Lucene search
+L
GentooMost viewed

3852 matches found

Gentoo Linux
Gentoo Linux
added 2018/12/30 12:00 a.m.41 views

GKSu: Arbitrary command execution

Background A library that provides a Gtk+ frontend to su and sudo. Description A vulnerability was discovered in GKSu’s gksu-run-helper. Impact An attacker could execute arbitrary commands. Workaround There is no known workaround at this time. Resolution Gentoo has discontinued support for GKSu a...

6.8CVSS6.9AI score0.02193EPSS
SaveExploits1
Gentoo Linux
Gentoo Linux
added 2018/12/06 12:00 a.m.41 views

EDE: Privilege escalation

Background A package that simplifies the task of creating, building, and debugging large programs with Emacs. It provides some of the features of an IDE, or Integrated Development Environment, in Emacs. Description An untrusted search path vulnerability was discovered in EDE. Impact A local...

9.3CVSS3.3AI score0.02301EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2018/12/02 12:00 a.m.41 views

Nagios: Privilege escalation

Background Nagios is an open source host, service and network monitoring program. Description A vulnerability in Nagios was discovered due to the improper handling of configuration files which can be owned by a non-root user. Impact A local attacker can escalate privileges to root by leveraging...

7.8CVSS3.8AI score0.00332EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2018/11/30 12:00 a.m.41 views

PostgreSQL: SQL injection

Background PostgreSQL is an open source object-relational database management system. Description A vulnerability was discovered in PostgreSQL’s pgupgrade and pgdump. Impact An attacker, by enticing a user to process a specially crafted trigger definition, can execute arbitrary SQL statements wit...

9.8CVSS9.2AI score0.0515EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2018/04/17 12:00 a.m.41 views

Evince: Command injection

Background Evince is a document viewer for multiple document formats, including PostScript. Description A vulnerability was discovered in Evince’s handling of filenames while printing PDF files. Impact A remote attacker, by enticing the user to process a specially crafted file, could execute...

7.8CVSS7.9AI score0.01406EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2018/01/11 12:00 a.m.41 views

PySAML2: Security bypass

Background PySAML2 is a pure python implementation of SAML2 Description It was found that the PySAML2 relies on an assert statement to check the user’s password. A python optimizations might remove this assertion. Impact A remote attacker could bypass security restrictions and access any...

8.1CVSS8.1AI score0.02541EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2018/01/11 12:00 a.m.41 views

TigerVNC: Multiple vulnerabilities

Background TigerVNC is a high-performance VNC server/client. Description Multiple vulnerabilities have been discovered in TigerVNC. Please review the referenced CVE Identifiers for details. Impact An attacker could execute arbitrary code or cause a Denial of Service condition. Workaround There is...

8.8CVSS8.7AI score0.03179EPSS
SaveExploits1
Gentoo Linux
Gentoo Linux
added 2017/06/22 12:00 a.m.41 views

Vim, gVim: Remote execution of arbitrary code

Background Vim is an efficient, highly configurable improved version of the classic ‘vi’ text editor. gVim is the GUI version of Vim. Description Multiple vulnerabilities have been discovered in Vim and gVim. Please review the CVE identifiers referenced below for details. Impact A remote attacker...

9.8CVSS9AI score0.03361EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2016/12/13 12:00 a.m.41 views

Zabbix: Multiple vulnerabilities

Background Zabbix is software for monitoring applications, networks, and servers. Description Multiple vulnerabilities have been discovered in Zabbix. Please review the CVE identifiers referenced below for details. Impact A remote attacker could possibly execute arbitrary code with the privileges...

8.1CVSS3.8AI score0.21141EPSS
SaveExploits6
Gentoo Linux
Gentoo Linux
added 2016/11/15 12:00 a.m.41 views

polkit: Heap-corruption on duplicate IDs

Background polkit is a toolkit for managing policies relating to unprivileged processes communicating with privileged processes. Description A vulnerability was discovered in polkit’s polkitbackendactionpoolinit function due to duplicate action IDs in action descriptions. Impact Local attackers a...

4.6CVSS5.2AI score0.00365EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2015/10/31 12:00 a.m.41 views

cups-filters: Multiple vulnerabilities

Background cups-filters is an OpenPrinting CUPS Filters. Description Multiple vulnerabilities have been discovered in cups-filters. Please review the CVE identifiers referenced below for details. Impact A remote attacker could entice a user to open a specially crafted print job using cups-filters...

