5135 matches found
EulerOS 2.0 SP9 : libdnf (EulerOS-SA-2021-2555)
According to the versions of the libdnf packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in libdnf's signature verification functionality in versions before 0.60.1. This flaw allows an attacker to achieve code...
EulerOS 2.0 SP9 : binutils (EulerOS-SA-2021-2545)
According to the versions of the binutils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An out of bounds flaw was found in GNU binutils objdump utility version 2.36. An attacker could use this flaw and pass a large section to...
EulerOS 2.0 SP5 : OpenEXR (EulerOS-SA-2021-2514)
According to the versions of the OpenEXR package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw found in function dataWindowForTile of IlmImf/ImfTiledMisc.cpp. An attacker who is able to submit a crafted file to be processed by OpenE...
EulerOS 2.0 SP5 : linuxptp (EulerOS-SA-2021-2509)
According to the versions of the linuxptp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the ptp4l program of the linuxptp package. A missing length check when forwarding a PTP message between ports allows a remo...
EulerOS 2.0 SP5 : binutils (EulerOS-SA-2021-2493)
According to the versions of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An out of bounds flaw was found in GNU binutils objdump utility version 2.36. An attacker could use this flaw and pass a large section to...
EulerOS 2.0 SP9 : libdnf (EulerOS-SA-2021-2531)
According to the versions of the libdnf packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in libdnf's signature verification functionality in versions before 0.60.1. This flaw allows an attacker to achieve code...
EulerOS 2.0 SP9 : xorg-x11-server (EulerOS-SA-2021-2544)
According to the versions of the xorg-x11-server package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in xorg-x11-server in versions before 1.20.11. An integer underflow can occur in xserver which can lead to a local...
Huawei EulerOS: Security Advisory for linuxptp (EulerOS-SA-2021-2473)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLES15 Security Update : linuxptp (SUSE-SU-2021:3202-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2021:3202-1 advisory. - CVE-2021-3570: Fixed messageLength validation field of incoming messages bsc1187646. Tenable has extracted the preceding description block directly...
EulerOS 2.0 SP8 : libdnf (EulerOS-SA-2021-2468)
According to the versions of the libdnf packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in libdnf's signature verification functionality in versions before 0.60.1. This flaw allows an attacker to achieve code...
EulerOS 2.0 SP8 : openjpeg (EulerOS-SA-2021-2478)
According to the versions of the openjpeg package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in OpenJPEGs encoder. This flaw allows an attacker to pass specially crafted x,y offset input to OpenJPEG to use during...
SUSE SLED15: hivex-devel / libhivex0 / ocaml-hivex / ocaml-hivex-devel / etc (SUSE-SU-2021:3201-1)
The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:3201-1 advisory. - CVE-2021-3622: Fixed stack overflow due to recursive call of getchildren bsc1189060. Tenable has extracted the preceding description block...
EulerOS 2.0 SP8 : linuxptp (EulerOS-SA-2021-2473)
According to the versions of the linuxptp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the ptp4l program of the linuxptp package. A missing length check when forwarding a PTP message between ports allows a remo...
Huawei EulerOS: Security Advisory for openjpeg (EulerOS-SA-2021-2478)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE 15 Security Update : linuxptp (openSUSE-SU-2021:3202-1)
The remote SUSE Linux SUSE15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE-SU-2021:3202-1 advisory. - A flaw was found in the ptp4l program of the linuxptp package. A missing length check when forwarding a PTP message between ports allows a remote...
CVE-2021-20317
A flaw was found in the Linux kernel. A corrupted timer tree caused the task wakeup to be missing in the timerqueueadd function in lib/timerqueue.c. This flaw allows a local attacker with special user privileges to cause a denial of service, slowing and eventually stopping the system while runnin...
velocity: arbitrary code execution when attacker is able to modify templates
A flaw was found in velocity. An attacker, able to modify Velocity templates, may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account running the Servlet container. The highest threat from this vulnerability is to data confidentiality and integrity...
CVE-2021-37972
A flaw was found in the libjpeg-turbo package, where it is susceptible to an out-of-bounds read on crafted input and malformed files. Proper bounds checking is not enforced when processing JPEG files. The highest threat from this vulnerability is system availability...
CVE-2021-39537
A heap overflow vulnerability has been found in the ncurses package, particularly in the "tic". This flaw results from a lack of proper bounds checking during input processing. By exploiting this boundary error, an attacker can create a malicious file, deceive the victim into opening it using the...