EUVD-2017-16501

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2017-7480

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rkhunter versions before 1.4.4 are vulnerable to file download over insecure channel when doing mirror update resulting into potential remote code execution...

SUSE CVE-2017-7480

rkhunter versions before 1.4.4 are vulnerable to file download over insecure channel when doing mirror update resulting into potential remote code execution...

PT-2022-11409 · Qemu +5 · Qemu +5

Name of the Vulnerable Software and Affected Versions: QEMU versions prior to 6.2.0 Description: A NULL pointer dereference issue was found in the block mirror layer of QEMU. The self pointer is dereferenced in mirror wait on conflicts without ensuring that it's not NULL. A malicious unprivileged...

Remote code execution

rkhunter versions before 1.4.4 are vulnerable to file download over insecure channel when doing mirror update resulting into potential remote code execution...

DEBIAN-CVE-2017-7480

rkhunter versions before 1.4.4 are vulnerable to file download over insecure channel when doing mirror update resulting into potential remote code execution...

CVE-2017-7480

rkhunter versions before 1.4.4 are vulnerable to file download over insecure channel when doing mirror update resulting into potential remote code execution...

CVE-2017-7480

rkhunter versions before 1.4.4 are vulnerable to file download over insecure channel when doing mirror update resulting into potential remote code execution...

CVE-2017-7480

CVE-2017-7480 affects rkhunter = 1.4.4 (or apply vendor-provided fixes/patches) to disable insecure behavior and ensure updates are performed securely. Exploit details and active exploitation status are not provided in the supplied documents.

PT-2017-17763

Name of the Vulnerable Software and Affected Versions rkhunter versions prior to 1.4.4 Description The issue allows for file download over an insecure channel when performing a mirror update, potentially resulting in remote code execution. Recommendations For versions prior to 1.4.4, update to...

CVE-2017-7480: Channel Accessible by Non-Endpoint

rkhunter versions before 1.4.4 are vulnerable to file download over insecure channel when doing mirror update resulting into potential remote code execution...