7.5CVSS7.4AI score0.08295EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2015/07/10 12:00 a.m.41 views

Perl: Denial of service

Background Perl is a highly capable, feature-rich programming language. Description Sregmatch function lacks proper checks before passing arguments to atoi Impact A remote attacker could send a specially crafted input, possibly resulting in a Denial of Service condition. Workaround There is no...

7.5CVSS7.6AI score0.03045EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2014/12/13 12:00 a.m.41 views

Xfig: User-assisted execution of arbitrary code

Background Xfig is an interactive drawing tool. Description A stack-based buffer overflow and a stack consumption vulnerability have been found in Xfig. Impact A remote attacker could entice a user to open a specially-crafted file, potentially resulting in arbitrary code execution or a Denial of...

6.8CVSS7.6AI score0.10603EPSS
SaveExploits2
Gentoo Linux
Gentoo Linux
added 2014/08/16 12:00 a.m.41 views

ModPlug XMMS Plugin: Multiple vulnerabilities

Background ModPlug XMMS Plugin is a library for playing MOD-like music files Description Multiple vulnerabilities have been discovered in ModPlug XMMS Plugin. Please review the CVE identifiers referenced below for details. Impact A remote attacker could possibly execute arbitrary code with the...

6.8CVSS7.7AI score0.04352EPSS
SaveExploits2
Gentoo Linux
Gentoo Linux
added 2014/06/15 12:00 a.m.41 views

KDirStat: Arbitrary command execution

Background KDirStat is a graphical disk usage utility for KDE. Description Missing escape of executable shell command in KDirStat can be used to insert malicious shell commands. Impact A local attacker could possibly execute arbitrary shell command with the privileges of the process. Workaround...

6.8CVSS6.9AI score0.03008EPSS
SaveExploits1
Gentoo Linux
Gentoo Linux
added 2014/05/18 12:00 a.m.41 views

Symfony: Information disclosure

Background Symfony is a professional, open-source PHP5 web development framework. Description Symfony does not properly sanitize input for upload requests. Impact A remote attacker could send a specially crafted file upload request, possibly resulting in disclosure of sensitive information...

5CVSS6.4AI score0.0349EPSS
SaveExploits1
Gentoo Linux
Gentoo Linux
added 2014/02/21 12:00 a.m.41 views

GnuPG, Libgcrypt: Multiple vulnerabilities

Background The GNU Privacy Guard, GnuPG, is a free replacement for the PGP suite of cryptographic software. Libgcrypt is a cryptographic library based on GnuPG. Description Multiple vulnerabilities have been discovered in GnuPG and Libgcrypt. Please review the CVE identifiers referenced below for...

5.8CVSS9AI score0.0503EPSS
SaveExploits1
Gentoo Linux
Gentoo Linux
added 2013/11/28 12:00 a.m.41 views

cpio: Arbitrary code execution

Background GNU cpio copies files into or out of a cpio or tar archive. Description Cpio contains a heap-based buffer overflow in the rmtread function in lib/rtapelib.c. Impact A remote server could sending more data than was requested, related to archive filenames that contain a : colon character...

6.8CVSS8.2AI score0.04747EPSS
SaveExploits2
Gentoo Linux
Gentoo Linux
added 2013/11/20 12:00 a.m.41 views

OpenVPN: Multiple vulnerabilities

Background OpenVPN is a multi-platform, full-featured SSL VPN solution. Description Multiple vulnerabilities have been discovered in OpenVPN. Please review the CVE identifiers referenced below for details. Impact A remote attacker may be able to recover plaintext from an encrypted communication...

5.8CVSS7.1AI score0.87264EPSS
SaveExploits17
Gentoo Linux
Gentoo Linux
added 2013/10/10 12:00 a.m.41 views

Quagga: Multiple vulnerabilities

Background Quagga is a free routing daemon replacing Zebra supporting RIP, OSPF and BGP. Description Multiple vulnerabilities have been discovered in Quagga. Please review the CVE identifiers referenced below for details. Impact A remote attacker may be able to cause arbitrary code execution or a...

5CVSS9.1AI score0.03454EPSS
SaveExploits1
Gentoo Linux
Gentoo Linux
added 2013/09/01 12:00 a.m.41 views

strongSwan: Multiple vulnerabilities

Background strongSwan is an IPSec implementation for Linux. Description Multiple vulnerabilities have been discovered in strongSwan. Please review the CVE identifiers referenced below for details. Impact A remote attacker could use ECDSA to authenticate as another user with an invalid signature...

