17518 matches found
EulerOS 2.0 SP2 : binutils (EulerOS-SA-2019-1728)
According to the versions of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - binutils: integer overflow leads to heap-based buffer overflow in objdumpCVE-2018-1000876 - An issue was discovered in GNU Binutils 2.32. It i...
Parrot Security 4.7 - Security GNU/Linux Distribution Designed with Cloud Pentesting and IoT Security in Mind
Parrot is a GNU/Linux distribution based on Debian Testing and designed with Security, Development and Privacy in mind. It includes a full portable laboratory for security and digital forensics experts, but it also includes all you need to develop your own software or protect your privacy while...
Hudson CI Detection (Auto Discovery)
The scripts tries to detect a Auto Discovery service of a Hudson CI server and to extract a possible exposed version. Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the G...
CVE-2019-13636
In GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than input files. This affects inp.c and util.c...
CVE-2019-13636
In GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than input files. This affects inp.c and util.c...
AZL-35105 CVE-2019-13636 affecting package patch for versions less than 2.7.6-9
In GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than input files. This affects inp.c and util.c...
ALPINE-CVE-2019-13636
In GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than input files. This affects inp.c and util.c...
Design/Logic Flaw
In GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than input files. This affects inp.c and util.c...
CVE-2019-13636
In GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than input files. This affects inp.c and util.c...
CVE-2019-13636
CVE-2019-13636 affects GNU patch; the vulnerability arises from mishandling of following symlinks in inp.c and util.c in certain cases beyond input files. Public references describe potential for arbitrary file access/overwrite and, per Debian, shell command injection or escape from the working d...
CVE-2019-13636
In GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than input files. This affects inp.c and util.c...
CVE-2019-13636
In GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than input files. This affects inp.c and util.c...
GNU C Library libld Remote Code Execution Vulnerability
The GNU C Library glibc, libc6 is an open-source, free C compiler released under the LGPL license. A security vulnerability exists in libld in the GNU C Library. An attacker can exploit the vulnerability to elevate privileges...
GNU C Library Information Disclosure Vulnerability
The GNU C Library glibc, libc6 is an open-source, free C compiler released under the LGPL license. A security vulnerability exists in glibc in the GNU C Library. An attacker can exploit the vulnerability to guess the heap address of the pthreadcreated thread...
GNU C Library Buffer Overflow Vulnerability (CNVD-2019-23063)
The GNU C Library glibc, libc6 is an open-source, free C compiler released under the LGPL license. A buffer overflow vulnerability exists in nptl in the GNU C Library. The vulnerability arises from a networked system or product performing operations in memory without properly validating data...
CVE-2019-13636
In GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than input files. This affects inp.c and util.c...
GNU C Library Security Bypass Vulnerability
The GNU C Library glibc, libc6 is an open-source, free C compiler released under the LGPL license. A security vulnerability exists in glibc in the GNU C Library. An attacker can exploit this vulnerability to bypass ASLR...
UBUNTU-CVE-2019-13636
In GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than input files. This affects inp.c and util.c...
The vulnerability of the IRC client Irssi for Debian GNU/Linux and Ubuntu systems, related to the use of memory after it is freed, allows a hacker to trigger a service failure or execute arbitrary code.
The vulnerability of the IRC client Irssi for Debian GNU/Linux and Ubuntu stems from the use of memory after it is freed during the disconnection of a node from the previously created network or between two nodes. Exploiting this vulnerability can allow a malicious actor to cause service failures...
CVE-2019-1010025
GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap addresses of pthreadcreated thread. The component is: glibc. NOTE: the vendor's position is "ASLR bypass itself is not a vulnerability...