CentOS 8 : systemd (CESA-2021:2717)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:2717 advisory. - systemd: uncontrolled allocation on the stack in function unitnamepathescape leads to crash CVE-2021-33910 Note that Nessus has not tested for this issue but...

[ASA-202107-48] linux: privilege escalation

Arch Linux Security Advisory ASA-202107-48 ========================================== Severity: High Date : 2021-07-21 CVE-ID : CVE-2021-3609 CVE-2021-3612 CVE-2021-33909 Package : linux Type : privilege escalation Remote : No Link : https://security.archlinux.org/AVG-2181 Summary ======= The...

Important: Red Hat Security Advisory: systemd security update

An update for systemd is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

The vulnerability of the Pygments syntax highlighting program lies in its uncontrolled resource consumption, which allows a hacker to trigger a service failure.

The vulnerability of the Pygments syntax highlighter program is related to the use of regular expressions. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

The vulnerability of the library for EXIF file grammar analysis in libexif, related to uncontrolled resource consumption, allows a violator to cause a service failure.

The vulnerability of the library for EXIF file parsing in libexif is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

CVE-2020-20230: Uncontrolled Resource Consumption

Mikrotik RouterOs before stable 6.47 suffers from an uncontrolled resource consumption in the sshd process. An authenticated remote attacker can cause a Denial of Service due to overloading the systems CPU...

CVE-2020-20248: Uncontrolled Resource Consumption

Mikrotik RouterOs before stable 6.47 suffers from an uncontrolled resource consumption in the memtest process. An authenticated remote attacker can cause a Denial of Service due to overloading the systems CPU...

OESA-2021-1270 dovecot security update

Dovecot is an IMAP server for Linux/UNIX-like systemsa wrapper package that will just handle common things for all versioned dovecot packages. Security Fixes: The Sieve engine in Dovecot before 2.3.15 allows Uncontrolled Resource Consumption, as demonstrated by a situation with a complex regular...

Design/Logic Flaw

An Uncontrolled Resource Consumption vulnerability in the ARP daemon arpd and Network Discovery Protocol ndp process of Juniper Networks Junos OS Evolved allows a malicious attacker on the local network to consume memory resources, ultimately resulting in a Denial of Service DoS condition...

CVE-2021-0292 Junos OS Evolved: Memory leak in arpd or ndp processes can lead to Denial of Service (DoS)

An Uncontrolled Resource Consumption vulnerability in the ARP daemon arpd and Network Discovery Protocol ndp process of Juniper Networks Junos OS Evolved allows a malicious attacker on the local network to consume memory resources, ultimately resulting in a Denial of Service DoS condition...

CVE-2021-0292

CVE-2021-0292 corresponds to a memory-leak DoS in Juniper Networks Junos OS Evolved’s arpd and ndp processes. Affected are Junos OS Evolved versions 19.4 prior to 19.4R2-S3-EVO; 20.1 prior to 20.1R2-S4-EVO; and all 20.2-EVO. The vulnerability allows a local attacker on the same network to drive u...

RUSTSEC-2021-0106 Uncontrolled Search Path Element in sharkdp/bat

bat on windows before 0.18.2 executes programs named less.exe from the current working directory. This can lead to unintended code execution...

CVE-2021-0292: Uncontrolled Resource Consumption

An Uncontrolled Resource Consumption vulnerability in the ARP daemon arpd and Network Discovery Protocol ndp process of Juniper Networks Junos OS Evolved allows a malicious attacker on the local network to consume memory resources, ultimately resulting in a Denial of Service DoS condition...

CVE-2021-36753: Uncontrolled Search Path Element

sharkdp BAT before 0.18.2 executes less.exe from the current working directory...

PT-2021-3714

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS Evolved versions prior to 19.4R2-S3-EVO Juniper Networks Junos OS Evolved versions prior to 20.1R2-S4-EVO Juniper Networks Junos OS Evolved all versions of 20.2-EVO Description An Uncontrolled Resource Consumption...

PT-2021-3617

Name of the Vulnerable Software and Affected Versions Apache Ant versions prior to 1.9.16 Apache Ant versions prior to 1.10.11 Description The issue is related to an uncontrolled resource consumption in Apache Ant. It can be exploited by a remote attacker to cause a denial of service. When Apache...

PT-2021-3684

Name of the Vulnerable Software and Affected Versions Moodle affected versions not specified Description The issue is related to uncontrolled recursion in the system, which can be exploited by a remote attacker to cause a denial of service by creating a specially crafted URL. The file repository'...

PT-2021-4170

Name of the Vulnerable Software and Affected Versions Adobe Dimension versions 3.4 and earlier Description The issue is related to an Uncontrolled Search Path Element element. An unauthenticated attacker could leverage this to achieve arbitrary code execution in the context of the current user...

CVE-2021-36376: Uncontrolled Search Path Element

dandavison delta before 0.8.3 on Windows resolves an executable's pathname as a relative path from the current directory...

PT-2021-6144

Name of the Vulnerable Software and Affected Versions Acrobat Reader DC versions 2021.005.20054 and earlier Acrobat Reader DC versions 2020.004.30005 and earlier Acrobat Reader DC versions 2017.011.30197 and earlier Description The issue is related to an Uncontrolled Search Path Element...