5.1CVSS6.8AI score0.02985EPSS
SaveExploits1
Gentoo Linux
Gentoo Linux
added 2012/06/24 12:00 a.m.41 views

PyCrypto: Weak key generation

Background PyCrypto is the Python Cryptography Toolkit. Description An error in the generate function in ElGamal.py causes PyCrypto to generate weak ElGamal keys. Impact A remote attacker might be able to derive private keys. Workaround There is no known workaround at this time. Resolution All...

4.3CVSS9.1AI score0.02393EPSS
SaveExploits2
Gentoo Linux
Gentoo Linux
added 2012/06/23 12:00 a.m.41 views

Adobe Flash Player: Multiple vulnerabilities

Background The Adobe Flash Player is a renderer for the SWF file format, which is commonly used to provide interactive websites. Description Multiple vulnerabilities have been discovered in Adobe Flash Player. Please review the CVE identifiers referenced below for details. Impact A remote attacke...

9.3CVSS7.5AI score0.85537EPSS
SaveExploits11
Gentoo Linux
Gentoo Linux
added 2012/04/10 12:00 a.m.41 views

Chromium: Multiple vulnerabilities

Background Chromium is an open source web browser project. Description Multiple vulnerabilities have been discovered in Chromium. Please review the CVE identifiers and release notes referenced below for details. Impact A remote attacker could entice a user to open a specially crafted web site usi...

6.8CVSS7.5AI score0.02099EPSS
SaveExploits10
Gentoo Linux
Gentoo Linux
added 2012/03/06 12:00 a.m.41 views

OpenSSL: Multiple vulnerabilities

Background OpenSSL is an Open Source toolkit implementing the Secure Sockets Layer SSL v2/v3 and Transport Layer Security TLS v1 as well as a general purpose cryptography library. Description Multiple vulnerabilities have been found in OpenSSL: Timing differences for decryption are exposed by CBC...

9.3CVSS7.9AI score0.17839EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2012/02/22 12:00 a.m.41 views

Heimdal: Arbitrary code execution

Background Heimdal is a free implementation of Kerberos 5. Description A boundary error in the "encryptkeyid" function in appl/telnet/libtelnet/encrypt.c of the telnet daemon and client could cause a buffer overflow. Impact An unauthenticated remote attacker may be able to execute arbitrary code...

10CVSS8.2AI score0.94983EPSS
SaveExploits21
Gentoo Linux
Gentoo Linux
added 2011/11/20 12:00 a.m.41 views

Perl Safe module: Arbitrary Perl code injection

Background Safe is a Perl module to compile and execute code in restricted compartments. Description Unsafe code evaluation prevents the Safe module from properly restricting the code of implicitly called methods on implicitly blessed objects. Impact A remote attacker could entice a user to load ...

7.5CVSS6.9AI score0.03715EPSS
SaveExploits2
Gentoo Linux
Gentoo Linux
added 2011/10/22 12:00 a.m.41 views

X.Org X Server: Multiple vulnerabilities

Background The X Window System is a graphical windowing system based on a client/server model. Description vladz reported the following vulnerabilities in the X.Org X server: The X.Org X server follows symbolic links when trying to access the lock file for a X display, showing a predictable...

1.9CVSS6.5AI score0.00605EPSS
SaveExploits5
Gentoo Linux
Gentoo Linux
added 2011/10/22 12:00 a.m.41 views

Avahi: Denial of service

Background Avahi is a system which facilitates service discovery on a local network. Description Multiple vulnerabilities have been discovered in Avahi. Please review the CVE identifiers referenced below for details. Impact A remote attacker could cause a Denial of Service. Workaround There is no...

5CVSS8.5AI score0.29361EPSS
SaveExploits2
Gentoo Linux
Gentoo Linux
added 2011/10/10 12:00 a.m.41 views

vsftpd: Denial of service

Background vsftpd is a very secure FTP daemon written with speed, size and security in mind. Description A Denial of Service vulnerability was discovered in vsftpd. Please review the CVE identifier referenced below for details. Impact A remote authenticated attacker could cause a Denial of Servic...

4CVSS3.6AI score0.73946EPSS
SaveExploits9
Gentoo Linux
Gentoo Linux
added 2010/06/02 12:00 a.m.41 views

Smarty: Multiple vulnerabilities

Background Smarty is a template engine for PHP. Description Multiple vulnerabilities have been discovered in Smarty: The vendor reported that the modifier.regexreplace.php plug-in contains an input sanitation flaw related to the ASCII NUL character CVE-2008-1066. The vendor reported that the...

