CVE-2020-1898

The fbunserialize function did not impose a depth limit for nested deserialization. That meant a maliciously constructed string could cause deserialization to recurse, leading to stack exhaustion. This issue affected HHVM prior to v4.32.3, between versions 4.33.0 and 4.56.0, 4.57.0, 4.58.0, 4.58....

CVE-2020-1898

CVE-2020-1898 affects Facebook HHVM (HipHop Virtual Machine). The vulnerability arises from fb_unserialize deserializing nested data without a depth limit, enabling a crafted input to cause recursive deserialization and stack exhaustion. Affected HHVM versions include before 4.32.3 and multiple r...

Huawei EulerOS: Security Advisory for libproxy (EulerOS-SA-2021-1490)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for libproxy (EulerOS-SA-2021-1530)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization for ARM 64 3.0.6.0 : libproxy (EulerOS-SA-2021-1530)

According to the versions of the libproxy package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursi...

EulerOS Virtualization 3.0.6.6 : libproxy (EulerOS-SA-2021-1490)

According to the versions of the libproxy packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a...

Security Bulletin: Vulnerabilities in tcpdump affect AIX

Summary There are vulnerabilities in tcpdump that affect AIX. Vulnerability Details CVEID: CVE-2018-16451 DESCRIPTION: The SMB parser in tcpdump before 4.9.3 has buffer over-reads in print-smb.c:printtrans for \MAILSLOT\BROWSE and \PIPE\LANMAN. CVSS Base score: 5.5 CVSS Temporal Score: See:...

EulerOS 2.0 SP3 : libproxy (EulerOS-SA-2021-1087)

According to the versions of the libproxy packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - url.cpp in libproxy through 0.4.15 is prone to a buffer overflow when PAC is enabled, as demonstrated by a large PAC file that is delivered...

Huawei EulerOS: Security Advisory for libproxy (EulerOS-SA-2021-1087)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Rust 资源管理错误漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability in prost crate in Mozilla Rust versions prior to 0.6.1, which stems from stack consumption via crafted messages, can be exploited by an attacker to cause a denial of service or remote co...

EulerOS 2.0 SP5 : libproxy (EulerOS-SA-2020-2550)

According to the version of the libproxy packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed o...

[ASA-202012-11] libproxy-mozjs: denial of service

Arch Linux Security Advisory ASA-202012-11 ========================================== Severity: Low Date : 2020-12-05 CVE-ID : CVE-2020-25219 Package : libproxy-mozjs Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-1226 Summary ======= The package libproxy-mozjs...

[ASA-202012-9] libproxy-webkit: denial of service

Arch Linux Security Advisory ASA-202012-9 ========================================= Severity: Low Date : 2020-12-05 CVE-ID : CVE-2020-25219 Package : libproxy-webkit Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-1226 Summary ======= The package libproxy-webkit...

[ASA-202012-10] libproxy: denial of service

Arch Linux Security Advisory ASA-202012-10 ========================================== Severity: Low Date : 2020-12-05 CVE-ID : CVE-2020-25219 Package : libproxy Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-1226 Summary ======= The package libproxy before version...

Oracle Linux 8 : tcpdump (ELSA-2020-4760)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-4760 advisory. 14:4.9.3-1 - Resolves: 1804063 - Rebase tcpdump to 4.9.3 to fix multiple CVEs Tenable has extracted the preceding description block directly from the...

Debian: Security Advisory (DLA-2431-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

tcpdump: Resource exhaustion in smb_fdata() funtion in smbutil.c

The SMB parser in tcpdump before 4.9.3 has stack exhaustion in smbutil.c:smbfdata via recursion...

EulerOS 2.0 SP2 : libproxy (EulerOS-SA-2020-2360)

According to the versions of the libproxy packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - libproxy offers the following features: extremely small core footprint 35K no external dependencies within libproxy corelibproxy plugins may...

Huawei EulerOS: Security Advisory for libproxy (EulerOS-SA-2020-2304)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP8 : libproxy (EulerOS-SA-2020-2304)

According to the versions of the libproxy packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - url.cpp in libproxy through 0.4.15 is prone to a buffer overflow when PAC is enabled, as demonstrated by a large PAC file that is delivered...