Lucene search
+L
MageiaMost viewed

6098 matches found

Mageia
Mageia
•added 2017/06/08 9:39 p.m.•67 views

Updated libnl3 packages fix security vulnerability

An elevation of privilege vulnerability in the libnl library could enable a local malicious application to execute arbitrary code within the context of a privileged process CVE-2017-0386. An integer overflow vulnerability was found in nlmsgreserve triggered by crafted @len argument resulting into...

9.3CVSS4.9AI score0.01959EPSS
SaveExploits0References3
Mageia
Mageia
•added 2016/07/31 8:39 p.m.•67 views

Updated glibc and libtirpc packages fixes security vulnerability

A stack-based buffer overflow in the clntudpcall function in sunrpc/clntudp.c in the GNU C Library aka glibc or libc6 allows remote servers to cause a denial of service crash or possibly unspecified other impact via a flood of crafted ICMP and UDP packets CVE-2016-4429. A similar issue was fixed ...

5.9CVSS3.6AI score0.03922EPSS
SaveExploits0References1
Mageia
Mageia
•added 2016/07/26 9:59 p.m.•67 views

Updated php/xmlrpc-epi/timezone packages fix security vulnerability

Stack-based buffer overflow vulnerability in virtualfileex CVE-2016-6289. Use After Free in unserialize with Unexpected Session Deserialization CVE-2016-6290. Out of bound read in exifprocessIFDinMAKERNOTE CVE-2016-6291. NULL Pointer Dereference in exifprocessusercomment CVE-2016-6292...

9.8CVSS2.6AI score0.06271EPSS
SaveExploits7References7
Mageia
Mageia
•added 2015/07/23 9:39 a.m.•67 views

Updated java-1.7.0-openjdk package fixes security vulnerabilities

Multiple flaws were discovered in the 2D, CORBA, JMX, Libraries and RMI components in OpenJDK. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions CVE-2015-4760, CVE-2015-2628, CVE-2015-4731, CVE-2015-2590, CVE-2015-4732, CVE-2015-4733. A flaw was fou...

10CVSS5.3AI score0.9986EPSS
SaveExploits1References7
Mageia
Mageia
•added 2015/03/10 4:48 p.m.•67 views

Updated icu packages fix security vulnerability

It was discovered that ICU incorrectly handled memory operations when processing fonts. If an application using ICU processed crafted data, an attacker could cause it to crash or potentially execute arbitrary code with the privileges of the user invoking the program CVE-2014-6585, CVE-2014-6591...

2.6CVSS6.7AI score0.04297EPSS
SaveExploits0References2
Mageia
Mageia
•added 2015/03/03 9:16 p.m.•67 views

Updated php packages fix security vulnerabilities

Updated php packages fix security vulnerabilities: It was discovered that the PHP opcache component incorrectly handled memory. A remote attacker could possibly use this issue to cause PHP to crash, resulting in a denial of service, or possibly execute arbitrary code CVE-2015-1351. It was...

7.5CVSS9.4AI score0.42911EPSS
SaveExploits11References3
Mageia
Mageia
•added 2015/01/11 7:54 p.m.•67 views

Updated openssl packages fix security vulnerabilities

A carefully crafted DTLS message can cause a segmentation fault in OpenSSL due to a NULL pointer dereference. This could lead to a Denial Of Service attack CVE-2014-3571. A memory leak can occur in the dtls1bufferrecord function under certain conditions. In particular this could occur if an...

5CVSS7.1AI score0.98685EPSS
SaveExploits0References3
Mageia
Mageia
•added 2014/11/15 6:47 p.m.•67 views

Updated kernel-tmb packages fix security vulnerabilities

This kernel-tmb update is based on upstream -longterm 3.10.58 and fixes the following security issues: The kvmiommumappages function in virt/kvm/iommu.c in the Linux kernel through 3.16.1 miscalculates the number of pages during the handling of a mapping failure, which allows guest OS users to 1...

7.2CVSS7.3AI score0.01168EPSS
SaveExploits6References8
Mageia
Mageia
•added 2014/05/08 9:48 p.m.•67 views

Updated kernel packages fixes multiple bugs and vulnerabilities

Updated kernel provides upstream 3.12.18 kernel and fixes the following security issues: Buffer overflow in the completeemulatedmmio function in arch/x86/kvm/ x86.c in the Linux kernel before 3.13.6 allows guest OS users to execute arbitrary code on the host OS by leveraging a loop that triggers ...

