Lucene search
+L
MageiaMost viewed

6218 matches found

Mageia
Mageia
added 2018/09/21 4:26 p.m.73 views

Updated unixODBC packages fix security vulnerability

unixODBC before version 2.3.5 is vulnerable to a buffer overflow in the DriverManager/info.c:unicodetoansicopy method. An attacker could exploit this to cause a denial of service or other unspecified impact CVE-2018-7409. The SQLWriteFileDSN function in odbcinst/SQLWriteFileDSN.c in unixODBC 2.3....

9.8CVSS6.7AI score0.03024EPSS
SaveExploits0References2
Mageia
Mageia
added 2018/08/15 3:45 p.m.73 views

Updated iceaepe packages fix security vulnerability

Updated iceape packages include security fixes from upstream Seamonkey and Firefox: Multiple flaws were found in the way Iceape 2.49.1 processes various types of web content, where loading a web page containing malicious content could cause Iceape to crash, execute arbitrary code, or disclose...

9.8CVSS2.3AI score0.21036EPSS
SaveExploits9References7
Mageia
Mageia
added 2018/04/08 9:37 p.m.73 views

Updated libvncserver packages fix security vulnerability

An issue was discovered in LibVNCServer through 0.9.11. rfbProcessClientNormalMessage in rfbserver.c does not sanitize msg.cct.length, leading to access to uninitialized and potentially sensitive data or possibly unspecified other impact e.g., an integer overflow via specially crafted VNC packets...

9.8CVSS5.1AI score0.06106EPSS
SaveExploits1References2
Mageia
Mageia
added 2018/03/30 2:21 p.m.73 views

Updated kernel packages fix security vulnerabilities

This kernel update is based on the upstream 4.14.30 and fixes at least the following security issues: The KPTI mitigation for Meltdown CVE-2017-5754 on 32bit x86 has been updated to revision 4. A flaw was found in the Linux kernel implementation of 32 bit syscall interface for bridging allowing a...

7.2CVSS6.9AI score0.84172EPSS
SaveExploits4References7
Mageia
Mageia
added 2018/01/01 1:17 a.m.73 views

Updated ncurses packages fix security vulnerabilities

Possible RCE via stack-based buffer overflow in the fmtentry function CVE-2017-10684. Possible RCE with format string vulnerability in the fmtentry function CVE-2017-10685. Illegal address access in appendacs CVE-2017-11112. Dereferencing NULL pointer in ncparseentry CVE-2017-11113. Fix infinite...

9.8CVSS4.1AI score0.04876EPSS
SaveExploits7References5
Mageia
Mageia
added 2017/08/24 9:18 p.m.73 views

Updated unrar packages fix security vulnerabilities

VMSFDELTA memory corruption CVE-2012-6706. Directory traversal issue in UnRAR before 5.5.7 CVE-2017-12938. libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the EncodeFileName::Decode call within the Archive::ReadHeader15 function CVE-2017-12940. libunrar.a in UnRAR before 5.5.7 has a...

10CVSS5.3AI score0.10027EPSS
SaveExploits8References4
Mageia
Mageia
added 2017/06/08 9:39 p.m.73 views

Updated libnl3 packages fix security vulnerability

An elevation of privilege vulnerability in the libnl library could enable a local malicious application to execute arbitrary code within the context of a privileged process CVE-2017-0386. An integer overflow vulnerability was found in nlmsgreserve triggered by crafted @len argument resulting into...

9.3CVSS4.9AI score0.01964EPSS
SaveExploits0References3
Mageia
Mageia
added 2017/04/16 6:29 a.m.73 views

Updated mediawiki packages fix security vulnerability

API parameters may now be marked as "sensitive" to keep their values out of the logs CVE-2017-0361. "Mark all pages visited" on the watchlist now requires a CSRF token CVE-2017-0362. Special:UserLogin and Special:Search allow redirect to interwiki links CVE-2017-0363, CVE-2017-0364. XSS in...

