12498 matches found
EulerOS 2.0 SP9 : openldap (EulerOS-SA-2021-1250)
According to the versions of the openldap packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate Exact Assertion processing, resultin...
EulerOS 2.0 SP9 : qemu (EulerOS-SA-2021-1256)
According to the versions of the qemu package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In QEMU through 5.0.0, an integer overflow was found in the SM501 display driver implementation. This flaw occurs in the COPYAREA macro while...
Huawei EulerOS: Security Advisory for qemu (EulerOS-SA-2021-1275)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP9 : openldap (EulerOS-SA-2021-1269)
According to the versions of the openldap packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate Exact Assertion processing, resultin...
OESA-2021-1017 thrift security update
The Apache Thrift software framework for cross-language services development combines a software stack with a code generation engine to build services that work efficiently and seamlessly between C++, Java, Python, and other languages.\r\n\r\n Security Fixes:\r\n\r\n In Apache Thrift all versions...
pfSense 2.4.x < 2.4.5-p1 Multiple Vulnerabilities
According to its self-reported version number, the remote pfSense install is a version 2.4.x prior to 2.4.5-p1. It is, therefore, affected by the following vulnerabilities in its subcomponents: - Unbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an 'NXNSAttack' issue...
Denial Of Service (DoS)
pygments is vulnerable to denial of service DoS. The vulnerability exists through an infinite loop in the SML lexer through the lookahead-only regular expression pattern used...
Huawei EulerOS: Security Advisory for perl-Convert-ASN1 (EulerOS-SA-2021-1162)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP8 : perl-Convert-ASN1 (EulerOS-SA-2021-1162)
According to the version of the perl-Convert-ASN1 package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - perl-Convert-ASN1 aka the Convert::ASN1 module for Perl through 0.27 allows remote attackers to cause an infinite loop via unexpected...
CentOS 8 : openwsman (CESA-2020:4689)
The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4689 advisory. - openwsman: Infinite loop in processconnection allows denial of service CVE-2019-3833 Note that Nessus has not tested for this issue but has instead relied onl...
CentOS 8 : python27:2.7 (CESA-2020:4654)
The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4654 advisory. - python: infinite loop in the tarfile module via crafted TAR archive CVE-2019-20907 - python-pip: directory traversal in downloadhttpurl function in...
CentOS 8 : python3 (CESA-2020:4433)
The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4433 advisory. - python: XSS vulnerability in the documentation XML-RPC server in servertitle field CVE-2019-16935 - python: infinite loop in the tarfile module via...
CentOS 8 : container-tools:rhel8 (CESA-2020:4694)
The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4694 advisory. - containernetworking/plugins: IPv6 router advertisements allow for MitM attacks on IPv4 clusters CVE-2020-10749 - QEMU: slirp: networking out-of-bound...
CentOS 8 : libxml2 (CESA-2020:4479)
The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4479 advisory. - libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c CVE-2019-19956 - libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c...
CentOS 8 : dotnet (CESA-2019:1259)
The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:1259 advisory. - dotnet: NuGet Tampering Vulnerability CVE-2019-0757 - dotnet: timeouts for regular expressions are not enforced CVE-2019-0820 - dotnet: infinite loop...
CVE-2020-36227
A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancelextop Cancel operation, resulting in denial of service...
DEBIAN-CVE-2020-36227
A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancelextop Cancel operation, resulting in denial of service...
ALPINE-CVE-2020-36227
A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancelextop Cancel operation, resulting in denial of service...