7.4CVSS8.7AI score0.00959EPSS
SaveExploits10References9
Mageia
Mageia
•added 2014/02/25 9:35 p.m.•67 views

Updated springframework package fixes security vulnerabilities

It was discovered by the Spring development team that the fix for the XML External Entity XXE Injection CVE-2013-4152 in the Spring Framework was incomplete. Spring MVC's SourceHttpMessageConverter also processed user provided XML and neither disabled XML external entities nor provided an option ...

6.8CVSS0.6AI score0.90455EPSS
SaveExploits0References2
Mageia
Mageia
•added 2013/09/01 12:43 p.m.•67 views

Updated kde packages fix security issues

This update provides the last stable version of KDE for the 4.10.x branch. Some of the new packages fixes additional issues open on our tracker : - A memory leak in kde-workspace kde 314919 & mga 7953 - A memory leak in kmix mga 10702 & kde 309464 - A packaging issue affecting kdebase4-runtime...

7.8CVSS2.1AI score0.04412EPSS
SaveExploits3References2
Mageia
Mageia
•added 2024/03/15 10:51 p.m.•66 views

Updated yajl packages fix security vulnerabilities

The updated packages fix security vulnerabilities: In the yajl-ruby gem 1.3.0 for Ruby, when a crafted JSON file is supplied to Yajl::Parser.new.parse, the whole ruby process crashes with a SIGABRT in the yajlstringdecode function in yajlencode.c. This results in the whole ruby process terminatin...

7.5CVSS6.8AI score0.03798EPSS
SaveExploits2References3
Mageia
Mageia
•added 2024/03/15 2:49 a.m.•66 views

Updated mplayer packages fix security vulnerabilities

The MPlayer Project mencoder SVN-r38374-13.0.1 is vulnerable to Divide By Zero via the function config of llibmpcodecs/vfscale.c. CVE-2022-38850 Certain The MPlayer Project products are vulnerable to Out-of-bounds Read via function readmetarecord of mplayer/libmpdemux/asfheader.c. This affects...

5.5CVSS7.1AI score0.00344EPSS
SaveExploits9References1
Mageia
Mageia
•added 2024/02/04 2:49 a.m.•66 views

Updated glibc packages fix security vulnerabilities

The updated packages fix security vulnerabilities: A heap-based buffer overflow was found in the vsysloginternal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when the openlog function was not called, or called with the ident argumen...

8.4CVSS7.4AI score0.04794EPSS
SaveExploits9References3
Mageia
Mageia
•added 2023/10/19 4:11 p.m.•66 views

Updated chromium-browser-stable packages fix bugs and vulnerabilities

The chromium-browser-stable package has been updated to the 118.0.5993.70 release, fixing 20 bugs and vulnerabilities. Some of the security fixes are: Critical CVE-2023-5218: Use after free in Site Isolation. Reported by @18 on 2023-09-27 Medium CVE-2023-5487: Inappropriate implementation in...

8.8CVSS7.8AI score0.0126EPSS
SaveExploits0References1
Mageia
Mageia
•added 2023/09/24 10:16 p.m.•66 views

Updated nodejs packages fix security vulnerability

This is a security release. As well, it fixes v8 headers detection mga28809 The following CVEs are fixed in this release: CVE-2023-32002: Policies can be bypassed via Module.load High CVE-2023-32006: Policies can be bypassed by module.constructor.createRequire Medium CVE-2023-32559: Policies can ...

9.8CVSS6.8AI score0.01484EPSS
SaveExploits1References4
Mageia
Mageia
•added 2023/07/07 5:54 a.m.•66 views

Updated python-setuptools packages fix security vulnerability

Denial of service via crafted HTML CVE-2022-40897...

5.9CVSS6.9AI score0.02617EPSS
SaveExploits1References5
Mageia
Mageia
•added 2023/02/27 8:27 p.m.•66 views

Updated apache-commons-fileupload packages fix security vulnerability

Denial of service with a malicious upload or series of uploads. CVE-2023-24998...

7.5CVSS7.9AI score0.46836EPSS
SaveExploits1References2
Mageia
Mageia
•added 2022/10/23 10:48 p.m.•66 views

Updated freerdp packages fix security vulnerability

FreeRDP is a free implementation of the Remote Desktop Protocol RDP. In versions prior to 2.7.0, NT LAN Manager NTLM authentication does not properly abort when someone provides and empty password value. This issue affects FreeRDP based RDP Server implementations. RDP clients are not affected. Th...

9.8CVSS1.6AI score0.02752EPSS
SaveExploits1References4
Mageia
Mageia
•added 2022/08/18 6:45 p.m.•66 views

Updated nvidia-current packages fix security vulnerabilities

Updated nvidia-current packages fix security vulnerabilities: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer nvidia.ko, where a local user with basic capabilities can cause improper input validation, which may lead to denial of service, escalation of...