10CVSS8.3AI score0.14117EPSS
SaveExploits2
Gentoo Linux
Gentoo Linux
added 2010/01/14 12:00 a.m.41 views

Ruby: Terminal Control Character Injection

Background Ruby is an interpreted scripting language for quick and easy object-oriented programming. It comes bundled with a HTTP server "WEBrick". Description Giovanni Pellerano, Alessandro Tanasi and Francesco Ongaro reported that WEBrick does not filter terminal control characters, for instanc...

7.5CVSS6.6AI score0.15936EPSS
SaveExploits3
Gentoo Linux
Gentoo Linux
added 2009/10/25 12:00 a.m.41 views

Adobe Reader: Multiple vulnerabilities

Background Adobe Reader formerly Adobe Acrobat Reader is a closed-source PDF reader. Description Multiple vulnerabilities were discovered in Adobe Reader. For further information please consult the CVE entries and the Adobe Security Bulletin referenced below. Impact A remote attacker might entice...

9.3CVSS7.3AI score0.86583EPSS
SaveExploits36
Gentoo Linux
Gentoo Linux
added 2009/09/09 12:00 a.m.41 views

aMule: Parameter injection

Background aMule is an eMule-like client for the eD2k and Kademlia networks, supporting multiple platforms. Description Sam Hocevar discovered that the aMule preview function does not properly sanitize file names. Impact A remote attacker could entice a user to download a file with a specially...

6.8CVSS6.5AI score0.0154EPSS
SaveExploits1
Gentoo Linux
Gentoo Linux
added 2009/08/01 12:00 a.m.41 views

BIND: Denial of service

Background ISC BIND is the Internet Systems Consortium implementation of the Domain Name System DNS protocol. Description Matthias Urlichs reported that the dnsdbfindrdataset function fails when the prerequisite section of the dynamic update message contains a record of type "ANY" and where at...

4.3CVSS2.7AI score0.12649EPSS
SaveExploits2
Gentoo Linux
Gentoo Linux
added 2009/07/14 12:00 a.m.41 views

ISC DHCP: dhcpclient Remote execution of arbitrary code

Background ISC DHCP is the reference implementation of the Dynamic Host Configuration Protocol as specified in RFC 2131. Description The Mandriva Linux Engineering Team has reported a stack-based buffer overflow in the subnet-mask handling of dhclient. Impact A remote attacker might set up a rogu...

10CVSS2.9AI score0.2578EPSS
SaveExploits9
Gentoo Linux
Gentoo Linux
added 2009/05/24 12:00 a.m.41 views

Cscope: User-assisted execution of arbitrary code

Background Cscope is a developer's tool for browsing source code. Description James Peach of Apple discovered a stack-based buffer overflow in cscope's handling of long file system paths CVE-2009-0148. Multiple stack-based buffer overflows were reported in the putstring function when processing a...

9.3CVSS7.4AI score0.07496EPSS
SaveExploits2
Gentoo Linux
Gentoo Linux
added 2009/04/19 12:00 a.m.41 views

LittleCMS: Multiple vulnerabilities

Background LittleCMS, or short lcms, is a color management system for working with ICC profiles. It is used by many applications including GIMP and Firefox. Description RedHat reported a null-pointer dereference flaw while processing monochrome ICC profiles CVE-2009-0793. Chris Evans of Google...

9.3CVSS8.3AI score0.05534EPSS
SaveExploits4
Gentoo Linux
Gentoo Linux
added 2009/03/09 12:00 a.m.41 views

PyCrypto: Execution of arbitrary code

Background PyCrypto is the Python Cryptography Toolkit. Description Mike Wiacek of the Google Security Team reported a buffer overflow in the ARC2 module when processing a large ARC2 key length. Impact A remote attacker could entice a user or automated system to decrypt an ARC2 stream in an...

10CVSS5.6AI score0.11523EPSS
SaveExploits3
Gentoo Linux
Gentoo Linux
added 2009/03/09 12:00 a.m.41 views

cURL: Arbitrary file access

Background cURL is a command line tool for transferring files with URL syntax, supporting numerous protocols. Description David Kierznowski reported that the redirect implementation accepts arbitrary Location values when CURLOPTFOLLOWLOCATION is enabled. Impact A remote attacker could possibly...

