Lucene search
+L
GentooMost viewed

3852 matches found

Gentoo Linux
Gentoo Linux
added 2018/04/08 12:00 a.m.40 views

libvirt: Multiple vulnerabilities

Background libvirt is a C toolkit for manipulating virtual machines. Description Multiple vulnerabilities have been discovered in libvirt. Please review the CVE identifiers referenced below for details. Impact A local privileged attacker could execute arbitrary commands or cause a Denial of Servi...

7.8CVSS3.5AI score0.03175EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2017/10/13 12:00 a.m.40 views

elfutils: Multiple vulnerabilities

Background Elfutils provides a library and utilities to access, modify and analyse ELF objects. Description Multiple vulnerabilities have been discovered in elfutils. Please review the referenced CVE identifiers for details. Impact A remote attacker could possibly cause a Denial of Service...

5.5CVSS6.7AI score0.02126EPSS
SaveExploits7
Gentoo Linux
Gentoo Linux
added 2017/06/22 12:00 a.m.40 views

jbig2dec: Multiple vulnerabilities

Background jbig2dec is a decoder implementation of the JBIG2 image compression format. Description Multiple vulnerabilities have been discovered in jbig2dec. Please review the CVE identifiers referenced below for details. Impact A remote attacker could entice a user or automated system to process...

5.5CVSS4.5AI score0.01748EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2015/07/23 12:00 a.m.40 views

e2fsprogs: Arbitrary code execution

Background e2fsprogs is a set of utilities for maintaining the ext2, ext3 and ext4 file systems. Description e2fsprogs has a heap-based buffer overflow in closefs.c in the libext2fs library. Impact A local attacker could execute arbitrary code via a specially crafted block group descriptor...

4.6CVSS9.6AI score0.00591EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2015/07/10 12:00 a.m.40 views

OpenSSL: Alternate chains certificate forgery

Background OpenSSL is an Open Source toolkit implementing the Secure Sockets Layer SSL v2/v3 and Transport Layer Security TLS v1 as well as a general purpose cryptography library. Description During certificate verification, OpenSSL attempts to find an alternative certificate chain if the first...

6.5CVSS6.6AI score0.62394EPSS
SaveExploits7
Gentoo Linux
Gentoo Linux
added 2015/02/25 12:00 a.m.40 views

grep: Denial of service

Background grep is the GNU regular expression matcher. Description A heap buffer overrun has been fixed in the bmexectrans function in kwset.c. Impact A local user can cause Denial of Service. Workaround There is no known workaround at this time. Resolution All grep users should upgrade to the...

2.1CVSS9.1AI score0.00486EPSS
SaveExploits1
Gentoo Linux
Gentoo Linux
added 2015/02/07 12:00 a.m.40 views

nginx: Information disclosure

Background nginx is a robust, small, and high performance HTTP and reverse proxy server. Description An SSL session fixation vulnerability has been found in nginx when multiple servers use the same shared sslsessioncache or sslsessionticketkey. Impact A remote attacker may be able to obtain...

4.3CVSS6.2AI score0.05654EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2014/12/13 12:00 a.m.40 views

OpenJPEG: Multiple vulnerabilities

Background OpenJPEG is an open-source JPEG 2000 library. Description Multiple vulnerabilities have been discovered in OpenJPEG. Please review the CVE identifiers referenced below for details. Impact A remote attacker could entice a user to open a specially crafted JPEG file, possibly resulting in...

10CVSS9AI score0.05515EPSS
SaveExploits1
Gentoo Linux
Gentoo Linux
added 2014/12/13 12:00 a.m.40 views

QtGui: Denial of service

Background QtGui is the GUI module and platform plugins for the Qt5 framework. Description A NULL pointer dereference has been found in QtGui. Impact A remote attacker could send a specially crafted GIF image, possibly resulting in a Denial of Service condition. Workaround There is no known...

4.3CVSS8.5AI score0.03957EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2014/10/12 12:00 a.m.40 views

Perl, Perl Locale-Maketext module: Multiple vulnerabilities

Background Locale-Maketext - Perl framework for localization Description Two vulnerabilities have been reported in the Locale-Maketext module for Perl, which can be exploited by malicious users to compromise an application using the module. The vulnerabilities are caused due to the “compile”...