7.8CVSS3AI score0.00245EPSS
SaveExploits0References2
Mageia
Mageia
•added 2022/05/22 11:26 a.m.•66 views

Updated nvidia-current packages fix security vulnerabilities

Updated nvidia-current packages fix security vulnerabilities: NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer, where an unprivileged regular user on the network can cause an out-of-bounds write through a specially crafted shader, which may lead to code execution, denia...

9.9CVSS0.9AI score0.01091EPSS
SaveExploits0References3
Mageia
Mageia
•added 2022/04/05 5:32 p.m.•66 views

Updated chromium-browser-stable packages fix security vulnerability

Use after free in Portals. CVE-2022-1125 Use after free in QR Code Generator. CVE-2022-1127 Inappropriate implementation in Web Share API. CVE-2022-1128 Inappropriate implementation in Full Screen Mode. CVE-2022-1129 Insufficient validation of untrusted input in WebOTP. CVE-2022-1130 Use after fr...

8.8CVSS0.7AI score0.0179EPSS
SaveExploits17References2
Mageia
Mageia
•added 2022/01/23 8:50 p.m.•66 views

Updated glibc packages fix security vulnerabilities

Updated glibc packages fix security vulnerabilities: The deprecated compatibility function svcunixcreate in the sunrpc module of the GNU C Library aka glibc through 2.34 copies its path argument on the stack without validating its length, which may result in a buffer overflow, potentially resulti...

9.8CVSS3.2AI score0.04729EPSS
SaveExploits2References1
Mageia
Mageia
•added 2022/01/11 11:22 p.m.•66 views

Updated nss and firefox packages fix security vulnerabilities

It was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox CVE-2021-4140. Constructing audio sinks could have lead to a race condition when playing audio files and closing windows. This could have lead to a use-after-free causing a potentially exploitable cra...

10CVSS0.2AI score0.0134EPSS
SaveExploits6References5
Mageia
Mageia
•added 2021/12/08 8:4 p.m.•66 views

Updated nginx/vsftpd packages fix security vulnerability

ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication...

7.4CVSS7.7AI score0.02036EPSS
SaveExploits0References3
Mageia
Mageia
•added 2021/12/05 7:6 p.m.•66 views

Updated kernel-linus packages fix security vulnerabilities

This kernel-linus update is based on upstream 5.15.6 and fixes at least the following security issues: A vulnerability was found in Linux kernel, where a use-after-frees in nouveau's postclose handler could happen if removing device that is not common to remove video card physically without...

4.7CVSS0.8AI score0.00515EPSS
SaveExploits1References3
Mageia
Mageia
•added 2021/11/11 3:2 p.m.•66 views

Updated kernel-linus packages fix security vulnerabilities

This kernel-linus update is based on upstream 5.10.78 and fixes at least the following security issues: A use-after-free vulnerability in the NFC stack can lead to a threat to confidentiality, integrity, and system availability CVE-2021-3760. A flaw in the SCTP stack where a blind attacker may be...

9.8CVSS7.6AI score0.5758EPSS
SaveExploits4References4
Mageia
Mageia
•added 2021/10/02 6:57 p.m.•66 views

Updated python packages fix security vulnerability

Denial of service when identifying crafted invalid RFCs Security fix for CVE-2021-3737: python client can enter an infinite loop on a 100 Continue response from the server...

6.5CVSS2.6AI score0.04675EPSS
SaveExploits1References2
Mageia
Mageia
•added 2021/09/29 5:22 p.m.•66 views

Updated python-pillow packages fix security vulnerability

Updated python-pillow packages fix security vulnerability: The package pillow 5.2.0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service ReDoS via the getrgb function CVE-2021-23437...

7.5CVSS4.2AI score0.03154EPSS
SaveExploits1References1
Mageia
Mageia
•added 2021/07/25 2:45 p.m.•66 views

Updated nodejs packages fix security vulnerabilities

This affects the package y18n before 3.2.2, 4.0.1 and 5.0.5. PoC by po6ix: const y18n = require'y18n'; y18n.setLocale'proto'; y18n.updateLocalepolluted: true; console.logpolluted; // true CVE-2020-7774. The package hosted-git-info before 3.0.8 are vulnerable to Regular Expression Denial of Servic...

9.8CVSS3.9AI score0.69062EPSS
SaveExploits3References9
Mageia
Mageia
•added 2021/07/22 7:8 a.m.•66 views

Updated kernel-linus packages fix security vulnerabilities

This kernel-linus update is based on upstream 5.10.52 and fixes at least the following security issues: There is a race condition in net/can/bcm.c that can lead to local privilege escalation to root CVE-2021-3609. A vulnerability was found in the Linux kernel. Missing size validations on inbound...

