Security Vulnerabilities fixed in Firefox 83 — Mozilla

A parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire, even after sanitization. An attacker already capable of exploiting an XSS vulnerability in privileged internal pages could have used this attack to bypass our built-in sanitizer. Incorrect bookkeepi...

openSUSE Security Update : apache-commons-httpclient (openSUSE-2020-1875)

This update for apache-commons-httpclient fixes the following issues : - http/conn/ssl/SSLConnectionSocketFactory.java ignores the http.socket.timeout configuration setting during an SSL handshake, which allows remote attackers to cause a denial of service HTTPS call hang via unspecified vectors...

CVE-2020-25673

A vulnerability was found in Linux kernel where non-blocking socket in llcpsockconnect leads to leak and eventually hanging-up the system...

CVE-2020-25673

A vulnerability was found in Linux kernel where non-blocking socket in llcpsockconnect leads to leak and eventually hanging-up the system...

MariaDB 10.2.0 < 10.2.35 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.2.35. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.2.35 advisory. - With MariaDB running on Windows, when local clients connect to the server over named pipes, it's possible for an unprivileged us...

UBUNTU-CVE-2020-25673

A vulnerability was found in Linux kernel where non-blocking socket in llcpsockconnect leads to leak and eventually hanging-up the system...

USN-4603-1 mariadb-10.1, mariadb-10.3 vulnerabilities

It was discovered that MariaDB didn't properly validate the content of a packet received from a server. A remote attacker could use this vulnerability to sent a specialy crafted file to cause a denial of service. CVE-2020-13249 It was discovered that MariaDB has other security issues. An attacker...

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Charsets). Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

...

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS). Supported versions that are affected are 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

...

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2020-59065)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. An unspecified vulnerability exists in the Server: PS component of Oracle MySQL Server 8.0.21 and earlier versions. An attacker could exploit this...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2020-59064)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. An unspecified vulnerability exists in the Server: Security: Encryption component of Oracle MySQL Server 8.0.20 and earlier. An attacker can exploit...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2020-59062)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. An unspecified vulnerability exists in the Server: Stored Procedure component of Oracle MySQL Server 5.6.49, 5.7.31, 8.0.21 and earlier versions. An...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2020-59061)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. An unspecified vulnerability exists in the Server: X Plugin component of Oracle MySQL Server 8.0.21 and earlier. An attacker can exploit this...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2020-59063)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. An unspecified vulnerability exists in the Server: Security: LDAP Auth component of Oracle MySQL Server 5.7.31, 8.0.21 and earlier versions. An...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2020-59059)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. An unspecified vulnerability exists in the Server: Logging component of Oracle MySQL Server 8.0.21 and earlier. An attacker could exploit this...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2020-58236)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the Server: Optimizer component of Oracle MySQL Server 8.0.21 and earlier versions. An attacker could exploit this...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2020-58232)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the Server: Optimizer component of Oracle MySQL Server 8.0.21 and earlier versions. An attacker could exploit this...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2020-58231)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the Server: Optimizer component of Oracle MySQL Server 8.0.21 and earlier versions. An attacker could exploit this...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2020-58242)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the Server: FTS component of Oracle MySQL Server 8.0.21 and earlier versions. An attacker could exploit this...