7.5CVSS10AI score0.63488EPSS
SaveExploits13
Gentoo Linux
Gentoo Linux
added 2014/09/19 12:00 a.m.40 views

libxml2: Denial of service

Background libxml2 is the XML C parser and toolkit developed for the Gnome project. Description A vulnerability in the xmlParserHandlePEReference function of parser.c, when expanding entity references, can be exploited to consume large amounts of memory and cause a crash or hang. Impact A remote...

4.3CVSS7.7AI score0.08137EPSS
SaveExploits1
Gentoo Linux
Gentoo Linux
added 2014/05/03 12:00 a.m.40 views

libSRTP: Denial of service

Background libSRTP is an Open-source implementation of the Secure Real-time Transport Protocol. Description A flaw was found in how the cryptopolicysetfromprofileforrtp function applies cryptographic profiles to an srtppolicy in libSRTP. Impact A remote attacker could exploit this vulnerability t...

2.6CVSS7.3AI score0.0299EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2014/01/26 12:00 a.m.40 views

Tomboy: Privilege escalation

Background Tomboy is a desktop note-taking application. Description Tomboy places a zero-length directory name in the LDLIBRARYPATH, which might result in the current working directory . to be included when searching for dynamically linked libraries. NOTE: This vulnerability exists due to an...

6.9CVSS6.1AI score0.00481EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2014/01/06 12:00 a.m.40 views

Gajim: Information disclosure

Background Gajim is a Jabber/XMPP client which uses GTK+. Description The sslverifycallback function in tlsnb.py does not properly validate SSL certificates, causing any certificate to be accepted as valid as long as the root CA is valid. Impact A remote attacker might employ a specially crafted...

4.3CVSS6.1AI score0.01148EPSS
SaveExploits1
Gentoo Linux
Gentoo Linux
added 2013/11/28 12:00 a.m.40 views

cpio: Arbitrary code execution

Background GNU cpio copies files into or out of a cpio or tar archive. Description Cpio contains a heap-based buffer overflow in the rmtread function in lib/rtapelib.c. Impact A remote server could sending more data than was requested, related to archive filenames that contain a : colon character...

6.8CVSS8.2AI score0.04747EPSS
SaveExploits2
Gentoo Linux
Gentoo Linux
added 2013/09/02 12:00 a.m.40 views

Xlockmore: Denial of service

Background Xlockmore is just another screensaver application for X. Description A Denial of Service flaw was found in the way Xlockmore performed the passing of arguments to the underlying localtime call, when the ‘dlock’ mode was used. Impact A local attacker could possibly cause a Denial of...

7.5CVSS7.4AI score0.02897EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2012/04/10 12:00 a.m.40 views

Chromium: Multiple vulnerabilities

Background Chromium is an open source web browser project. Description Multiple vulnerabilities have been discovered in Chromium. Please review the CVE identifiers and release notes referenced below for details. Impact A remote attacker could entice a user to open a specially crafted web site usi...

6.8CVSS7.5AI score0.02099EPSS
SaveExploits10
Gentoo Linux
Gentoo Linux
added 2012/03/25 12:00 a.m.40 views

Chromium: Multiple vulnerabilities

Background Chromium is an open source web browser project. Description Multiple vulnerabilities have been discovered in Chromium. Please review the CVE identifiers and release notes referenced below for details. Impact A remote attacker could entice a user to open a specially crafted web site usi...

10CVSS7.5AI score0.04816EPSS
SaveExploits5
Gentoo Linux
Gentoo Linux
added 2012/02/22 12:00 a.m.40 views

Asterisk: Denial of service

Background Asterisk is an open source telephony engine and toolkit. Description A vulnerability has been found in Asterisk's handling of certain encrypted streams where the ressrtp module has been loaded but video support has not been enabled. Impact A remote attacker could send a specially craft...

4.3CVSS6.3AI score0.02406EPSS
SaveExploits1
Gentoo Linux
Gentoo Linux
added 2011/10/10 12:00 a.m.40 views

vsftpd: Denial of service

Background vsftpd is a very secure FTP daemon written with speed, size and security in mind. Description A Denial of Service vulnerability was discovered in vsftpd. Please review the CVE identifier referenced below for details. Impact A remote authenticated attacker could cause a Denial of Servic...