6.8CVSS2.3AI score0.0905EPSS
SaveExploits3
Gentoo Linux
Gentoo Linux
added 2009/02/12 12:00 a.m.41 views

OpenSSL: Certificate validation error

Background OpenSSL is an Open Source toolkit implementing the Secure Sockets Layer SSL v2/v3 and Transport Layer Security TLS v1 as well as a general purpose cryptography library. Description The Google Security Team reported that several functions incorrectly check the result after calling the...

5.8CVSS8.6AI score0.05146EPSS
SaveExploits1
Gentoo Linux
Gentoo Linux
added 2009/02/06 12:00 a.m.41 views

sudo: Privilege escalation

Background sudo allows a system administrator to give users the ability to run commands as other users. Description Harald Koenig discovered that sudo incorrectly handles group specifications in RunasAlias and related entries when a group is specified in the list using %group syntax, to allow a...

7.8CVSS2.4AI score0.00406EPSS
SaveExploits1
Gentoo Linux
Gentoo Linux
added 2008/12/02 12:00 a.m.41 views

enscript: User-assisted execution of arbitrary code

Background enscript is a powerful ASCII to PostScript file converter. Description Two stack-based buffer overflows in the readspecialescape function in src/psgen.c have been reported. Ulf Harnhammar of Secunia Research discovered a vulnerability related to the "setfilename" command CVE-2008-3863,...

9.3CVSS7.1AI score0.08358EPSS
SaveExploits1
Gentoo Linux
Gentoo Linux
added 2008/07/21 12:00 a.m.41 views

Bacula: Information disclosure

Background Bacula is a network based backup suite. Description Matthijs Kooijman reported that the "makecatalogbackup" script uses the MySQL password as a command line argument when invoking other programs. Impact A local attacker could list the processes on the local machine when the script is...

5.5CVSS6.1AI score0.00292EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2008/07/07 12:00 a.m.41 views

PCRE: Buffer overflow

Background PCRE is a Perl-compatible regular expression library. GLib includes a copy of PCRE. Description Tavis Ormandy of the Google Security team reported a heap-based buffer overflow when compiling regular expression patterns containing "Internal Option Settings" such as "?i ". Impact A remot...

7.5CVSS9.2AI score0.06726EPSS
SaveExploits3
Gentoo Linux
Gentoo Linux
added 2008/04/10 12:00 a.m.41 views

am-utils: Insecure temporary file creation

Background am-utils is a collection of utilities for use with the Berkeley Automounter. Description Tavis Ormandy discovered that, when creating temporary files, the 'expn' utility does not check whether the file already exists. Impact A local attacker could exploit the vulnerability via a symlin...

7.2CVSS6.3AI score0.00514EPSS
SaveExploits1
Gentoo Linux
Gentoo Linux
added 2008/03/11 12:00 a.m.41 views

International Components for Unicode: Multiple vulnerabilities

Background International Components for Unicode is a set of C/C++ and Java libraries providing Unicode and Globalization support for software applications. Description Will Drewry Google Security reported a vulnerability in the regular expression engine when using back references to capture \0...

9.3CVSS9.7AI score0.02934EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2008/03/03 12:00 a.m.41 views

SplitVT: Privilege escalation

Background SplitVT is a program for splitting terminals into two shells. Description Mike Ashton reported that SplitVT does not drop group privileges before executing the xprop utility. Impact A local attacker could exploit this vulnerability to gain the "utmp" group privileges. Workaround There ...

7.2CVSS6.4AI score0.00346EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2007/12/29 12:00 a.m.41 views

ClamAV: Multiple vulnerabilities

Background Clam AntiVirus is a free anti-virus toolkit for UNIX, designed especially for e-mail scanning on mail gateways. Description iDefense reported an integer overflow vulnerability in the cliscanpe function when parsing Portable Executable PE files packed in the MEW format, that could be...

10CVSS7.5AI score0.18382EPSS
SaveExploits4
Gentoo Linux
Gentoo Linux
added 2007/12/13 12:00 a.m.41 views

IRC Services: Denial of service

Background IRC Services is a system of services to be used with Internet Relay Chat networks. Description loverboy reported that the "defaultencrypt" function in file encrypt.c does not properly handle overly long passwords. Impact A remote attacker could provide an overly long password to the...

5CVSS6.5AI score0.02079EPSS
SaveExploits0
Total number of security vulnerabilities3852