Lucene search
K

213 matches found

AlpineLinux
AlpineLinux
‱added 2022/02/21 12:0 a.m.‱45 views

CVE-2022-0563

A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an "INPUTRC" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from t...

5.5CVSS5.6AI score0.00025EPSS
Exploits0
Vulnrichment
Vulnrichment
‱added 2022/02/21 12:0 a.m.‱2 views

CVE-2022-0563

A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an "INPUTRC" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from t...

5.5AI score0.00025EPSS
Exploits0References3
Debian CVE
Debian CVE
‱added 2022/02/21 12:0 a.m.‱378 views

CVE-2022-0563

A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an "INPUTRC" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from t...

5.5CVSS5.5AI score0.00025EPSS
Exploits0
Tenable Nessus
Tenable Nessus
‱added 2022/02/16 12:0 a.m.‱33 views

Slackware Linux 15.0 / current util-linux Vulnerability (SSA:2022-046-02)

The version of util-linux installed on the remote host is prior to 2.37.4. It is, therefore, affected by a vulnerability as referenced in the SSA:2022-046-02 advisory. - A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an...

5.5CVSS5.9AI score0.00025EPSS
Exploits0References1
RedhatCVE
RedhatCVE
‱added 2022/02/14 7:43 p.m.‱36 views

CVE-2022-0563

A flaw was found in the Linux kernel’s util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an "INPUTRC" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message...

5.5CVSS4.1AI score0.00025EPSS
Exploits0References5
Fedora
Fedora
‱added 2022/02/12 1:19 a.m.‱23 views

[SECURITY] Fedora 35 Update: ipython-7.26.0-3.fc35

IPython provides a replacement for the interactive Python interpreter with extra functionality. Main features: Comprehensive object introspection. Input history, persistent across sessions. Caching of output results during a session with automatically generated references. Readline based name...

8.8CVSS8.7AI score0.0106EPSS
Exploits1
Fedora
Fedora
‱added 2022/02/11 1:23 a.m.‱13 views

[SECURITY] Fedora 35 Update: rlwrap-0.45.2-1.fc35

rlwrap is a 'readline wrapper' that uses the GNU readline library to allow the editing of keyboard input for any other command. Input history is remembered across invocations, separately for each command; history completion and search work as in bash and completion word lists can be specified on...

1.7AI score
Exploits0
Fedora
Fedora
‱added 2022/02/11 1:11 a.m.‱8 views

[SECURITY] Fedora 34 Update: rlwrap-0.45.2-1.fc34

rlwrap is a 'readline wrapper' that uses the GNU readline library to allow the editing of keyboard input for any other command. Input history is remembered across invocations, separately for each command; history completion and search work as in bash and completion word lists can be specified on...

1.7AI score
Exploits0
OpenVAS
OpenVAS
‱added 2022/02/11 12:0 a.m.‱8 views

Fedora: Security Advisory for rlwrap (FEDORA-2022-8761120127)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
Exploits0References2
OpenVAS
OpenVAS
‱added 2022/02/11 12:0 a.m.‱5 views

Fedora: Security Advisory for rlwrap (FEDORA-2022-15decf791f)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
Exploits0References2
OpenVAS
OpenVAS
‱added 2022/01/28 12:0 a.m.‱23 views

Mageia: Security Advisory (MGASA-2014-0319)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

3.3CVSS9.6AI score0.00143EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
‱added 2021/11/02 12:0 a.m.‱1 views

The vulnerability in the implementation of the readline component of the EPSImageFile library used in the Pillow image processing library lies in insufficient input validation. This allows a malicious actor to cause a service failure.

The vulnerability of the readline implementation in the EPSImageFile component of the Pillow image processing library is related to the use of a quadratic string accumulation method during line termination searches. Exploiting this vulnerability could allow an attacker to cause a service failure ...

7.8CVSS0.00286EPSS
Exploits0References11Affected Software4
OSV
OSV
‱added 2021/06/02 4:15 p.m.‱29 views

PYSEC-2021-93

An issue was discovered in Pillow before 8.2.0. For EPS data, the readline implementation used in EPSImageFile has to deal with any combination of \r and \n as line endings. It used an accidentally quadratic method of accumulating lines while looking for a line ending. A malicious EPS file could...

7.5CVSS1.7AI score0.00286EPSS
Exploits0References4
RedhatCVE
RedhatCVE
‱added 2021/05/11 8:55 p.m.‱50 views

CVE-2021-28677

A flaw was found in python-pillow. The readline used in EPS has to deal with any combination of \r and \n as line endings. It accidentally used a quadratic method of accumulating lines while looking for a line ending. A malicious EPS file could use this to perform a denial-of-service of Pillow in...

7.5CVSS1AI score0.00286EPSS
Exploits0References3
OSV
OSV
‱added 2020/10/12 1:15 p.m.‱2 views

CVE-2020-4781

An improper input validation before calling java readLine method may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, which could result in a denial of service. IBM X-Force ID: 189159...

6.5CVSS6.6AI score0.00198EPSS
Exploits0References2
Prion
Prion
‱added 2020/10/12 1:15 p.m.‱12 views

Input validation

An improper input validation before calling java readLine method may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, which could result in a denial of service. IBM X-Force ID: 189159...

4CVSS6.3AI score0.00198EPSS
Exploits0References2Affected Software1
CVE
CVE
‱added 2020/10/12 1:5 p.m.‱40 views

CVE-2020-4781

Affected product: IBM CĂșram Social Program Management (Curam SPM) versions 7.0.9 and 7.0.10. Root cause: improper input validation before calling java readLine(), leading to denial of service. CVSS base 6.5 (3.0/3.1 vector: AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). Impact: Denial of service as stated...

6.5CVSS6.3AI score0.00198EPSS
Exploits0References2Affected Software1
OSV
OSV
‱added 2020/07/22 9:49 p.m.‱9 views

OSV-2020-1175 Use-of-uninitialized-value in readline

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21638 Crash type: Use-of-uninitialized-value Crash state: readline psscan documentload...

7.2AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
‱added 2020/06/17 12:0 a.m.‱14 views

GLSA-202006-10 : GNU Readline: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202006-10 GNU Readline: Multiple vulnerabilities Multiple vulnerabilities have been discovered in GNU Readline. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers...

5.5AI score
Exploits0References1
Gentoo Linux
Gentoo Linux
‱added 2020/06/13 12:0 a.m.‱38 views

GNU Readline: Multiple vulnerabilities

Background The GNU Readline library provides a set of functions for use by applications that allow users to edit command lines as they are typed in. Description Multiple vulnerabilities have been discovered in GNU Readline. Please review the CVE identifiers referenced below for details. Impact...

3.1AI score
Exploits0
Rows per page
Query Builder