4CVSS3.6AI score0.73946EPSS
SaveExploits9
Gentoo Linux
Gentoo Linux
added 2009/09/09 12:00 a.m.40 views

aMule: Parameter injection

Background aMule is an eMule-like client for the eD2k and Kademlia networks, supporting multiple platforms. Description Sam Hocevar discovered that the aMule preview function does not properly sanitize file names. Impact A remote attacker could entice a user to download a file with a specially...

6.8CVSS6.5AI score0.0154EPSS
SaveExploits1
Gentoo Linux
Gentoo Linux
added 2009/03/12 12:00 a.m.40 views

TMSNC: Execution of arbitrary code

Background TMSNC is a Textbased client for the MSN instant messaging protocol. Description Nico Golde reported a stack-based buffer overflow when processing a MSN packet with a UBX command containing a large UBX payload length field. Impact A remote attacker could send a specially crafted message...

10CVSS7.2AI score0.04767EPSS
SaveExploits1
Gentoo Linux
Gentoo Linux
added 2009/01/20 12:00 a.m.40 views

Pidgin: Multiple vulnerabilities

Background Pidgin formerly Gaim is an instant messaging client for a variety of instant messaging protocols. It is based on the libpurple instant messaging library. Description Multiple vulnerabilities have been discovered in Pidgin and the libpurple library: A participant to the TippingPoint ZDI...

6.8CVSS8.6AI score0.07258EPSS
SaveExploits2
Gentoo Linux
Gentoo Linux
added 2008/12/02 12:00 a.m.40 views

lighttpd: Multiple vulnerabilities

Background lighttpd is a lightweight high-performance web server. Description Multiple vulnerabilities have been reported in lighttpd: Qhy reported a memory leak in the httprequestparse function in request.c CVE-2008-4298. Gaetan Bisson reported that URIs are not decoded before applying...

7.5CVSS8.3AI score0.04345EPSS
SaveExploits2
Gentoo Linux
Gentoo Linux
added 2008/09/25 12:00 a.m.40 views

ClamAV: Multiple Denials of Service

Background Clam AntiVirus is a free anti-virus toolkit for UNIX, designed especially for e-mail scanning on mail gateways. Description Hanno boeck reported an error in libclamav/chmunpack.c when processing CHM files CVE-2008-1389. Other unspecified vulnerabilities were also reported, including a...

10CVSS6.7AI score0.03582EPSS
SaveExploits2
Gentoo Linux
Gentoo Linux
added 2008/08/06 12:00 a.m.40 views

Wireshark: Denial of service

Background Wireshark is a network protocol analyzer with a graphical front-end. Description Multiple vulnerabilities related to memory management were discovered in the GSM SMS dissector CVE-2008-3137, the PANA and KISMET dissectors CVE-2008-3138, the RTMPT dissector CVE-2008-3139, the syslog...

5CVSS6.5AI score0.04946EPSS
SaveExploits3
Gentoo Linux
Gentoo Linux
added 2008/06/19 12:00 a.m.40 views

X.Org X server: Multiple vulnerabilities

Background The X Window System is a graphical windowing system based on a client/server model. Description Regenrecht reported multiple vulnerabilities in various X server extensions via iDefense: The SProcSecurityGenerateAuthorization and SProcRecordCreateContext functions of the RECORD and...

10CVSS8.6AI score0.03566EPSS
SaveExploits1
Gentoo Linux
Gentoo Linux
added 2008/04/29 12:00 a.m.40 views

KDE start_kdeinit: Multiple vulnerabilities

Background KDE is a feature-rich graphical desktop environment for Linux and Unix-like operating systems. startkdeinit is a wrapper for kdeinit. Description Vulnerabilities have been reported in the processing of user-controlled data by startkdeinit, which is setuid root by default. Impact A loca...

4.6CVSS7.2AI score0.00626EPSS
SaveExploits2
Gentoo Linux
Gentoo Linux
added 2008/04/24 12:00 a.m.40 views

SILC: Multiple vulnerabilities

Background SILC Secure Internet Live Conferencing protocol Toolkit is a software development kit for use in clients, SILC Server is a communication server, and SILC Client is an IRSSI-based text client. Description Nathan G. Grennan reported a boundary error in SILC Toolkit within the...

7.8CVSS8AI score0.04323EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2008/04/17 12:00 a.m.40 views

rsync: Execution of arbitrary code

Background rsync is a file transfer program to keep remote directories synchronized. Description Sebastian Krahmer of SUSE reported an integer overflow in the expanditemlist function in the file util.c which might lead to a heap-based buffer overflow when extended attribute xattr support is...