8.8CVSS1.2AI score0.01473EPSS
SaveExploits1References2
Mageia
Mageia
added 2015/11/19 10:08 p.m.73 views

Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 4.1.13 longterm kernel and fixes the following security issues: The virtnetprobe function in drivers/net/virtionet.c in the Linux kernel before 4.2 attempts to support a FRAGLIST feature without proper memory allocation, which allows guest OS users to cause...

6.1CVSS6.2AI score0.02501EPSS
SaveExploits0References2
Mageia
Mageia
added 2015/09/15 2:55 p.m.73 views

Updated qemu packages fix security vulnerabilities

Updated qemu packages fix security vulnerabilities: Qemu emulator built with the RTL8139 emulation support is vulnerable to an information leakage flaw. It could occur while processing network packets under RTL8139 controller's C+ mode of operation. A guest user could use this flaw to read...

9.3CVSS7.8AI score0.13288EPSS
SaveExploits0References5
Mageia
Mageia
added 2014/11/21 12:44 p.m.73 views

Updated ffmpeg packages fix security vulnerabilities

A heap-based buffer overflow in the encodeslice function in libavcodec/proresenckostya.c in FFmpeg before 2.0.6 can cause a crash, allowing a malicious image file to cause a denial of service CVE-2014-5271. libavcodec/iff.c in FFmpeg before 2.0.6 allows an attacker to have an unspecified impact v...

7.5CVSS9.2AI score0.04697EPSS
SaveExploits0References5
Mageia
Mageia
added 2014/11/15 6:47 p.m.73 views

Updated kernel-tmb packages fix security vulnerabilities

This kernel-tmb update is based on upstream -longterm 3.10.58 and fixes the following security issues: The kvmiommumappages function in virt/kvm/iommu.c in the Linux kernel through 3.16.1 miscalculates the number of pages during the handling of a mapping failure, which allows guest OS users to 1...

7.2CVSS7.3AI score0.01168EPSS
SaveExploits6References8
Mageia
Mageia
added 2014/09/26 3:55 p.m.73 views

Updated perl-Email-Address packages fix security vulnerabilities

Updated perl-Email-Address package fixes security vulnerability: The parse function in Email::Address module before 1.905 for Perl uses an inefficient regular expression, which allows remote attackers to cause a denial of service CPU consumption via an empty quoted string in an RFC 2822 address...

5CVSS6.2AI score0.03584EPSS
SaveExploits2References2
Mageia
Mageia
added 2014/08/18 9:14 a.m.73 views

Updated kernel-linus package fixes security vulnerabilities

Updated kernel-linus provides upstream 3.10.51 kernel and fixes the following security issues: Array index error in the aioreadeventsring function in fs/aio.c in the Linux kernel through 3.15.1 allows local users to obtain sensitive information from kernel memory via a large head value...

7.8CVSS7AI score0.37233EPSS
SaveExploits22References12
Mageia
Mageia
added 2014/02/28 6:59 p.m.73 views

Updated tomcat packages fix CVE-2014-0050

Updated tomcat packages fix security vulnerability: It was discovered that the Apache Commons FileUpload package for Java could enter an infinite loop while processing a multipart request with a crafted Content-Type, resulting in a denial-of-service condition CVE-2014-0050. Tomcat 7 includes an...

7.5CVSS7.7AI score0.83175EPSS
SaveExploits8References3
Mageia
Mageia
added 2014/02/21 6:20 p.m.73 views

Updated flash-player-plugin package fixes security vulnerabilities

Adobe Flash Player 11.2.202.341 contains fixes to critical security vulnerabilities found in earlier versions that could cause a crash and potentially allow an attacker to remotely take control of the affected system. This update resolves a stack overflow vulnerability that could result in...

