GLSA-202107-03 : libqb: Insecure temporary file

The remote host is affected by the vulnerability described in GLSA-202107-03 libqb: Insecure temporary file It was discovered that libqb used predictable filenames under /dev/shm and /tmp without OEXCL. Impact : A local attacker could perform symlink attacks to overwrite arbitrary files with the...

GLSA-202107-10 : TCG TPM2 Software Stack: Information disclosure

The remote host is affected by the vulnerability described in GLSA-202107-10 TCG TPM2 Software Stack: Information disclosure TCG TPM2 Software Stack did not appropriately apply FAPI policies to protect data encrypted with the trusted platform module. Impact : Data encrypted using TCG TPM2 Softwar...

GLSA-202107-01 : corosync: Denial of service

The remote host is affected by the vulnerability described in GLSA-202107-01 corosync: Denial of service It was discovered that corosync allowed an unauthenticated user to cause a Denial of Service by application crash. Impact : A remote attacker could send a malicious crafted packet, possibly...

GLSA-202105-39 : Ceph: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202105-39 Ceph: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Ceph. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

GLSA-202107-30 : Xen: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202107-30 Xen: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Xen. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

GLSA-202107-35 : OpenSCAD: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-202107-35 OpenSCAD: Buffer overflow A buffer overflow exists in OpenSCAD when parsing STL files. Impact : A remote attacker could entice a user to open a specially crafted STL file using OpenSCAD, possibly resulting in execution o...

GLSA-202107-55 : SDL 2: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202107-55 SDL 2: Multiple vulnerabilities Multiple vulnerabilities have been discovered in SDL 2. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

GLSA-202105-19 : Firejail: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-202105-19 Firejail: Privilege escalation It was discovered that a flaw in Firejails OverlayFS code allowed restricted programs to escape sandbox. Impact : A local attacker could obtain arbitrary file system access via an applicati...

GLSA-202107-20 : Redis: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202107-20 Redis: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Redis. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

GLSA-202107-11 : OpenDoas: Insufficient environment filtering

The remote host is affected by the vulnerability described in GLSA-202107-11 OpenDoas: Insufficient environment filtering OpenDoas does not properly filter the PATH variable from the resulting shell after escalating privileges. Impact : A local attacker with control of a users PATH variable could...

GLSA-202107-27 : OpenEXR: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202107-27 OpenEXR: Multiple vulnerabilities Multiple vulnerabilities have been discovered in OpenEXR. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for detail...

GLSA-202107-40 : MediaWiki: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202107-40 MediaWiki: Multiple vulnerabilities Multiple vulnerabilities have been discovered in MediaWiki. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for...

GLSA-202107-22 : InspIRCd: Information disclosure

The remote host is affected by the vulnerability described in GLSA-202107-22 InspIRCd: Information disclosure InspIRCd incorrectly handled malformed PONG messages, resulting in access of freed memory. Impact : A remote attacker could send crafted packets to the server, possibly allowing them to...

GLSA-202107-08 : PostSRSd: Denial of service

The remote host is affected by the vulnerability described in GLSA-202107-08 PostSRSd: Denial of service Multiple vulnerabilities have been discovered in PostSRSd. Please review the CVE identifiers referenced below for details. Impact : An attacker could cause a possible Denial of Service...

GLSA-202105-22 : Samba: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202105-22 Samba: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Samba. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

GLSA-202107-44 : libslirp: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202107-44 libslirp: Multiple vulnerabilities Multiple vulnerabilities have been discovered in libslirp. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for...

GLSA-202107-12 : Schism Tracker: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202107-12 Schism Tracker: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Schism Tracker. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE...

GLSA-202105-34 : Bash: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-202105-34 Bash: Privilege escalation It was discovered that Bash incorrectly dropped privileges by setting its effective UID to its real UID. Impact : A local attacker could possibly escalate privileges. Workaround : There is no...

CVE-2022-23220

USBView 2.1 before 2.2 allows some local users e.g., ones logged in via SSH to execute arbitrary code as root because certain Polkit settings e.g., allowany=yes for pkexec disable the authentication requirement. Code execution can, for example, use the --gtk-module option. This affects Ubuntu,...

CVE-2022-23220

USBView 2.1 before 2.2 allows some local users e.g., ones logged in via SSH to execute arbitrary code as root because certain Polkit settings e.g., allowany=yes for pkexec disable the authentication requirement. Code execution can, for example, use the --gtk-module option. This affects Ubuntu,...