7.5CVSS7.2AI score0.04985EPSS
SaveExploits1
Gentoo Linux
Gentoo Linux
added 2008/04/10 12:00 a.m.40 views

lighttpd: Multiple vulnerabilities

Background lighttpd is a lightweight high-performance web server. Description Julien Cayzax discovered that an insecure default setting exists in moduserdir in lighttpd. When userdir.path is not set the default value used is $HOME. It should be noted that the "nobody" user's $HOME is "/"...

5CVSS6.5AI score0.119EPSS
SaveExploits3
Gentoo Linux
Gentoo Linux
added 2008/03/18 12:00 a.m.40 views

Adobe Acrobat Reader: Insecure temporary file creation

Background Acrobat Reader is a PDF reader released by Adobe. Description SUSE reported that the "acroread" wrapper script does not create temporary files in a secure manner when handling SSL certificates CVE-2008-0883. Impact A local attacker could exploit this vulnerability to overwrite arbitrar...

3.7CVSS6AI score0.0077EPSS
SaveExploits1
Gentoo Linux
Gentoo Linux
added 2008/03/10 12:00 a.m.40 views

MPlayer: Multiple buffer overflows

Background MPlayer is a media player incuding support for a wide range of audio and video formats. Description The following errors have been discovered in MPlayer: Felipe Manzano and Anibal Sacco Core Security Technologies reported an array indexing error in the file libmpdemux/demuxmov.c when...

9.3CVSS7.2AI score0.08878EPSS
SaveExploits4
Gentoo Linux
Gentoo Linux
added 2007/10/25 12:00 a.m.40 views

Qt: Buffer overflow

Background Qt is a cross-platform GUI framework, which is used e.g. by KDE. Description Dirk Mueller from the KDE development team discovered a boundary error in file qutfcodec.cpp when processing Unicode strings. Impact A remote attacker could send a specially crafted Unicode string to a...

7.5CVSS7AI score0.0234EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2007/09/13 12:00 a.m.40 views

KVIrc: Remote arbitrary code execution

Background KVIrc is a free portable IRC client based on Qt. Description Stefan Cornelius from Secunia Research discovered that the "parseIrcUrl" function in file src/kvirc/kernel/kviircurl.cpp does not properly sanitise parts of the URI when building the command for KVIrc's internal script system...

9.3CVSS7.1AI score0.03197EPSS
SaveExploits1
Gentoo Linux
Gentoo Linux
added 2007/07/05 12:00 a.m.40 views

Webmin, Usermin: Cross-site scripting vulnerabilities

Background Webmin is a web-based administrative interface for Unix-like systems. Usermin is a simplified version of Webmin designed for use by normal users rather than system administrators. Description The pamlogin.cgi file does not properly sanitize user input before sending it back as output t...

4.3CVSS6.7AI score0.01569EPSS
SaveExploits1
Gentoo Linux
Gentoo Linux
added 2007/04/27 12:00 a.m.40 views

BEAST: Denial of service

Background BEdevilled Audio SysTem is an audio compositor, supporting a wide range of audio formats. Description BEAST, which is installed as setuid root, fails to properly check whether it can drop privileges accordingly if seteuid fails due to a user exceeding assigned resource limits. Impact A...

7.8CVSS6.2AI score0.00447EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2007/04/24 12:00 a.m.40 views

ClamAV: Multiple vulnerabilities

Background ClamAV is a GPL virus scanner. Description iDefense Labs have reported a stack-based buffer overflow in the cabunstore function when processing negative values in .cab files. Multiple file descriptor leaks have also been reported in chmunpack.c, pdf.c and dblock.c when processing .chm...

7.5CVSS7.4AI score0.05412EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2007/02/25 12:00 a.m.40 views

Nexuiz: Multiple vulnerabilities

Background Nexuiz is a multi-player FPS game which uses a modified version of the Quake 1 engine. Description Nexuiz fails to correctly validate input within "clientcommands". There is also a failure to correctly handle connection attempts from remote hosts. Impact Using a specially crafted...

7.5CVSS7AI score0.02217EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2007/01/29 12:00 a.m.40 views

KSirc: Denial of Service vulnerability

Background KSirc is the default KDE IRC client. Description KSirc fails to check the size of an incoming PRIVMSG string sent from an IRC server during the connection process. Impact A malicious IRC server could send a long PRIVMSG string to the KSirc client causing an assertion failure and the...