10CVSS7.5AI score0.24817EPSS
SaveExploits4References2
Mageia
Mageia
added 2013/07/01 7:12 p.m.73 views

Updated xml-security-c package fixes multiple security vulnerabilities

The implementation of XML digital signatures in the Santuario-C++ library is vulnerable to a spoofing issue allowing an attacker to reuse existing signatures with arbitrary content CVE-2013-2153. A stack overflow, possibly leading to arbitrary code execution, exists in the processing of malformed...

7.5CVSS2.3AI score0.08402EPSS
SaveExploits2References3
Mageia
Mageia
added 2024/07/05 4:28 p.m.72 views

Updated python-js2py packages fix security vulnerability

CVE-2024-28397: Fixed a potential sandbox escape via untrusted JavaScript code...

7.2AI score0.04548EPSS
SaveExploits22References2
Mageia
Mageia
added 2024/06/03 6:30 p.m.72 views

Updated git packages fix security vulnerabilities

Updated Git to version 2.41.1 to fix CVE-2024-32002 CVE-2024-32004 CVE-2024-32020 CVE-2024-32021 CVE-2024-32465...

9CVSS6.3AI score0.29234EPSS
SaveExploits34References3
Mageia
Mageia
added 2024/03/28 3:52 a.m.72 views

Updated grub2 packages fix security vulnerabilities

An out-of-bounds write flaw was found in grub2's NTFS filesystem driver. This issue may allow an attacker to present a specially crafted NTFS filesystem image, leading to grub's heap metadata corruption. In some circumstances, the attack may also corrupt the UEFI firmware heap metadata. As a...

7.8CVSS8.1AI score0.00542EPSS
SaveExploits2References2
Mageia
Mageia
added 2024/03/15 2:49 a.m.72 views

Updated mplayer packages fix security vulnerabilities

The MPlayer Project mencoder SVN-r38374-13.0.1 is vulnerable to Divide By Zero via the function config of llibmpcodecs/vfscale.c. CVE-2022-38850 Certain The MPlayer Project products are vulnerable to Out-of-bounds Read via function readmetarecord of mplayer/libmpdemux/asfheader.c. This affects...

5.5CVSS7.1AI score0.00365EPSS
SaveExploits9References1
Mageia
Mageia
added 2023/04/11 7:02 p.m.72 views

Updated ghostscript packages fix security vulnerability

In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of data internal to the PostScript interpreter, in base/sbcp.c. This affects BCPEncode, BCPDecode, TBCPEncode, and TBCPDecode. If the write buffer is filled to one byte less than full, and one then...

9.8CVSS9.6AI score0.06341EPSS
SaveExploits1References2
Mageia
Mageia
added 2023/04/11 7:02 p.m.72 views

Updated openssl packages fix security vulnerability

A read buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed the malicious certificate or for the application to continue certificate...

7.5CVSS7.7AI score0.59501EPSS
SaveExploits0References9
Mageia
Mageia
added 2023/02/14 10:43 p.m.72 views

Updated webkit2 packages fix security vulnerability

Processing maliciously crafted web content may lead to arbitrary code execution. CVE-2022-42826 CVE-2023-23517 CVE-2023-23518...

8.8CVSS9.1AI score0.00902EPSS
SaveExploits0References3
Mageia
Mageia
added 2022/11/13 2:25 a.m.72 views

Updated chromium-browser-stable packages fix security vulnerabilities

The chromium-browser-stable package has been updated to the new 107 branch with the 107.0.5304.87 version, fixing many bugs and 15 vulnerabilities, together with 107.0.5304.68. Some of the security fixes are: High CVE-2022-3652: Type Confusion in V8. Reported by srodulv and ZNMchtss at S.S.L Team...

8.8CVSS0.3AI score0.23798EPSS
SaveExploits4References4
Mageia
Mageia
added 2022/10/23 10:48 p.m.72 views

Updated libosip2 packages fix security vulnerability

GNU oSIP v5.3.0 was discovered to contain an integer overflow via the component osipbodyparseheader. CVE-2022-41550...