7.8CVSS6.9AI score0.09729EPSS
SaveExploits7References7
Mageia
Mageia
•added 2021/04/12 7:59 p.m.•66 views

Updated curl packages fix security vulnerabilities

libcurl does not strip off user credentials from the URL when automatically populating the Referer: HTTP request header field in outgoing HTTP requests, and therefore risks leaking sensitive data to the server that is the target of the second HTTP request. CVE-2021-22876 TLS 1.3 session ticket...

5.3CVSS0.6AI score0.05301EPSS
SaveExploits2References4
Mageia
Mageia
•added 2020/09/04 9:16 a.m.•66 views

Updated lua and lua5.3 packages fix security vulnerability

ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal, as demonstrated by getlocal3,2^31. CVE-2020-24370...

5.3CVSS2.8AI score0.03833EPSS
SaveExploits1References2
Mageia
Mageia
•added 2020/06/10 11:59 p.m.•66 views

Updated perl packages fix security vulnerability

This update from 5.28.2 to 5.28.3 fixes bugs several bugs the RPM package manager. - Update to 5.23.3 See https://metacpan.org/pod/release/XSAWYERX/perl-5.28.3/pod/perldelta.pod for release notes - Security release fixes CVE-2020-10543, CVE-2020-10878 and CVE-2020-12723 - Work around a glibc bug...

8.6CVSS0.3AI score0.11334EPSS
SaveExploits0References1
Mageia
Mageia
•added 2020/06/10 10:57 p.m.•66 views

Updated ruby-rack packages fix security vulnerability

Updated ruby-rack packages fix security vulnerabilities: There's a possible information leak / session hijack vulnerability in RackRubyGem rack. Attackers may be able to find and hijack sessions by using timing attacks targeting the session id. Session ids are usually stored and indexed in a...

8.6CVSS1AI score0.03703EPSS
SaveExploits0References5
Mageia
Mageia
•added 2020/03/08 10:37 p.m.•66 views

Updated glibc packages fix security vulnerabilities

Updated glibc packages fix security vulnerabilities: Trigonometric functions on x86 targets suffered from stack corruption when they were passed a pseudo-zero argument. Reported by Guido Vranken / ForAllSecure Mayhem. BZ 25487 CVE-2020-10029. Fix use-after-free in glob when expanding user BZ 2541...

7CVSS7.3AI score0.00758EPSS
SaveExploits1References3
Mageia
Mageia
•added 2020/01/28 11:32 a.m.•66 views

Updated php packages fix security vulnerabilities

Updated php packages fix security vulnerabilities: Two buffer overflows in string and mbstring handling have been found CVE-2020-7059, CVE-2020-7060. Other security fixes have been applied: - Session: Fixed bug 79091 heap use-after-free in sessioncreateid. - Date: Fixed bug 79015...

9.1CVSS1.5AI score0.08888EPSS
SaveExploits2References2
Mageia
Mageia
•added 2020/01/28 7:52 a.m.•66 views

Updated tomcat packages fix security vulnerabilities

When Apache Tomcat 9.0.0.M1 to 9.0.28, 8.5.0 to 8.5.47, 7.0.0 and 7.0.97 is configured with the JMX Remote Lifecycle Listener, a local attacker without access to the Tomcat process or configuration files is able to manipulate the RMI registry to perform a man-in-the-middle attack to capture user...

7.5CVSS2.6AI score0.10687EPSS
SaveExploits0References6
Mageia
Mageia
•added 2019/11/14 4:58 p.m.•66 views

Updated python-numpy packages fix security vulnerability

Updated python-numpy packages fix security vulnerability: An issue was discovered in NumPy 1.16.0 and earlier. It uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, as demonstrated by a numpy.load call CVE-2019-6446...

9.8CVSS7AI score0.17528EPSS
SaveExploits2References2
Mageia
Mageia
•added 2019/09/21 11:7 a.m.•66 views

Updated chromium-browser-stable packages fix security vulnerabilities

Multiple flaws were found in the way Chromium 73.0.3683.103 processes various types of web content, where loading a web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information. CVE-2019-5805, CVE-2019-5806, CVE-2019-5807,...

9.8CVSS2AI score0.55925EPSS
SaveExploits7References13
Mageia
Mageia
•added 2019/09/06 9:9 p.m.•66 views

Updated poppler packages fix security vulnerabilities

Updated poppler packages fix security vulnerabilities Poppler 0.74.0 has a heap-based buffer over-read in the CairoRescaleBox.cc downsamplerowboxfilter function. CVE-2019-9631 PDFDoc::markObject in PDFDoc.cc in Poppler 0.74.0 mishandles dict marking, leading to stack consumption in the function...