6.5CVSS6.3AI score0.10304EPSS
SaveExploits2
Gentoo Linux
Gentoo Linux
added 2007/01/27 12:00 a.m.40 views

X.Org X server: Multiple vulnerabilities

Background The X Window System is a graphical windowing system based on a client/server model. Description Multiple memory corruption vulnerabilities have been found in the ProcDbeGetVisualInfo and the ProcDbeSwapBuffers of the DBE extension, and ProcRenderAddGlyphs in the Render extension. Impac...

10CVSS7.5AI score0.03415EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2007/01/15 12:00 a.m.40 views

oftpd: Denial of service

Background oftpd is a small, anonymous only ftp daemon. Description By specifying an unsupported address family in the arguments to a LPRT or LPASV command, an assertion in oftpd will cause the daemon to abort. Impact Remote, unauthenticated attackers may be able to terminate any oftpd process,...

9.4CVSS6.5AI score0.06803EPSS
SaveExploits2
Gentoo Linux
Gentoo Linux
added 2006/12/20 12:00 a.m.40 views

imlib2: Multiple vulnerabilities

Background imlib2 is an advanced replacement for image manipulation libraries such as libXpm. It is utilized by numerous programs, including gkrellm and several window managers, to display images. Description M. Joonas Pihlaja discovered several buffer overflows in loaderargb.c, loaderpng.c,...

5.1CVSS7AI score0.04315EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2006/11/24 12:00 a.m.40 views

ImageMagick: PALM and DCM buffer overflows

Background ImageMagick is a software suite to create, edit, and compose bitmap images, that can also read, write, and convert images in many other formats. Description M. Joonas Pihlaja has reported that a boundary error exists within the ReadDCMImage function of coders/dcm.c, causing the imprope...

5.1CVSS7AI score0.03572EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2006/08/10 12:00 a.m.40 views

WordPress: Privilege escalation

Background WordPress is a PHP and MySQL based multiuser blogging system. Description The WordPress developers have confirmed a vulnerability in capability checking for plugins. Impact By exploiting a flaw, a user can circumvent WordPress access restrictions when using plugins. The actual impact...

10CVSS6.8AI score0.0375EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2006/03/21 12:00 a.m.40 views

Macromedia Flash Player: Arbitrary code execution

Background The Macromedia Flash Player is a renderer for the popular SWF filetype which is commonly used to provide interactive websites, digital experiences and mobile content. Description The Macromedia Flash Player contains multiple unspecified vulnerabilities. Impact An attacker serving a...

5.1CVSS7.3AI score0.06756EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2006/02/26 12:00 a.m.40 views

noweb: Insecure temporary file creation

Background noweb is a simple, extensible, and language independent literate programming tool. Description Javier Fernandez-Sanguino has discovered that the lib/toascii.nw and shell/roff.mm scripts insecurely create temporary files with predictable filenames. Impact A local attacker could create...

1.2CVSS6.1AI score0.00354EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2006/01/10 12:00 a.m.40 views

xine-lib, FFmpeg: Heap-based buffer overflow

Background xine is a GPL high-performance, portable and reusable multimedia playback engine. xine-lib is xine's core engine. FFmpeg is a very fast video and audio converter and is used in xine-lib. Description Simon Kilvington has reported a vulnerability in FFmpeg libavcodec. The flaw is due to ...

7.5CVSS7.3AI score0.05209EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2005/12/18 12:00 a.m.40 views

Opera: Command-line URL shell command injection

Background Opera is a multi-platform web browser. Description Peter Zelezny discovered that the shell script used to launch Opera parses shell commands that are enclosed within backticks in the URL provided via the command line. Impact A remote attacker could exploit this vulnerability by enticin...

7.5CVSS6.8AI score0.06357EPSS
SaveExploits0
Gentoo Linux
Gentoo Linux
added 2005/11/22 12:00 a.m.40 views

eix: Insecure temporary file creation

Background eix is a small utility for searching ebuilds with indexing for fast results. Description Eric Romang discovered that eix creates a temporary file with a predictable name. eix creates a temporary file in /tmp/eix..sync where is the process ID of the shell running eix. Impact A local...

5CVSS6.3AI score0.01099EPSS
SaveExploits0
Total number of security vulnerabilities3852