GLSA-202009-01 : GnuTLS: Denial of service

The remote host is affected by the vulnerability described in GLSA-202009-01 GnuTLS: Denial of service It was found that GnuTLS didnt handle norenegotiation alert properly. Impact : A remote attacker could entice a user to connect to a malicious TLS endpoint using an application linked against...

GLSA-202008-03 : Ark: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-202008-03 Ark: Arbitrary code execution A maliciously crafted archive with ../ in the file paths could install files anywhere in the users home directory upon extraction. Impact : A remote attacker could entice a user to open a...

GLSA-202007-31 : Icinga: Root privilege escalation

The remote host is affected by the vulnerability described in GLSA-202007-31 Icinga: Root privilege escalation It was discovered that Icingas installed files have insecure permissions, possibly allowing root privilege escalation. Impact : A local attacker could escalate privileges to root...

GLSA-202007-46 : D-Bus: Denial of service

The remote host is affected by the vulnerability described in GLSA-202007-46 D-Bus: Denial of service D-Bus does not correctly dispose of old connections meaning that it is possible for D-Bus to hit a connection limit. Impact : An attacker could cause a possible Denial of Service condition...

GLSA-202007-21 : Libreswan: Denial of service

The remote host is affected by the vulnerability described in GLSA-202007-21 Libreswan: Denial of service As a result of a bug in handling certain bogus encrypted IKEv1, while building a log message that the packet has been dropped, a NULL pointer dereference causes Libreswan to crash and restart...

GLSA-202007-25 : arpwatch: Root privilege escalation

The remote host is affected by the vulnerability described in GLSA-202007-25 arpwatch: Root privilege escalation It was discovered that Gentoos arpwatch ebuild made excessive permission operations on its data directories, possibly changing ownership of unintended files. This only affects OpenRC...

GLSA-202006-04 : glibc: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202006-04 glibc: Multiple vulnerabilities Multiple vulnerabilities have been discovered in glibc. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

GLSA-202006-14 : PEAR Archive_Tar: Remote code execution vulnerability

The remote host is affected by the vulnerability described in GLSA-202006-14 PEAR ArchiveTar: Remote code execution vulnerability An issue was discovered in the PEAR module ArchiveTars handling of file paths within Tar achives. Impact : A local or remote attacker could possibly execute arbitrary...

GLSA-202004-09 : Chromium, Google Chrome: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202004-09 Chromium, Google Chrome: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the referenced CVE identifiers for details. Impact : A remote attacker could...

GLSA-202004-05 : ledger: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202004-05 ledger: Multiple vulnerabilities Multiple vulnerabilities have been discovered in ledger. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to process a...

GLSA-202003-62 : GNU Screen: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-202003-62 GNU Screen: Buffer overflow A buffer overflow was found in the way GNU Screen treated the special escape OSC 49. Impact : A remote attacker, by writing a specially crafted string of characters to a GNU Screen window, cou...

GLSA-202003-54 : Pure-FTPd: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202003-54 Pure-FTPd: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Pure-FTPd. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly cause a Denial of...

GLSA-202003-53 : Chromium, Google Chrome: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202003-53 Chromium, Google Chrome: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the referenced CVE identifiers for details. Impact : A remote attacker could...

GLSA-202003-55 : Zsh: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-202003-55 Zsh: Privilege escalation It was discovered that Zsh was insecure dropping privileges when unsetting PRIVILEGED option. Impact : An attacker could escalate privileges. Workaround : There is no known workaround at this...

GLSA-202003-44 : Binary diff: Heap-based buffer overflow

The remote host is affected by the vulnerability described in GLSA-202003-44 Binary diff: Heap-based buffer overflow It was discovered that the implementation of bspatch did not check for a negative value on numbers of bytes read from the diff and extra streams. Impact : A remote attacker could...

GLSA-202003-38 : PECL Imagick: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-202003-38 PECL Imagick: Arbitrary code execution An out-of-bounds write vulnerability was discovered in the Imagick PHP extension. Impact : A remote attacker, able to upload specially crafted images which will get processed by...

GLSA-202003-19 : PPP: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-202003-19 PPP: Buffer overflow It was discovered that bounds check in PPP for the rhostname was improperly constructed in the EAP request and response functions. Impact : A remote attacker, by sending specially crafted...

GLSA-202003-04 : Vim, gVim: Remote execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-202003-04 Vim, gVim: Remote execution of arbitrary code It was found that the :source! command was not restricted by the sandbox mode. If modeline was explicitly enabled, opening a specially crafted text file in vim could result i...

GLSA-202003-05 : e2fsprogs: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-202003-05 e2fsprogs: Arbitrary code execution It was discovered that e2fsprogs incorrectly handled certain ext4 partitions. Impact : A remote attacker could entice a user to process a specially crafted corrupted file system using...

GLSA-201909-02 : VLC: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201909-02 VLC: Multiple vulnerabilities Multiple vulnerabilities have been discovered in VLC. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...