6.5CVSS3.7AI score0.00585EPSS
SaveExploits0References2
Mageia
Mageia
added 2022/08/25 9:21 p.m.72 views

Updated chromium-browser-stable packages fix security vulnerability

The chromium-browser-stable package has been updated to the 104.0.5112.101 branch, fixing many bugs and 11 CVE. Google is aware that an exploit for CVE-2022-2856 exists in the wild. Some of the addressed CVE are listed below: Critical CVE-2022-2852: Use after free in FedCM. High CVE-2022-2854: Us...

8.8CVSS1.6AI score0.0453EPSS
SaveExploits1References3
Mageia
Mageia
added 2022/08/18 6:45 p.m.72 views

Updated nvidia-current packages fix security vulnerabilities

Updated nvidia-current packages fix security vulnerabilities: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer nvidia.ko, where a local user with basic capabilities can cause improper input validation, which may lead to denial of service, escalation of...

7.8CVSS3AI score0.00278EPSS
SaveExploits0References2
Mageia
Mageia
added 2022/08/05 9:00 p.m.72 views

Updated python-m2crypto packages fix security vulnerability

Bleichenbacher timing attacks in the RSA decryption API CVE-2020-25657...

5.9CVSS3.8AI score0.01741EPSS
SaveExploits0References3
Mageia
Mageia
added 2022/06/18 9:30 p.m.72 views

Updated exempi packages fix security vulnerability

XMP Toolkit SDK versions 2020.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of arbitrary memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victi...

9.3CVSS4.1AI score0.05811EPSS
SaveExploits0References2
Mageia
Mageia
added 2021/07/06 11:12 p.m.72 views

Updated httpcomponents-client packages fix a security vulnerability

Priyank Nigam discovered that HttpComponents Client could misinterpret malformed authority component in a request URI and pick the wrong target host for request execution CVE-2020-13956...

5.3CVSS1AI score0.09032EPSS
SaveExploits1References2
Mageia
Mageia
added 2021/06/13 9:32 p.m.72 views

Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 5.10.43 and fixes at least the following security issues: The 802.11 standard that underpins Wi-Fi Protected Access WPA, WPA2, and WPA3 and Wired Equivalent Privacy WEP doesn't require that received fragments be cleared from memory after reconnecting to a...

7.8CVSS7.6AI score0.07604EPSS
SaveExploits6References4
Mageia
Mageia
added 2021/05/19 7:29 p.m.72 views

Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 5.10.37 and fixes at least the following security issues: It was discovered that the iouring implementation of the Linux kernel did not properly enforce the MAXRWCOUNT limit in some situations. A local attacker could use this to cause a denial of service...

8.8CVSS8.2AI score0.01754EPSS
SaveExploits4References5
Mageia
Mageia
added 2021/02/04 1:40 p.m.72 views

Updated python and python3 packages fix security vulnerability

A flaw was found in python. A stack-based buffer overflow was discovered in the ctypes module provided within Python. Applications that use ctypes without carefully validating the input passed to it may be vulnerable to this flaw, which would allow an attacker to overflow a buffer on the stack an...

9.8CVSS1.7AI score0.23293EPSS
SaveExploits1References2
Mageia
Mageia
added 2020/11/13 9:20 p.m.72 views

Updated firefox and thunderbird packages fix a security vulnerability

Write side effects in MCallGetProperty opcode not accounted for. In certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions resulting in an exploitable use-after-free condition. CVE-2020-26950 Also some bugfix for Thunderbird have been added. See upstream release...

9.3CVSS1.6AI score0.42327EPSS
SaveExploits4References6
Mageia
Mageia
added 2020/09/04 9:16 a.m.72 views

Updated lua and lua5.3 packages fix security vulnerability

ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal, as demonstrated by getlocal3,2^31. CVE-2020-24370...

