workaround There is no known workaround at this time. Resoluti...