CVE-2021-43325

Automox Agent 33 on Windows incorrectly sets permissions on a temporary directory. NOTE: this issue exists because of a CVE-2021-43326 regression...

CVE-2021-43325

Automox Agent 33 on Windows incorrectly sets permissions on a temporary directory. NOTE: this issue exists because of a CVE-2021-43326 regression...

CVE-2021-43325

Automox Agent for Windows (version 33) is affected by CVE-2021-43325, which states the agent incorrectly sets permissions on a temporary directory. This issue exists due to a regression linked to CVE-2021-43326. Connected sources confirm the vulnerability is local in scope with potential to escal...

CVE-2021-43325: Incorrect Default Permissions

Automox Agent 33 on Windows incorrectly sets permissions on a temporary directory. NOTE: this issue exists because of a CVE-2021-43326 regression...

CVE-2021-4007 Rapid7 Insight Agent Privilege Escalation

Rapid7 Insight Agent, versions 3.0.1 to 3.1.2.34, suffer from a local privilege escalation due to an uncontrolled DLL search path. Specifically, when Insight Agent versions 3.0.1 to 3.1.2.34 start, the Python interpreter attempts to load python3.dll at "C:\DLLs\python3.dll," which normally is...

USN-5174-2 samba regression

USN-5174-1 fixed vulnerabilities in Samba. Some of the changes introduced a regression in Kerberos authentication in certain environments. Please see the following upstream bug for more information: https://bugzilla.samba.org/showbug.cgi?id=14922 This update fixes the problem. Original advisory...

USN-5174-2: Samba regression

USN-5174-1 fixed vulnerabilities in Samba. Some of the changes introduced a regression in Kerberos authentication in certain environments. Please see the following upstream bug for more information: https://bugzilla.samba.org/showbug.cgi?id=14922 This update fixes the problem. Original advisory...

USN-5142-3 samba regression

USN-5142-1 fixed vulnerabilities in Samba. Some of the upstream changes introduced a regression in Kerberos authentication in certain environments. Please see the following upstream bug for more information: https://bugzilla.samba.org/showbug.cgi?id=14922 This update fixes the problem. Original...

USN-5142-3: Samba regression

USN-5142-1 fixed vulnerabilities in Samba. Some of the upstream changes introduced a regression in Kerberos authentication in certain environments. Please see the following upstream bug for more information: https://bugzilla.samba.org/showbug.cgi?id=14922 This update fixes the problem. Original...

ghostscript:gstoraster_fuzzer: Global-buffer-overflow in pdfi_fapi_get_glyph

Detailed Report: https://oss-fuzz.com/testcase?key=6730903064281088 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Global-buffer-overflow READ Crash Address: 0x000002cc29e0 Crash State: pdfifapigetglyp...

Ubuntu 18.04 LTS : Samba regression (USN-5174-2)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5174-2 advisory. USN-5174-1 fixed vulnerabilities in Samba. Some of the changes introduced a regression in Kerberos authentication in certain environments. Please see the followin...

Ubuntu 20.04 LTS : Samba regression (USN-5142-3)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5142-3 advisory. USN-5142-1 fixed vulnerabilities in Samba. Some of the upstream changes introduced a regression in Kerberos authentication in certain environments. Please see the...

ghostscript:gstoraster_fuzzer: Crash in pdfi_open_memory_stream_from_filtered_stream

Detailed Report: https://oss-fuzz.com/testcase?key=4830077106388992 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x631000050858 Crash State:...

apache-httpd:fuzz_utils: Heap-buffer-overflow in ap_is_chunked

Detailed Report: https://oss-fuzz.com/testcase?key=6436333537591296 Project: apache-httpd Fuzzing Engine: afl Fuzz Target: fuzzutils Job Type: aflasanapache-httpd Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60700021693f Crash State: apischunked fuzzutils.c Sanitize...

X (Formerly Twitter): Link-shortener bypass (regression on fix for #1032610)

Report 1032610, entitled Chained open redirects and use of Ideographic Full Stop defeat Twitter's approach to blocking links was closed as Resolved about six months ago. However, a regression on the fix for the vulnerability in question seems to have occurred, and the bug is reproducible with the...

DLA-2836-2 nss - regression update

Bulletin has no description...

[SECURITY] [DLA 2836-2] nss regression update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2836-2 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta December 08, 2021 https://wiki.debian.org/LTS -...

USN-5168-4 nss regression

USN-5168-3 fixed a vulnerability in NSS. Unfortunately that update introduced a regression that could break SSL connections. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Tavis Ormandy discovered that NSS incorrectly handled verifying DSA/RSA-PSS...

USN-5168-4: NSS regression

USN-5168-3 fixed a vulnerability in NSS. Unfortunately that update introduced a regression that could break SSL connections. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Tavis Ormandy discovered that NSS incorrectly handled verifying DSA/RSA-PSS...

Security update for singularity (moderate)

openSUSE Security Update: Security update for singularity Announcement ID: openSUSE-SU-2021:1525-1 Rating: moderate References: 1193273 Cross-References: CVE-2021-41190 CVSS scores: CVE-2021-41190 NVD : 3 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N Affected Products: openSUSE Backports SLE-15-SP...