SeaMonkey: Multiple vulnerabilities

Background The SeaMonkey project is a community effort to deliver production-quality releases of code derived from the application formerly known as “Mozilla Application Suite”. Description Multiple vulnerabilities have been discovered in SeaMonkey. Please review referenced release notes for more...

GLSA-202012-08 : MariaDB: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202012-08 MariaDB: Multiple vulnerabilities Multiple vulnerabilities have been discovered in MariaDB. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for detail...

GLSA-202012-05 : Chromium, Google Chrome: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202012-05 Chromium, Google Chrome: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the CVE identifiers referenced below for details. Impact : Please review the...

GLSA-202012-06 : Linux-PAM: Authentication bypass

The remote host is affected by the vulnerability described in GLSA-202012-06 Linux-PAM: Authentication bypass A flaw was found in Linux-Pam in the way it handle empty passwords for non-existing users. Impact : A remote attacker, who only needs to know a non-existing username, could bypass securit...

GLSA-202012-01 : X.Org X Server: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202012-01 X.Org X Server: Multiple vulnerabilities Multiple vulnerabilities have been discovered in X.org X Server. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE...

GLSA-202011-16 : Chromium, Google Chrome: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202011-16 Chromium, Google Chrome: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the CVE identifiers referenced below for details. Impact : Please review the...

GLSA-202011-19 : libexif: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202011-19 libexif: Multiple vulnerabilities Multiple vulnerabilities have been discovered in libexif. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for detail...

GLSA-202011-17 : MIT Kerberos 5: Denial of service

The remote host is affected by the vulnerability described in GLSA-202011-17 MIT Kerberos 5: Denial of service It was discovered that MIT Kerberos network authentication system, krb5, did not properly handle ASN.1-encoded Kerberos messages. Impact : A remote attacker could send a specially crafte...

GLSA-202011-15 : libmaxminddb: Denial of service

The remote host is affected by the vulnerability described in GLSA-202011-15 libmaxminddb: Denial of service libmaxminddb used uninitialised memory when reading from a corrupt database file. Impact : A remote attacker could entice a user to use a specially crafted database with libmaxminddb,...

GLSA-202011-18 : Apache Ant: Insecure temporary file

The remote host is affected by the vulnerability described in GLSA-202011-18 Apache Ant: Insecure temporary file A previous fix for a security vulnerability involving insecure temporary files has been found to be incomplete. Impact : A local attacker could perform symlink attacks to overwrite...

GLSA-202011-06 : Xen: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202011-06 Xen: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Xen. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

GLSA-202011-10 : tmux: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-202011-10 tmux: Buffer overflow A flaw in tmuxs handling of escape characters was discovered which may allow a buffer overflow. Impact : A remote attacker could possibly execute arbitrary code with the privileges of the process, o...

GLSA-202011-07 : Mozilla Firefox: Remote code execution

The remote host is affected by the vulnerability described in GLSA-202011-07 Mozilla Firefox: Remote code execution Invalid assumptions when emitting the the MCallGetProperty opcode in the JavaScript JIT may result in a use-after-free condition. Impact : A remote attacker could possibly execute...

GLSA-202011-11 : Blueman: Local privilege escalation

The remote host is affected by the vulnerability described in GLSA-202011-11 Blueman: Local privilege escalation Where Polkit is not used and the default permissions have been changed on a specific rule file, control of a local DHCP daemon may be possible. Impact : A local attacker may be able to...

GLSA-202011-08 : Wireshark: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202011-08 Wireshark: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Wireshark. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for...

GLSA-202011-09 : QEMU: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202011-09 QEMU: Multiple vulnerabilities Multiple vulnerabilities have been discovered in QEMU. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

GLSA-202011-03 : KPMCore: Root privilege escalation

The remote host is affected by the vulnerability described in GLSA-202011-03 KPMCore: Root privilege escalation Improper checks on the D-Bus request received resulted in improper protection for /etc/fstab. Impact : An attacker could esclate privileges to root by exploiting this vulnerability...

GLSA-202011-05 : libssh: Denial of service

The remote host is affected by the vulnerability described in GLSA-202011-05 libssh: Denial of service libssh was found to have a NULL pointer dereference in tftpserver.c if the function sshbuffernew returns NULL. Impact : An attacker could cause a possible Denial of Service condition. Workaround...

GLSA-202010-08 : Mozilla Firefox, Mozilla Thunderbird: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202010-08 Mozilla Firefox, Mozilla Thunderbird: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Mozilla Firefox and Mozilla Thunderbird. Please review the CVE identifiers referenced below for details...

GLSA-202010-03 : libjpeg-turbo: Information disclosure

The remote host is affected by the vulnerability described in GLSA-202010-03 libjpeg-turbo: Information disclosure It was discovered that libjpeg-turbo incorrectly handled certain PPM files. Impact : A remote attacker could entice a user to open a specially crafted PPM file using an application...