9.8CVSS1.1AI score0.03518EPSS
SaveExploits7References4
Mageia
Mageia
•added 2019/07/21 6:17 p.m.•66 views

Updated firefox packages fix security vulnerability

Sandbox escape via installation of malicious language pack. CVE-2019-9811 Script injection within domain through inner window reuse. CVE-2019-11711 Cross-origin POST requests can be made with NPAPI plugins by following 308 redirects. CVE-2019-11712 Use-after-free with HTTP/2 cached stream...

9.8CVSS9.1AI score0.20271EPSS
SaveExploits2References3
Mageia
Mageia
•added 2019/07/21 6:17 p.m.•66 views

Updated firefox packages fix security vulnerability

Sandbox escape via installation of malicious language pack. CVE-2019-9811 Script injection within domain through inner window reuse. CVE-2019-11711 Cross-origin POST requests can be made with NPAPI plugins by following 308 redirects. CVE-2019-11712 Use-after-free with HTTP/2 cached stream...

9.8CVSS9.3AI score0.20271EPSS
SaveExploits4References5
Mageia
Mageia
•added 2019/05/16 8:25 a.m.•66 views

Updated microcode packages fix security vulnerabilities

This update provides the Intel 20190514 microcode release that adds the microcode side mitigations for the Microarchitectural Data Sampling MDS, also called ZombieLoad attack vulnerabilities in Intel processors that can allow attackers to retrieve data being processed inside a CPU. The fixed /...

5.9CVSS1.4AI score0.01566EPSS
SaveExploits0References2
Mageia
Mageia
•added 2018/11/03 11:55 a.m.•66 views

Updated java-1.8.0-openjdk packages fix security vulnerabilities

Updated java-1.8.0-openjdk packages fix security vulnerabilities: Incorrect handling of unsigned attributes in singed Jar manifests Security, 8194534 CVE-2018-3136. Leak of sensitive header data via HTTP redirect Networking, 8196902 CVE-2018-3139. Incomplete enforcement of the trustURLCodebase...

9CVSS0.6AI score0.07156EPSS
SaveExploits3References3
Mageia
Mageia
•added 2018/08/10 2:37 p.m.•66 views

Updated mp3gain packages fix security vulnerabilities

A NULL pointer dereference was discovered in syncbuffer in interface.c in mpglibDBL, as used in MP3Gain version 1.5.2. The vulnerability causes a segmentation fault and application crash, which leads to remote denial of service CVE-2017-14406. A stack-based buffer over-read was discovered in...

7.8CVSS5AI score0.01703EPSS
SaveExploits0References4
Mageia
Mageia
•added 2018/06/04 3:11 p.m.•66 views

Updated mariadb packages fix security vulnerabilities

Updated mariadb packages fix security vulnerabilities: Vulnerability in the MariaDB Server component of MariaDB subcomponent: Server: Partition. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MariaDB Server. Successful...

7.7CVSS2.4AI score0.0401EPSS
SaveExploits0References6
Mageia
Mageia
•added 2018/05/29 7:41 p.m.•66 views

Updated mariadb packages fix security vulnerabilities

Updated mariadb packages fix security vulnerabilities: Vulnerability in the MariaDB Server component of MariaDB subcomponent: Server: Replication. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where MariaDB Server executes to compromise MariaD...

7.7CVSS2.4AI score0.0401EPSS
SaveExploits0References4
Mageia
Mageia
•added 2016/11/17 11:40 p.m.•66 views

Updated libtiff packages fix security vulnerability

A read outside of array in tiffsplit or other utilities using TIFFNumberOfStrips CVE-2016-9273. A potential read outside buffer in TIFFPrintField CVE-2016-9297. Multiple uint32 overflows in writeBufferToSeparateStrips, writeBufferToContigTiles and writeBufferToSeparateTiles that could cause heap...

7.5CVSS2AI score0.06471EPSS
SaveExploits0References4
Mageia
Mageia
•added 2016/07/26 9:16 p.m.•66 views

Updated apache packages fix security vulnerability

It was discovered that httpd used the value of the Proxy header from HTTP requests to initialize the HTTPPROXY environment variable for CGI scripts, which in turn was incorrectly used by certain HTTP client implementations to configure the proxy for outgoing HTTP requests. A remote attacker could...

8.1CVSS0.3AI score0.55724EPSS
SaveExploits0References4
Total number of security vulnerabilities5000