EulerOS 2.0 SP5 : OpenEXR (EulerOS-SA-2021-1219)

According to the versions of the OpenEXR package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - OpenEXR is a high dynamic-range HDR image file format developed by Industrial Light & Magic for use in computer imaging applications. This packa...

Sudo 1.9.5p1 - 'Baron Samedit ' Heap-Based Buffer Overflow Privilege Escalation (1)

Exploit Title: Sudo 1.9.5p1 - 'Baron Samedit ' Heap-Based Buffer Overflow Privilege Escalation 1 Date: 2021-02-02 Exploit Author: West Shepherd Version: Sudo legacy versions from 1.8.2 to 1.8.31p2, stable versions from 1.9.0 to 1.9.5p1. Tested on: Ubuntu 20.04.1 LTS Sudo version 1.8.31 CVE :...

SoftMaker Office PlanMaker Excel document record 0x00fc memory corruption vulnerability

Summary A memory corruption vulnerability exists in the Excel Document SST Record 0x00fc functionality of SoftMaker Software GmbH SoftMaker Office PlanMaker 2021 Revision 1014. A specially crafted malformed file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigg...

Sudo 1.9.5p1 - 'Baron Samedit ' Heap-Based Buffer Overflow Privilege Escalation (2)

Exploit Title: Sudo 1.9.5p1 - 'Baron Samedit ' Heap-Based Buffer Overflow Privilege Escalation 2 Authors and Contributors: cts, help from r4j, debug by nu11secur1ty Date: 30.01.2021 Vendor: https://www.sudo.ws/ Link: https://www.sudo.ws/download.html CVE: CVE-2021-3156 + Source:...

Oracle Linux 7 : perl (ELSA-2021-0343)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-0343 advisory. - Fix CVE-2020-10543 bug 1839272 - Fix CVE-2020-10878 bug 1839275 Tenable has extracted the preceding description block directly from the Oracle Linux...

Moderate: Red Hat Security Advisory: perl security update

An update for perl is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

Huawei EulerOS: Security Advisory for libmaxminddb (EulerOS-SA-2021-1152)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for sudo (EulerOS-SA-2021-1173)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for p11-kit (EulerOS-SA-2021-1161)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Scientific Linux Security Update : perl on SL7.x i686/x86_64 (2021:0343)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2021:0343-1 advisory. - perl: heap-based buffer overflow in regular expression compiler leads to DoS CVE-2020-10543 - perl: corruption of intermediate language state o...

CentOS 8 : gd (CESA-2020:4659)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4659 advisory. - gd: NULL pointer dereference in gdImageClone CVE-2018-14553 - gd: Heap-based buffer overflow in gdImageColorMatch in gdcolormatch.c CVE-2019-6977 - g...

CentOS 8 : libvncserver (CESA-2020:0920)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:0920 advisory. - libvncserver: HandleCursorShape integer overflow resulting in heap-based buffer overflow CVE-2019-15690 - libvncserver: integer overflow and heap-bas...

EulerOS 2.0 SP8 : libmaxminddb (EulerOS-SA-2021-1152)

According to the version of the libmaxminddb package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - libmaxminddb before 1.4.3 has a heap-based buffer over-read in dumpentrydatalist in maxminddb.c.CVE-2020-28241 Note that Tenable Network...

CentOS 8 : libtiff (CESA-2020:4634)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4634 advisory. - libtiff: integer overflow leading to heap-based buffer overflow in tifgetimage.c CVE-2019-17546 Note that Nessus has not tested for this issue but has instead...

EulerOS 2.0 SP8 : dnsmasq (EulerOS-SA-2021-1138)

According to the versions of the dnsmasq packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in the forward.c:replyquery if the...

CentOS 8 : grub2 (CESA-2020:3216)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:3216 advisory. - grub2: Crafted grub.cfg file can lead to arbitrary code execution during boot process CVE-2020-10713 - grub2: grubmalloc does not validate allocation...

CentOS 8 : librabbitmq (CESA-2020:4445)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4445 advisory. - librabbitmq: integer overflow in amqphandleinput in amqpconnection.c leads to heap-based buffer overflow CVE-2019-18609 Note that Nessus has not tested for th...

Sudo 1.9.5p1 - (Baron Samedit) Heap-Based Buffer Overflow Privilege Escalation Exploit (1)

Exploit Title: Sudo 1.9.5p1 - 'Baron Samedit ' Heap-Based Buffer Overflow Privilege Escalation 1 Exploit Author: West Shepherd Version: Sudo legacy versions from 1.8.2 to 1.8.31p2, stable versions from 1.9.0 to 1.9.5p1. Tested on: Ubuntu 20.04.1 LTS Sudo version 1.8.31 CVE : CVE-2021-3156 Credit...

CentOS 8 : jbig2dec (CESA-2020:2897)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2020:2897 advisory. - jbig2dec: heap-based buffer overflow in jbig2imagecompose in jbig2image.c CVE-2020-12268 Note that Nessus has not tested for this issue but has instead relied...

EulerOS 2.0 SP8 : p11-kit (EulerOS-SA-2021-1161)

According to the versions of the p11-kit packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in p11-kit 0.21.1 through 0.23.21. Multiple integer overflows have been discovered in the array allocations in the...