GLSA-201701-15 : Mozilla Firefox, Thunderbird: Multiple vulnerabilities (SWEET32)

The remote host is affected by the vulnerability described in GLSA-201701-15 Mozilla Firefox, Thunderbird: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Mozilla Firefox and Thunderbird. Please review the CVE identifiers referenced below for details. Impact : A remote...

GLSA-201701-10 : libotr, Pidgin OTR: Remote execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201701-10 libotr, Pidgin OTR: Remote execution of arbitrary code Multiple vulnerabilities exist in both libotr and Pidgin OTR. Please review the CVE identifiers for more information. Impact : A remote attacker could send a special...

GLSA-201701-05 : BusyBox: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201701-05 BusyBox: Denial of Service The recvandprocessclientpkt function in networking/ntpd.c in BusyBox allows remote attackers to cause a Denial of Service CPU and bandwidth consumption via a forged NTP packet, which triggers a...

GLSA-201612-41 : WebKitGTK+: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201612-41 WebKitGTK+: Multiple vulnerabilities Multiple vulnerabilities have been discovered in WebKitGTK+. Please review the CVE identifiers referenced below for details. Impact : A remote attacker can use multiple vectors to...

GLSA-201612-32 : elfutils: Heap-based buffer overflow

The remote host is affected by the vulnerability described in GLSA-201612-32 elfutils: Heap-based buffer overflow An integer overflow, in the checksection function of dwarfbeginelf.c, in the libdw library can lead to a heap-based buffer overflow. Impact : A remote attacker could entice a user to...

GLSA-201612-28 : Docker: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-201612-28 Docker: Privilege escalation Docker does not properly distinguish between numeric UIDs and string usernames. Impact : Local attackers could possibly escalate their privileges. Workaround : There is no known workaround at...

GLSA-201612-22 : Coreutils: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201612-22 Coreutils: Arbitrary code execution A memory corruption flaw in GNU Coreutils parsedatetime function was reported. Applications using parsedatetime, such as touch or date, may accepted untrusted input. Impact : A remote...

GLSA-201612-23 : socat: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201612-23 socat: Multiple vulnerabilities Multiple vulnerabilities have been discovered in socat. Please review the references below for details. Impact : A remote attacker could possibly execute arbitrary code with the privileges...

GLSA-201612-20 : jq: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-201612-20 jq: Buffer overflow An off-by-one error was discovered in the tokenadd function in jvparse.c which triggers a heap-based buffer overflow. Impact : A remote attacker could trick a victim into processing a specially crafte...

GLSA-201612-09 : GD: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201612-09 GD: Multiple vulnerabilities Multiple vulnerabilities have been discovered in GD. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly execute arbitrary code with the...

GLSA-201612-07 : dpkg: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-201612-07 dpkg: Arbitrary code execution Gentoo Linux developer, Hanno Bck, discovered an off-by-one error in the dpkg-deb component of dpkg, the Debian package management system, which triggers a stack-based buffer overflow. Impa...

GLSA-201611-10 : libuv: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-201611-10 libuv: Privilege escalation It was discovered that libuv does not call setgroups before calling setuid/setgid. If this is not called, then even though the uid has been dropped, there may still be groups associated that...

GLSA-201611-06 : xinetd: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-201611-06 xinetd: Privilege escalation Xinetd does not enforce the user and group configuration directives for TCPMUX services, which causes these services to be run as root. Impact : Attackers could escalate privileges outside of...

GLSA-201608-01 : OptiPNG: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201608-01 OptiPNG: Multiple vulnerabilities Multiple vulnerabilities have been discovered in OptiPNG. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to open a special...

GLSA-201607-07 : Chromium: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201607-07 Chromium: Multiple vulnerabilities Multiple vulnerabilities have been discovered in the Chromium web browser. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly...

GLSA-201605-06 : Mozilla Products: Multiple vulnerabilities (Logjam) (SLOTH)

The remote host is affected by the vulnerability described in GLSA-201605-06 Mozilla Products: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Firefox, NSS, NSPR, and Thunderbird. Please review the CVE identifiers referenced below for details. Impact : A remote attacker...

Gentoo Security Advisory GLSA 201604-05

Gentoo Linux Local Security Checks GLSA 201604-05 SPDX-FileCopyrightText: 2016 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Gentoo Security Advisory GLSA 201603-11

Gentoo Linux Local Security Checks GLSA 201603-11 SPDX-FileCopyrightText: 2016 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

GLSA-201603-12 : FlightGear, SimGear: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201603-12 FlightGear, SimGear: Multiple vulnerabilities Multiple format string vulnerabilities in FlightGear and SimGear allow user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via...

Gentoo Security Advisory GLSA 201603-13

Gentoo Linux Local Security Checks SPDX-FileCopyrightText: 2016 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.121455";...