17598 matches found
GNU LibreDWG Heap Buffer Overflow Vulnerability
GNU LibreDWG is a GNU Project C library for working with DWG files. A buffer overflow vulnerability exists in the 'dwgdecodeeeddata' function of the decode.c file in GNU LibreDWG version 0.7 and version 0.7.1645. An attacker could exploit this vulnerability to cause a denial of service...
GNU LibreDWG Buffer Overflow Vulnerability
GNU LibreDWG is a GNU Project C library for working with DWG files. A buffer overflow vulnerability exists in the 'dwgdxfLTYPE' function of the dwg.spec file in GNU LibreDWG version 0.7 and 0.7.1645, which can be exploited by an attacker to cause a denial of service...
GLSA-201903-09 : GNU C Library: Arbitrary descriptor allocation
The remote host is affected by the vulnerability described in GLSA-201903-09 GNU C Library: Arbitrary descriptor allocation A vulnerability was discovered in the GNU C Library functions xdrbytes and xdrstring. Impact : A remote attacker, by sending a crafted UDP packet, could cause a Denial of...
GNU LibreDWG Buffer Overflow Vulnerability (CNVD-2019-12552)
GNU LibreDWG is a GNU Project C library for working with DWG files. A buffer overflow vulnerability exists in the 'bitreadB' function of the bits.c file in GNU LibreDWG version 0.7 and 0.7.1645. An attacker could exploit this vulnerability to cause a denial of service or disclose information...
Moderate: Red Hat Security Advisory: cockpit security update
An update for cockpit is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
Oracle Linux 7 : cockpit (ELSA-2019-0482)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-0482 advisory. 173.2-1.0.1 - turn off display of subscriptions menu item in GUI - Drop subscription-manager requirement since we do not ship it [email protected] - Remove...
Fedora Update for kernel FEDORA-2019-196ab64d65
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
GLSA-201903-08 : GNU Wget: Password and metadata leak
The remote host is affected by the vulnerability described in GLSA-201903-08 GNU Wget: Password and metadata leak A vulnerability was discovered in GNU Wgets filemetadata in xattr.c. Impact : A local attacker could obtain sensitive information to include credentials. Workaround : There is no know...
GNU Wget: Password and metadata leak
Background GNU Wget is a free software package for retrieving files using HTTP, HTTPS and FTP, the most widely-used Internet protocols. Description A vulnerability was discovered in GNU Wget’s filemetadata in xattr.c. Impact A local attacker could obtain sensitive information to include...
Fedora Update for evolution FEDORA-2019-fc866e9156
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Security Bulletin: GNU Tar sparse_dump_region function denial of service affects IBM Spectrum LSF Application Center
Summary GNU Tar sparsedumpregion function denial of service affects IBM Spectrum LSF Application Center Vulnerability Details CVEID: CVE-2018-20482 DESCRIPTION: GNU Tar sparsedumpregion function denial of service CVSS Base Score: 3.3 CVSS Temporal Score: See for the current score CVSS Environment...
EulerOS Virtualization 2.5.2 : wget (EulerOS-SA-2019-1085)
According to the version of the wget package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - GNU Wget before 1.19.5 is prone to a cookie injection vulnerability in the respnew function in http.c via a \r\n sequence in a...
WordPress Wise Chat Plugin < 2.7 Mashandling of External Links Vulnerability
The WordPress plugin Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the...
Security Bulletin: IBM QRadar SIEM is vulnerable to publicly disclosed vulnerability from GNU glibc (CVE-2018-11237)
Summary Publicly disclosed vulnerability from GNU glibc Vulnerability Details CVEID: CVE-2018-11237 Description: GNU glibc is vulnerable to a buffer overflow, caused by improper bounds of checking by the mempcpy function. By sending a specially-crafted request, a remote attacker could overflow a...
CVE-2019-9192
In the GNU C Library aka glibc or libc6 through 2.29, checkdstlimitscalcpos1 in posix/regexec.c has Uncontrolled Recursion, as demonstrated by '|\\1\\1' in grep, a different issue than CVE-2018-20796. NOTE: the software maintainer disputes that this is a vulnerability because the behavior occurs...
CVE-2019-9169
In the GNU C Library aka glibc or libc6 through 2.29, proceednextnode in posix/regexec.c has a heap-based buffer over-read via an attempted case-insensitive regular-expression match...
GNU PSPP Denial of Service Vulnerability
GNU PSPP is the program used for statistical analysis of sampling data. A security vulnerability exists in the writelongstringmissingvalues function in data/sys-file-writer.c in libdata.a in GNU PSPP 1.2.0. An attacker could exploit this vulnerability to cause a denial of service...
Unspecified Vulnerability in GNU C Library (CNVD-2019-22412)
The GNU C Library glibc, libc6 is an open-source, free C compiler released under the LGPL license. An unspecified vulnerability exists in the 'checkdstlimitscalcpos1' function in the posix/regexec.c file in GNU C Library version 2.29 and earlier. An attacker could exploit this vulnerability to...
