Lucene search
K

610 matches found

OSV
OSV
added 2022/02/18 8:29 a.m.3 views

SUSE-SU-2022:0069-2 Security update for libmspack

This update for libmspack fixes the following issues: - CVE-2018-18586: Fixed directory traversal in chmextract by adding anti '../' and leading slash protection bsc1113040...

5.3CVSS5.7AI score0.00606EPSS
Exploits1References3
OPENSUSE Linux
OPENSUSE Linux
added 2022/02/18 12:0 a.m.21 views

Security update for libmspack (low)

openSUSE Security Update: Security update for libmspack Announcement ID: openSUSE-SU-2022:0069-2 Rating: low References: 1113040 Cross-References: CVE-2018-18586 CVSS scores: CVE-2018-18586 NVD : 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Affected Products: openSUSE Leap 15.4 An update that...

5.3CVSS5.8AI score0.00606EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2022/02/09 12:0 a.m.30 views

AlmaLinux 8 : libmspack (ALSA-2020:1686)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2020:1686 advisory. - libmspack 0.9.1alpha is affected by: Buffer Overflow. The impact is: Information Disclosure. The component is: function chmdreadheaders in libmspackfile...

5.5CVSS6.5AI score0.0023EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2022/02/08 12:0 a.m.13 views

openSUSE: Security Advisory for libmspack (openSUSE-SU-2022:0069-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.3CVSS5.8AI score0.00606EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.20 views

Mageia: Security Advisory (MGASA-2019-0248)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.7AI score0.0023EPSS
Exploits1References4
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.29 views

Mageia: Security Advisory (MGASA-2017-0283)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.8AI score0.02813EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.27 views

Mageia: Security Advisory (MGASA-2018-0455)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS6.7AI score0.05833EPSS
Exploits2References6
OpenVAS
OpenVAS
added 2022/01/16 12:0 a.m.13 views

SUSE: Security Advisory (SUSE-SU-2022:0069-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS5.8AI score0.00606EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2022/01/14 12:0 a.m.23 views

SUSE SLED15 / SLES15 Security Update : libmspack (SUSE-SU-2022:0069-1)

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:0069-1 advisory. - DISPUTED chmextract.c in the chmextract sample program, as distributed with libmspack before 0.8alpha, does not protect against...

5.3CVSS6.3AI score0.00606EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2022/01/14 12:0 a.m.18 views

openSUSE 15 Security Update : libmspack (openSUSE-SU-2022:0069-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2022:0069-1 advisory. - DISPUTED chmextract.c in the chmextract sample program, as distributed with libmspack before 0.8alpha, does not protect against absolute/relative...

5.3CVSS6.3AI score0.00606EPSS
Exploits1References4
OSV
OSV
added 2022/01/13 2:12 p.m.2 views

SUSE-SU-2022:0069-1 Security update for libmspack

This update for libmspack fixes the following issues: - CVE-2018-18586: Fixed directory traversal in chmextract by adding anti '../' and leading slash protection bsc1113040...

5.3CVSS5.7AI score0.00606EPSS
Exploits1References3
OSV
OSV
added 2022/01/13 2:12 p.m.6 views

OPENSUSE-SU-2022:0069-1 Security update for libmspack

This update for libmspack fixes the following issues: - CVE-2018-18586: Fixed directory traversal in chmextract by adding anti '../' and leading slash protection bsc1113040...

5.3CVSS6.5AI score0.00606EPSS
Exploits1References3
OPENSUSE Linux
OPENSUSE Linux
added 2022/01/13 12:0 a.m.20 views

Security update for libmspack (low)

openSUSE Security Update: Security update for libmspack Announcement ID: openSUSE-SU-2022:0069-1 Rating: low References: 1113040 Cross-References: CVE-2018-18586 CVSS scores: CVE-2018-18586 NVD : 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Affected Products: openSUSE Leap 15.3 An update that...

5.3CVSS5.8AI score0.00606EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2021/12/02 12:0 a.m.25 views

SUSE SLES11 Security Update : clamav (SUSE-SU-2021:14850-1)

The remote SUSE Linux SLES11 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2021:14850-1 advisory. - An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one error in the CHM PMGI/PMGL chunk number validity check...

6.5CVSS6.6AI score0.00987EPSS
Exploits0References7
OpenVAS
OpenVAS
added 2021/11/01 12:0 a.m.25 views

Debian: Security Advisory (DLA-2805-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.6AI score0.0023EPSS
Exploits1References4
Debian
Debian
added 2021/10/31 7:33 p.m.37 views

[SECURITY] [DLA 2805-1] libmspack security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2805-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk October 31, 2021 https://wiki.debian.org/LTS -...

5.5CVSS6AI score0.0023EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2021/10/31 12:0 a.m.28 views

Debian DLA-2805-1 : libmspack - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2805 advisory. - libmspack 0.9.1alpha is affected by: Buffer Overflow. The impact is: Information Disclosure. The component is: function chmdreadheaders in libmspackfile...

5.5CVSS6.5AI score0.0023EPSS
Exploits1References5
OpenVAS
OpenVAS
added 2021/09/15 12:0 a.m.10 views

Huawei EulerOS: Security Advisory for libmspack (EulerOS-SA-2021-2398)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS5.8AI score0.00606EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2021/09/14 12:0 a.m.22 views

EulerOS 2.0 SP2 : libmspack (EulerOS-SA-2021-2398)

According to the version of the libmspack package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - chmextract.c in the chmextract sample program, as distributed with libmspack before 0.8alpha, does not protect against absolute/relative pathname...

5.3CVSS6.3AI score0.00606EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2021/08/26 12:0 a.m.21 views

openSUSE: Security Advisory for libmspack (openSUSE-SU-2021:1200-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.8CVSS8.1AI score0.04428EPSS
Exploits0References2
Rows per page
Query Builder