5597 matches found
apache-commons-configuration: Apache Commons Configuration insecure interpolation defaults
A flaw was found in Apache Commons Configuration's variable interpolation, which by default included several lookup actions that could permit script invocation on remote servers. This issue could allow an attacker to use one of these actions to send a request to execute arbitrary code on the serv...
Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2022-2501)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2022-34723 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0 Description: The issue is related to the cgroup get from id function, which fails to check if the looked-up kn is a directory. This problem was introduced in version v5.14 and is fixed in Linux Kernel versi...
EulerOS Virtualization 3.0.6.6 : glibc (EulerOS-SA-2022-2501)
According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The nameserver caching daemon nscd in the GNU C Library aka glibc or libc6 2.29 through 2.33, when processing a request for netgro...
DEBIAN-CVE-2022-2928
In ISC DHCP 4.4.0 - 4.4.3, ISC DHCP 4.1-ESV-R1 - 4.1-ESV-R16-P1, when the function optioncodehashlookup is called from addoption, it increases the option's refcount field. However, there is not a corresponding call to optiondereference to decrement the refcount field. The function addoption is on...
Unable to detect AD forest while creating machine catalog in Citrix DaaS
Unable to detect AD Forests with two domains abc.loc and xyz.loc in the Citrix Cloud environment while creating a machine catalog with below error - ErrorDetails":"Error Id: XDAPI:6E90CBED\r\n\r\nException:\r\nDesktopStudioErrorId : ExceptionThrown\r\nException : System.InvalidOperationException:...
[SECURITY] Fedora 35 Update: squid-5.7-1.fc35
Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DN...
[SECURITY] Fedora 36 Update: squid-5.7-1.fc36
Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DN...
SUSE: Security Advisory (SUSE-SU-2022:3500-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2022:3499-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 37 Update: squid-5.7-1.fc37
Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DN...
PT-2022-34640 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.68 Description: A memory leak issue was discovered when using the debugfs lookup function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions pri...
PT-2022-34608 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.9 Description: A memory leak issue was discovered when using the debugfs lookup function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prio...
CVE-2022-3204
A vulnerability named 'Non-Responsive Delegation Attack' NRDelegation Attack has been discovered in various DNS resolving software. The NRDelegation Attack works by having a malicious delegation with a considerable number of non responsive nameservers. The attack starts by querying a resolver for...
PT-2025-38167
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The dwc3 get properties function in the Linux kernel contains memory leaks during error handling. Specifically, the function calls power supply get by nameusb psy name and requires...
hunspell:affdicfuzzer: Stack-buffer-overflow in HashMgr::lookup
Project: https://github.com/hunspell/hunspell.git Detailed Report: https://oss-fuzz.com/testcase?key=5122351003467776 Project: hunspell Fuzzing Engine: libFuzzer Fuzz Target: affdicfuzzer Job Type: libfuzzerasanhunspell Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address:...
PT-2022-33414 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue is related to the ASoC Intel avs module, where a lookup table is used to create modules. The actual impact and attack plausibility have not yet been proven. Recommendations: For...
libbfd Heap Buffer Overflow DoS
The vulnerability of the libbfd library’s bfdhashlookup function in the GNU Binutils development environment is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...
Denial of Service (DoS)
Overview Affected versions of this package are vulnerable to Denial of Service DoS in the elflookup function in plxelf.cpp via a crafted Mach-O file. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its intended and legitimate users. Unlike...