GLSA-202105-20 : Dnsmasq: DNS cache poisoning

The remote host is affected by the vulnerability described in GLSA-202105-20 Dnsmasq: DNS cache poisoning It was discovered that Dnsmasq, when configured with --server=@ or similar e.g. through dbus, configured a fixed UDP port for all outgoing queries to the specified upstream DNS server. Impact...

GLSA-202107-15 : blktrace: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-202107-15 blktrace: Buffer overflow A crafted file could cause a buffer overflow in the devmapread function because the device and devno arrays are too small. Impact : A remote attacker could entice a user to open a specially...

GLSA-202107-18 : BladeEnc: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-202107-18 BladeEnc: Buffer overflow A crafted file could cause a buffer overflow in the iterationloop function in BladeEnc. Impact : A remote attacker could entice a user to open a specially crafted using BladeEnc, possibly...

GLSA-202107-04 : Graphviz: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202107-04 Graphviz: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Graphviz. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to process a...

GLSA-202107-06 : Chromium, Google Chrome: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202107-06 Chromium, Google Chrome: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the CVE identifiers referenced below for details. Impact : A remote attacker...

GLSA-202107-14 : rclone: Weak random number generation

The remote host is affected by the vulnerability described in GLSA-202107-14 rclone: Weak random number generation Passwords generated with rclone were insecurely generated and are vulnerable to brute-force attacks. Impact : Data kept secret with a password generated by rclone may be disclosed to...

GLSA-202105-11 : GNU Screen: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-202105-11 GNU Screen: User-assisted execution of arbitrary code It was discovered that GNU screen did not properly handle certain UTF-8 character sequences. Impact : A remote attacker could entice a user to run a program where...

GLSA-202105-09 : BusyBox: Denial of service

The remote host is affected by the vulnerability described in GLSA-202105-09 BusyBox: Denial of service It was discovered that BusyBox mishandled the error bit on the huftbuild result pointer when decompressing GZIP compressed data. Impact : A remote attacker could entice a user to open a special...

GLSA-202105-05 : Mutt, NeoMutt: Denial of service

The remote host is affected by the vulnerability described in GLSA-202105-05 Mutt, NeoMutt: Denial of service It was discovered that Mutt, and NeoMutt did not properly handle certain situations where an IMAP sequence set ends with a comma. Impact : A remote attacker could entice a user to connect...

GLSA-202105-03 : GPT fdisk: Integer underflow

The remote host is affected by the vulnerability described in GLSA-202105-03 GPT fdisk: Integer underflow It was discovered that ReadLogicalParts function in basicmbr.cc was missing a bounds check. Impact : A local attacker could entice a user to insert a malicious formatted block device USB stic...

GLSA-202012-21 : Mozilla Network Security Service (NSS): Denial of service

The remote host is affected by the vulnerability described in GLSA-202012-21 Mozilla Network Security Service NSS: Denial of service A flaw was found in the way Mozilla Network Security Service NSS handled CCS ChangeCipherSpec messages in TLS 1.3. Impact : A remote attacker could send multiple...

GLSA-202105-14 : Squid: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202105-14 Squid: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Squid. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could send a specially crafted request,...

GLSA-202104-07 : ClamAV: Denial of service

The remote host is affected by the vulnerability described in GLSA-202104-07 ClamAV: Denial of service A vulnerability has been discovered in ClamAV. Please review the CVE identifier referenced below for details. Impact : A remote attacker could cause ClamAV to scan a specially crafted file,...

GLSA-202101-18 : Python: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202101-18 Python: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Python. Please review the bugs referenced below for details. Impact : A remote attacker could possibly execute arbitrary code with the...

GLSA-202012-17 : D-Bus: Denial of service

The remote host is affected by the vulnerability described in GLSA-202012-17 D-Bus: Denial of service It was discovered that D-Bus did not properly handle the situation when two usernames have the same numeric UID. Impact : An attacker could possibly cause a Denial of Service condition or trigger...

GLSA-202012-03 : Mozilla Firefox: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202012-03 Mozilla Firefox: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Mozilla Firefox. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE...

GLSA-202011-17 : MIT Kerberos 5: Denial of service

The remote host is affected by the vulnerability described in GLSA-202011-17 MIT Kerberos 5: Denial of service It was discovered that MIT Kerberos network authentication system, krb5, did not properly handle ASN.1-encoded Kerberos messages. Impact : A remote attacker could send a specially crafte...

GLSA-202011-14 : MariaDB: Remote code execution

The remote host is affected by the vulnerability described in GLSA-202011-14 MariaDB: Remote code execution It was discovered that MariaDB did not properly validate the content of a packet received from a server. Impact : A remote attacker could send a specially crafted packet to WSREP service,...

GLSA-202011-01 : BlueZ: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-202011-01 BlueZ: Arbitrary code execution It was discovered that there was a double-free vulnerability in Bluez after the service discovery which occurs after a Bluetoth Low Energy BLE connection has been established to a device...

GLSA-202011-03 : KPMCore: Root privilege escalation

The remote host is affected by the vulnerability described in GLSA-202011-03 KPMCore: Root privilege escalation Improper checks on the D-Bus request received resulted in improper protection for /etc/fstab. Impact : An attacker could esclate privileges to root by exploiting this vulnerability...