1124 matches found
CVE-2021-20297
A flaw was found in NetworkManager. Setting match.path and activating a profile crashes NetworkManager. The highest threat from this vulnerability is to system availability...
EulerOS Virtualization 2.9.1 : curl (EulerOS-SA-2021-1596)
According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Vulnerability Summary for CVE-2020-8169CVE-2020-8169 - Vulnerability Summary for CVE-2020-8177CVE-2020-8177 - Expired pointer...
EulerOS Virtualization 3.0.6.6 : curl (EulerOS-SA-2021-1466)
According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match...
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2021-1466)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS Virtualization for ARM 64 3.0.6.0 : curl (EulerOS-SA-2021-1548)
According to the versions of the curl packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verificatio...
SUSE SLES12 Security Update : krb5-appl (SUSE-SU-2021:0527-1)
This update for krb5-appl fixes the following issues : CVE-2019-25017: Check the filenames sent by the server match those requested by the client bsc1131109. CVE-2019-25018: Disallow empty incoming filename or ones that refer to the current directory bsc1131109. Note that Tenable Network Security...
EulerOS 2.0 SP3 : curl (EulerOS-SA-2021-1063)
According to the version of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.CVE-2020-8285...
dnsmasq: loose query name check in reply_query() makes forging replies easier for an off-path attacker
A flaw was found in dnsmasq. When getting a reply from a forwarded query, dnsmasq checks in forward.c:replyquery, which is the forwarded query that matches the reply, by only using a weak hash of the query name. Due to the weak hash CRC32 when dnsmasq is compiled without DNSSEC, SHA-1 when it is...
OSV-2016-7 Heap-buffer-overflow in mcopy
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=153 Crash type: Heap-buffer-overflow READ 1 Crash state: mcopy mget match...
OSV-2016-3 UNKNOWN READ in file_regexec
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=143 Crash type: UNKNOWN READ Crash state: fileregexec magiccheck match...
OSV-2017-140 Heap-buffer-overflow in mprint
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1523 Crash type: Heap-buffer-overflow READ 3 Crash state: mprint match filesoftmagic...
OSV-2017-131 Heap-buffer-overflow in mprint
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1516 Crash type: Heap-buffer-overflow READ 2 Crash state: mprint match filesoftmagic...
OSV-2016-1 UNKNOWN READ in mprint
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=282 Crash type: UNKNOWN READ Crash state: mprint match filesoftmagic...
Linux kernel 缓冲区错误漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel that allows an attacker to trigger a denial of service by triggering a fatal error via the Linux kernel's Iptables String...
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2021-1003)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Denial Of Service (DoS)
github.com/tidwall/match is vulnerable to denial of service DoS. The vulnerability exists through the parsing of the pattern of repeated in deepMatch...
EulerOS 2.0 SP9 : curl (EulerOS-SA-2021-1003)
According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match...
EulerOS 2.0 SP9 : curl (EulerOS-SA-2021-1022)
According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match...
iptables bug fix and enhancement update
The iptables utility controls the network packet filtering code in the Linux kernel. Bug Fixes and Enhancements: openshift-sdn reports failure with iptables-restore: CHAINUSERDEL failed Device or resource busy BZ1891880 Improve IP address match performance BZ1894619...