GLSA-201908-29 : Dovecot: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201908-29 Dovecot: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Dovecot. Please review the CVE identifiers referenced below for details. Impact : An unauthenticated remote attacker could send a special...

GLSA-201908-16 : ProFTPD: Remote code execution

The remote host is affected by the vulnerability described in GLSA-201908-16 ProFTPD: Remote code execution It was discovered that ProFTPDs modcopy module does not properly restrict privileges for anonymous users. Impact : A remote attacker, by anonymously uploading a malicious file, could possib...

GLSA-201908-13 : LibreOffice: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201908-13 LibreOffice: Multiple vulnerabilities Multiple vulnerabilities have been discovered in LibreOffice. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers fo...

GLSA-201811-05 : PHProjekt: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201811-05 PHProjekt: Multiple vulnerabilities Multiple vulnerabilities have been discovered in PHProjekt due to embedded Zend Framework. Please review the GLSA identifiers referenced below for details. Impact : Remote attackers...

GLSA-201904-03 : Unbound: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201904-03 Unbound: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Unbound. Please review the referenced bugs for details. Impact : Please review the referenced bugs for details. Workaround : There is no...

GLSA-201903-02 : Zsh: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201903-02 Zsh: User-assisted execution of arbitrary code Two input validation errors have been discovered in how Zsh parses scripts: Parsing a malformed shebang line could cause Zsh to call a program listed in the second line...

GLSA-201812-05 : EDE: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-201812-05 EDE: Privilege escalation An untrusted search path vulnerability was discovered in EDE. Impact : A local attacker could escalate his privileges via a specially crafted Lisp expression in a Project.ede file in the directo...

GLSA-201812-04 : WebkitGTK+: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201812-04 WebkitGTK+: Multiple vulnerabilities Multiple vulnerabilities have been discovered in WebKitGTK+. Please review the referenced CVE identifiers for details. Impact : A remote attacker could execute arbitrary commands or...

GLSA-201806-08 : file: Denial of service

The remote host is affected by the vulnerability described in GLSA-201806-08 file: Denial of service File does not properly utilize the docorenote function in readelf.c in libmagic.a. Impact : A remote attacker could send a specially crafted ELF file possibly resulting in a Denial of Service...

GLSA-201805-09 : Shadow: security bypass

The remote host is affected by the vulnerability described in GLSA-201805-09 Shadow: security bypass A local attacker could possibly bypass security restrictions if an administrator used group blacklisting to restrict access to file system paths. Impact : A local attacker could possibly bypass...

GLSA-201805-06 : Chromium, Google Chrome: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201805-06 Chromium, Google Chrome: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the referenced CVE identifiers and Google Chrome Releases for details. Impact :...

GLSA-201804-01 : libxslt: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201804-01 libxslt: Multiple vulnerabilities Multiple vulnerabilities have been discovered in libxslt. Please review the CVE identifiers referenced below for details. Impact : A remote attacker, via a crafted HTML page, could...

GLSA-201803-12 : BusyBox: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201803-12 BusyBox: Multiple vulnerabilities Multiple vulnerabilities have been discovered in BusyBox. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly execute arbitrary code...

GLSA-201803-03 : Go: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201803-03 Go: User-assisted execution of arbitrary code A command injection flaw was discovered in the source code build phase because of the go get command, which does not block -fplugin= and -plugin arguments. Impact : A remote...

GLSA-201711-03 : hostapd and wpa_supplicant: Key Reinstallation (KRACK) attacks (KRACK)

The remote host is affected by the vulnerability described in GLSA-201711-03 hostapd and wpasupplicant: Key Reinstallation KRACK attacks WiFi Protected Access WPA and WPA2 and its associated technologies are all vulnerable to the KRACK attacks. Please review the referenced CVE identifiers for...

GLSA-201710-21 : Kodi: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201710-21 Kodi: Arbitrary code execution Kodi is vulnerable due to shipping with an embedded version of UnRAR. Please review the referenced CVE identifier for details. Impact : A remote attacker, by enticing a user to process a...

GLSA-201710-16 : Shadow: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-201710-16 Shadow: Buffer overflow Malformed input in the newusers tool may produce crashes and other unspecified behaviors. Impact : A remote attacker could possibly cause a Denial of Service condition or bypass privilege boundari...

GLSA-201709-20 : Postfix: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-201709-20 Postfix: Privilege escalation By default, Berkeley DB reads a DBCONFIG configuration file from the current working directory. This is an undocumented behavior. Impact : A local attacker, by using a specially crafted...

GLSA-201709-01 : MCollective: Remote Code Execution

The remote host is affected by the vulnerability described in GLSA-201709-01 MCollective: Remote Code Execution A vulnerability was discovered in MCollective which allowed for deserialized YAML from agents without calling safeload. This allows the potential for arbitrary code execution on the...

GLSA-201707-13 : libcroco: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201707-13 libcroco: Multiple vulnerabilities Multiple vulnerabilities have been discovered in libcroco. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to open a...