GLSA-201804-14 : GDK-PixBuf: Remote code execution

The remote host is affected by the vulnerability described in GLSA-201804-14 GDK-PixBuf: Remote code execution Several integer overflows were discovered in GDK-PixBufs gifgetlzw function. Impact : A remote attacker, by enticing a user to process a specially crafted image file, could execute...

GLSA-201804-13 : ncurses: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201804-13 ncurses: Multiple vulnerabilities Multiple vulnerabilities have been discovered in ncurses. Please review the CVE identifiers referenced below for details. Impact : A remote attacker, by enticing the user to process...

GLSA-201804-15 : Evince: Command injection

The remote host is affected by the vulnerability described in GLSA-201804-15 Evince: Command injection A vulnerability was discovered in Evinces handling of filenames while printing PDF files. Impact : A remote attacker, by enticing the user to process a specially crafted file, could execute...

GLSA-201804-12 : Go: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201804-12 Go: Arbitrary code execution A vulnerability in Go was discovered which does not validate the import path of remote repositories. Impact : Remote attackers, by enticing a user to import from a crafted website, could...

GLSA-201804-04 : cURL: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201804-04 cURL: Multiple vulnerabilities Multiple vulnerabilities have been discovered in cURL. Please review the CVE identifiers referenced below for details. Impact : Remote attackers could cause a Denial of Service condition,...

GLSA-201804-10 : Zend Framework: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201804-10 Zend Framework: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Zend Framework that have remain unaddressed. Please review the referenced CVE identifiers for details. Impact : Remote attackers...

GLSA-201804-06 : mailx: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201804-06 mailx: Multiple vulnerabilities Multiple vulnerabilities have been discovered in mailx. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could execute arbitrary commands...

GLSA-201804-09 : SPICE VDAgent: Arbitrary command injection

The remote host is affected by the vulnerability described in GLSA-201804-09 SPICE VDAgent: Arbitrary command injection SPICE VDAgent does not properly escape save directory before passing to shell. Impact : A local attacker could execute arbitrary commands. Workaround : There is no known...

GLSA-201804-07 : libvirt: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201804-07 libvirt: Multiple vulnerabilities Multiple vulnerabilities have been discovered in libvirt. Please review the CVE identifiers referenced below for details. Impact : A local privileged attacker could execute arbitrary...

GLSA-201804-03 : Poppler: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201804-03 Poppler: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Poppler. Please review the CVE identifiers referenced below for details. Impact : A remote attacker, by enticing a user to open a special...

GLSA-201804-08 : QEMU: Multiple vulnerabilities (Spectre)

The remote host is affected by the vulnerability described in GLSA-201804-08 QEMU: Multiple vulnerabilities Multiple vulnerabilities have been discovered in QEMU. Please review the CVE identifiers referenced below for details. Impact : An attacker could execute arbitrary code, cause a Denial of...

Zend Framework: Multiple vulnerabilities

Background Zend Framework is a high quality and open source framework for developing Web Applications. Description Multiple vulnerabilities have been discovered in Zend Framework that have remain unaddressed. Please review the referenced CVE identifiers for details. Impact Remote attackers could...

GLSA-201803-13 : PLIB: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201803-13 PLIB: User-assisted execution of arbitrary code A stack-based buffer overflow within the error function of ssg/ssgParser.cxx was discovered in PLIB. Impact : A remote attacker, by enticing a user to open a specially...

GLSA-201803-12 : BusyBox: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201803-12 BusyBox: Multiple vulnerabilities Multiple vulnerabilities have been discovered in BusyBox. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly execute arbitrary code...

Gentoo net-im/jabberd2 package local elevation of privilege vulnerability

The Gentoo net-im/jabberd2 package is an XMPP Extensible Message Processing Field Protocol package from the Gentoo Foundation. A security vulnerability in the Gentoo net-im/jabberd2 package version 2.6.1 and earlier stems from a program that installs jabberd, jabberd2-c2s, jabberd2-router,...

collectd: Multiple vulnerabilities

Background collectd is a daemon which collects system and application performance metrics periodically and provides mechanisms to store the values in a variety of ways, for example in RRD files. Description Multiple vulnerabilities have been found in Gentoo’s collectd package. Please review the...

GLSA-201803-10 : collectd: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201803-10 collectd: Multiple vulnerabilities Multiple vulnerabilities have been found in Gentoos collectd package. Please review the referenced CVE identifiers and bug entries for details. Impact : A local attacker, who either is...

Gentoo app-admin/collectd package local elevation of privilege vulnerability

The Gentoo app-admin/collectd package is a Gentoo Foundation package that collects system statistics and provides stored values. A security vulnerability exists in versions of the Gentoo app-admin/collectd package prior to 5.7.2-r1, which stems from the program assigning ownership of the PID file...

Arbitrary file deletion

The Gentoo app-admin/collectd package before 5.7.2-r1 sets the ownership of PID file directory to the collectd account, which might allow local users to kill arbitrary processes by leveraging access to this account for PID file modification before a root script sends a SIGKILL when the service is...

CVE-2017-18240

The Gentoo app-admin/collectd package before 5.7.2-r1 sets the ownership of PID file directory to the collectd account, which might allow local users to kill arbitrary processes by leveraging access to this account for PID file modification before a root script sends a SIGKILL when the service is...