GLSA-201707-06 : virglrenderer: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201707-06 virglrenderer: Multiple vulnerabilities Multiple vulnerabilities have been discovered in virglrenderer. Please review the CVE identifiers referenced below for details. Impact : A local attacker could cause a Denial of...

GLSA-201707-02 : Game Music Emu: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201707-02 Game Music Emu: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Game Music Emu. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to...

GLSA-201706-16 : GNU Wget: Header injection

The remote host is affected by the vulnerability described in GLSA-201706-16 GNU Wget: Header injection It was discovered that there was a header injection vulnerability in GNU Wget which allowed remote attackers to inject arbitrary HTTP headers via CRLF sequences in the host subcomponent of a UR...

GLSA-201706-19 : GNU C Library: Multiple vulnerabilities (Stack Clash)

The remote host is affected by the vulnerability described in GLSA-201706-19 GNU C Library: Multiple vulnerabilities Multiple vulnerabilities have been discovered in the GNU C Library. Please review the CVE identifiers and Qualys security advisory referenced below for details. Impact : An attacke...

GLSA-201706-04 : Git: Security bypass

The remote host is affected by the vulnerability described in GLSA-201706-04 Git: Security bypass Timo Schmid discovered that the Git restricted shell incorrectly filtered allowed commands. Impact : A remote attacker could possibly bypass security restrictions and access sensitive information...

GLSA-201706-09 : FileZilla: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-201706-09 FileZilla: Buffer overflow FileZilla is affected by the same vulnerability as reported in GLSA 201703-03 because the package included a vulnerable copy of PuTTY. Please read the GLSA for PuTTY referenced below for detail...

GLSA-201706-05 : D-Bus: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201706-05 D-Bus: Multiple vulnerabilities Multiple vulnerabilities have been discovered in D-Bus. Please review the original report referenced below for details. Impact : An attacker could possibly overwrite arbitrary files named...

GLSA-201706-01 : MUNGE: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-201706-01 MUNGE: Privilege escalation It was discovered that Gentoos default MUNGE installation suffered from a privilege escalation vulnerability munge user to root due to improper permissions and a runscript which called chown o...

GLSA-201702-32 : Ruby Archive::Tar::Minitar: Directory traversal

The remote host is affected by the vulnerability described in GLSA-201702-32 Ruby Archive::Tar::Minitar: Directory traversal Michal Marek discovered that Ruby Archive::Tar::Minitar is vulnerable to a directory traversal vulnerability. Impact : A remote attacker could entice a user or an automated...

GPL Ghostscript: Multiple vulnerabilities

Background Ghostscript is an interpreter for the PostScript language and for PDF. Description Multiple vulnerabilities have been discovered in GPL Ghostscript and the bundled OpenJPEG. Please review the CVE identifiers and GLSA-201612-26 OpenJPEG referenced below for additional information. Note:...

GLSA-201702-24 : LibVNCServer/LibVNCClient: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201702-24 LibVNCServer/LibVNCClient: Multiple vulnerabilities Multiple vulnerabilities have been discovered in LibVNCServer and LibVNCClient. Please review the CVE identifiers referenced below for details. Impact : A remote attack...

GLSA-201702-19 : TigerVNC: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-201702-19 TigerVNC: Buffer overflow A buffer overflow vulnerability in ModifiablePixelBuffer::fillRect in vncviewer was found. Impact : A remote attacker, utilizing a malicious VNC server, could execute arbitrary code with the...

GLSA-201701-50 : PPP: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-201701-50 PPP: Buffer overflow A buffer overflow was discovered in the rcmksid function in plugins/radius/util.c in PPP when the PID for pppd is greater than 65535. Impact : A remote attacker could cause a Denial of Service...

GLSA-201701-46 : Mozilla Network Security Service (NSS): Multiple vulnerabilities (Logjam) (SLOTH)

The remote host is affected by the vulnerability described in GLSA-201701-46 Mozilla Network Security Service NSS: Multiple vulnerabilities Multiple vulnerabilities have been discovered in NSS. Please review the CVE identifiers and technical papers referenced below for details. Impact : Remote...

GLSA-201701-44 : CVS: Heap-based overflow

The remote host is affected by the vulnerability described in GLSA-201701-44 CVS: Heap-based overflow A heap-based buffer overflow was discovered in the proxyconnect function in src/client.c in CVS. Impact : An attacker, utilizing a remote HTTP proxy server, could cause a Denial of Service...

GLSA-201701-39 : VLC: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-201701-39 VLC: Buffer overflow A buffer overflow was discovered in the DecodeAdpcmImaQT function in modules/codec/adpcm.c in the VideoLAN VLC media player. Impact : Remote attackers, by enticing a user to execute a specially craft...

GLSA-201701-29 : Vim, gVim: Remote execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201701-29 Vim, gVim: Remote execution of arbitrary code Vim and gVim do not properly validate values for the filetype, syntax, and keymap options. Impact : A remote attacker could entice a user to open a specially crafted file usi...

GLSA-201701-27 : 7-Zip: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201701-27 7-Zip: Multiple vulnerabilities Multiple vulnerabilities have been discovered in 7-Zip. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to open a specially...

GLSA-201701-26 : BIND: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201701-26 BIND: Denial of Service A defect in BINDs handling of responses containing a DNAME answer can cause a resolver to exit after encountering an assertion failure in db.c or resolver.c. Impact : A remote attacker could send ...

GLSA-201701-19 : NTFS-3G: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-201701-19 NTFS-3G: Privilege escalation NTFS-3G is affected by the same vulnerability as reported in GLSA 201603-04 when the bundled fuse-lite implementation is used. Impact : A local user could gain root privileges. Workaround :...