11490 matches found
CVE-2022-32745
A flaw was found in Samba. Samba AD users can cause the server to access uninitialized data with an LDAP add or modify the request, usually resulting in a segmentation fault...
CVE-2022-32745
CVE-2022-32745 is a Samba flaw in the Samba AD LDAP server where LDAP add/modify requests can cause the server to access uninitialized data, usually triggering a segmentation fault. Affected are Samba AD users; the underlying issue is uninitialized data access. The issue is mitigated by upgrading...
CVE-2022-32746
A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in a use-after-free issue. This issue is only possible when modifying certain privileged attributes, such as userAccountControl...
CVE-2022-32745
A flaw was found in Samba. Samba AD users can cause the server to access uninitialized data with an LDAP add or modify the request, usually resulting in a segmentation fault...
CVE-2022-32746
CVE-2022-32746 affects the Samba AD LDAP server, specifically the AD DC database audit logging module, enabling a use-after-free when modifying privileged attributes (e.g., userAccountControl). The issue is triggered by accessing LDAP message values freed by a preceding database module. Impact de...
Moderate: Red Hat Security Advisory: curl security update
An update for curl is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...
RLSA-2022:6159 Moderate: curl security update
The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fixes: curl: HTTP compression denial of service CVE-2022-32206 curl: FTP-KRB bad message verification CVE-2022-32208 For more...
curl security update
An update is available for curl. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The curl packages provide the libcurl library and the curl utility for downloadi...
Apache Flume input validation error vulnerability
Apache Flume is a distributed, reliable and available service from the Apache Foundation, USA. Used to efficiently collect, aggregate, and move large amounts of log data, versions of Apache Flume prior to 1.4.0 through 1.10.0 contain a security vulnerability that stems from vulnerability to remot...
Moderate: curl security update
The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fixes: curl: HTTP compression denial of service CVE-2022-32206 curl: Unpreserved file permissions CVE-2022-32207 curl: FTP-KRB bad...
ALSA-2022:6159 Moderate: curl security update
The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fixes: curl: HTTP compression denial of service CVE-2022-32206 curl: FTP-KRB bad message verification CVE-2022-32208 For more...
ALSA-2022:6157 Moderate: curl security update
The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fixes: curl: HTTP compression denial of service CVE-2022-32206 curl: Unpreserved file permissions CVE-2022-32207 curl: FTP-KRB bad...
Moderate: curl security update
The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fixes: curl: HTTP compression denial of service CVE-2022-32206 curl: FTP-KRB bad message verification CVE-2022-32208 For more...
CVE-2021-3670
MaxQueryDuration not honoured in Samba AD DC LDAP...
ALPINE-CVE-2021-3670
MaxQueryDuration not honoured in Samba AD DC LDAP...
CVE-2021-3670
MaxQueryDuration not honoured in Samba AD DC LDAP...
Design/Logic Flaw
MaxQueryDuration not honoured in Samba AD DC LDAP...
CVE-2021-3670
The CVE-2021-3670 issue concerns the Samba ldb LDAP server: MaxQueryDuration is not honoured in the AD DC LDAP path, allowing potential denial-of-service by overloading LDAP. Affected: Samba’s ldb/LDAP component; root cause is LDAP query duration not being enforced. Impact: DoS via excessive LDAP...
