WS-2020-0349

mruby in versions 1.1.0 to 3.0.0-preview is vulnerable to UNKNOWN READ in presymsym2name, related to src/symbol.c...

WS-2020-0389

Fluent-bit in versions v0.12.0 to v1.6.3 is vulnerable to Heap-buffer-overflow in flbparsertypecast, related to src/flbparser.c...

WS-2020-0386

fluent-bit in versions 1.5.3-win32 to 1.6.3 is vulnerable to Heap-buffer-overflow in flbstrptime, related to src/flbparser.c...

WS-2020-0314

Fluent Bit in versions v1.3.0 to v1.6.6 is vulnerable to stack buffer overflow in flbsdscat on src/flbpackgelf.c...

Fedora 32 : 1:libuv (2020-77b758d6dc)

2020.09.26, Version 1.40.0 Stable Changes since version 1.39.0 : - udp: add UVUDPMMSGFREE recvcb flag Ryan Liptak - include: re-map UVEPROTO from 4046 to -4046 YuMeiJie - doc: correct UVUDPMMSGFREE version added cjihrig - doc: add uvmetricsidletime version metadata Ryan Liptak - win,tty: pass...

Debian: Security Advisory (DLA-2376-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WS-2020-0397

openSC in versions 0.12.2-rc1 to 0.20.0 is vulnerable to Heap-buffer-overflow in hextoint, related to src/libopensc/pkcs15-itacns.c...

WS-2020-0390

OpenSC in versions 0.16.0 to 0.20.0 is vulnerable to Heap-buffer-overflow in scoberthurparsepublicinfo, related to src/libopensc/pkcs15-oberthur.c...

WS-2020-0363

libavif in versions 0.3.9 to 0.8.1 is vulnerable to Heap-buffer-overflow in avifROStreamRead , related to src/stream.c...

WS-2020-0380

OpenSC before 0.21.0-rc1 is vulnerable to heap-buffer-overflow in hextoint, related to src/libopensc/pkcs15-itacns.c...

DLA-2376-1 qtbase-opensource-src - security update

Bulletin has no description...

WS-2020-0360

fluent-bit in versions 1.3.0 to 1.5.6 is vulnerable to Heap-buffer-overflow in flbmsgpacktogelf, related to src/flbpackgelf.c...

CVE-2020-24889: Buffer Copy without Checking Size of Input

A buffer overflow vulnerability in LibRaw version 20.0 LibRaw::GetNormalizedModel in src/metadata/normalizemodel.cpp may lead to context-dependent arbitrary code execution...

CVE-2020-24925

A Sensitive Source Code Path Disclosure vulnerability is found in ElkarBackup v1.3.3. An attacker is able to view the path of the source code jobs/sort where entire source code path is displayed in the browser itself helping the attacker identify the code structure...

WS-2020-0351

openSC in versions 0.12.2-rc1 to 0.20.0 is vulnerable toHeap-buffer-overflow in hextoint, related to src/libopensc/pkcs15-itacns.c...

WS-2020-0347

nDPI in versions 3.2 is vulnerable to Stack-buffer-overflow in ndpisearchkerberos, related to src/lib/protocols/kerberos.c...

PT-2020-21946

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read, as indicated by an OSS-Fuzz report. The crash occurs in the rnp key store kbx from src function, which...

PT-2020-21949

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read crash has been reported. The crash state includes mem src read, src peek, and src eof. Recommendations At the moment, there is ...

Medium: python34, python35, python36

Issue Overview: Lib/ipaddress.py in Python through 3.8.3 improperly computes hash values in the IPv4Interface and IPv6Interface classes, which might allow a remote attacker to cause a denial of service if an application is affected by the performance of a dictionary containing IPv4Interface or...

PT-2020-6631

Name of the Vulnerable Software and Affected Versions libsolv versions prior to 0.7.17 Description The issue is related to a buffer overflow vulnerability in the pool installable function of the src/repo.h component in the Libsolv library. This vulnerability can be exploited by a remote attacker ...