Debian: Security Advisory (DLA-2376-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WS-2020-0390

OpenSC in versions 0.16.0 to 0.20.0 is vulnerable to Heap-buffer-overflow in scoberthurparsepublicinfo, related to src/libopensc/pkcs15-oberthur.c...

WS-2020-0397

openSC in versions 0.12.2-rc1 to 0.20.0 is vulnerable to Heap-buffer-overflow in hextoint, related to src/libopensc/pkcs15-itacns.c...

WS-2020-0363

libavif in versions 0.3.9 to 0.8.1 is vulnerable to Heap-buffer-overflow in avifROStreamRead , related to src/stream.c...

WS-2020-0380

OpenSC before 0.21.0-rc1 is vulnerable to heap-buffer-overflow in hextoint, related to src/libopensc/pkcs15-itacns.c...

DLA-2376-1 qtbase-opensource-src - security update

Bulletin has no description...

WS-2020-0360

fluent-bit in versions 1.3.0 to 1.5.6 is vulnerable to Heap-buffer-overflow in flbmsgpacktogelf, related to src/flbpackgelf.c...

CVE-2020-24889: Buffer Copy without Checking Size of Input

A buffer overflow vulnerability in LibRaw version 20.0 LibRaw::GetNormalizedModel in src/metadata/normalizemodel.cpp may lead to context-dependent arbitrary code execution...

CVE-2020-24925

A Sensitive Source Code Path Disclosure vulnerability is found in ElkarBackup v1.3.3. An attacker is able to view the path of the source code jobs/sort where entire source code path is displayed in the browser itself helping the attacker identify the code structure...

WS-2020-0351

openSC in versions 0.12.2-rc1 to 0.20.0 is vulnerable toHeap-buffer-overflow in hextoint, related to src/libopensc/pkcs15-itacns.c...

WS-2020-0347

nDPI in versions 3.2 is vulnerable to Stack-buffer-overflow in ndpisearchkerberos, related to src/lib/protocols/kerberos.c...

PT-2020-21949

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read crash has been reported. The crash state includes mem src read, src peek, and src eof. Recommendations At the moment, there is ...

PT-2020-21946

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read, as indicated by an OSS-Fuzz report. The crash occurs in the rnp key store kbx from src function, which...

Medium: python34, python35, python36

Issue Overview: Lib/ipaddress.py in Python through 3.8.3 improperly computes hash values in the IPv4Interface and IPv6Interface classes, which might allow a remote attacker to cause a denial of service if an application is affected by the performance of a dictionary containing IPv4Interface or...

PT-2020-6631

Name of the Vulnerable Software and Affected Versions libsolv versions prior to 0.7.17 Description The issue is related to a buffer overflow vulnerability in the pool installable function of the src/repo.h component in the Libsolv library. This vulnerability can be exploited by a remote attacker ...

PT-2021-17636

Name of the Vulnerable Software and Affected Versions: JasPer Image Coding Toolkit version 2.0 Description: A Divide-by-zero issue exists in the JasPer Image Coding Toolkit, specifically in the jasper/src/libjasper/jpc/jpc enc.c file. Recommendations: For JasPer Image Coding Toolkit version 2.0, ...

Medium: python-rsa

Issue Overview: Python-RSA before 4.1 ignores leading '\0' bytes during decryption of ciphertext. This could conceivably have a security-relevant impact, e.g., by helping an attacker to infer that an application uses Python-RSA, or if the length of accepted ciphertext affects application behavior...

openSUSE Security Update : rust / rust-cbindgen (openSUSE-2020-933)

This update for rust, rust-cbindgen fixes the following issues : - Updated openssl-src to 1.1.1g for CVE-2020-1967. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2020-933. The text description of this...

openSUSE Security Update : rust / rust-cbindgen (openSUSE-2020-945)

This update for rust, rust-cbindgen fixes the following issues : - Updated openssl-src to 1.1.1g for CVE-2020-1967. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2020-945. The text description of this...

Security update for rust, rust-cbindgen (moderate)

openSUSE Security Update: Security update for rust, rust-cbindgen Announcement ID: openSUSE-SU-2020:0945-1 Rating: moderate References: 1115645 1154817 1173202 Cross-References: CVE-2020-1967 Affected Products: openSUSE Leap 15.2 An update that solves one vulnerability and has two fixes is now...