5.3CVSS2.8AI score0.03833EPSS
SaveExploits1References2
Mageia
Mageia
added 2020/02/18 2:05 p.m.72 views

Updated webkit2 packages fix security vulnerability

webkit2 packages have been updated to 2.26.4 and fixed the followin security vulnerabilities: A malicious website may be able to cause a denial of service CVE-2020-3862. A DOM object context may not have had a unique security origin CVE-2020-3864. A top-level DOM object context may have incorrect...

9.3CVSS2.1AI score0.027EPSS
SaveExploits0References4
Mageia
Mageia
added 2020/01/28 11:32 a.m.72 views

Updated php packages fix security vulnerabilities

Updated php packages fix security vulnerabilities: Two buffer overflows in string and mbstring handling have been found CVE-2020-7059, CVE-2020-7060. Other security fixes have been applied: - Session: Fixed bug 79091 heap use-after-free in sessioncreateid. - Date: Fixed bug 79015...

9.1CVSS1.5AI score0.08888EPSS
SaveExploits2References2
Mageia
Mageia
added 2019/09/12 7:09 p.m.72 views

Updated squid packages fix security vulnerabilities

Updated squid packages fix security vulnerabilities: It was discovered that Squid incorrectly handled Digest authentication. A remote attacker could possibly use this issue to cause Squid to crash, resulting in a denial of service CVE-2019-12525. It was discovered that Squid incorrectly handled...

9.8CVSS2.7AI score0.74477EPSS
SaveExploits1References4
Mageia
Mageia
added 2019/05/18 12:33 p.m.72 views

Updated virtualbox packages fix security vulnerabilities

This update provies Virtualbox 6.0.8 that fixes the Microarchitectural Data Sampling MDS, also called ZombieLoad attack vulnerabilities in Intel processors that can allow attackers to retrieve data being processed inside a CPU. The fixed / mitigated issues are: Modern Intel microprocessors...

5.6CVSS2.1AI score0.01566EPSS
SaveExploits0References3
Mageia
Mageia
added 2019/02/22 12:35 a.m.72 views

Updated spice packages fix security vulnerability

Spice, versions 0.5.2 through 0.14.1, are vulnerable to an out-of-bounds read due to an off-by-one error in memslotgetvirt. This may lead to a denial of service, or, in the worst case, code-execution by unauthenticated attackers. CVE-2019-3813 A vulnerability was discovered in SPICE before versio...

8.8CVSS3.6AI score0.03934EPSS
SaveExploits0References8
Mageia
Mageia
added 2019/02/13 11:08 a.m.72 views

Updated dovecot packages fix security vulnerability

CVE-2019-3814: If imap/pop3/managesieve/submission client has trusted certificate with missing username field sslcertusernamefield, under some configurations Dovecot mistakenly trusts the username provided via authentication instead of failing...

7.7CVSS4AI score0.02417EPSS
SaveExploits1References4
Mageia
Mageia
added 2018/11/27 3:26 p.m.72 views

Updated mariadb packages fix security vulnerabilities

Some easily exploitable vulnerabilities allowing high privileged attacker with network access via multiple protocols to compromise MySQL Server have been fixed...

9.8CVSS4.6AI score0.05766EPSS
SaveExploits0References1
Mageia
Mageia
added 2018/11/27 3:26 p.m.72 views

Updated openssl packages fix security vulnerabilities

The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a Affected 1.1.1. Fixed in OpenSSL 1.1.0j Affected 1.1.0-1.1.0i. Fixed in OpenSSL 1.0.2q...

5.9CVSS6AI score0.12154EPSS
SaveExploits4References3
Mageia
Mageia
added 2018/02/28 1:55 p.m.72 views

Updated wireshark packages fix security vulnerabilities

The SIGCOMP dissector could crash CVE-2018-7320. Multiple dissectors could go into large infinite loops. All ASN.1 BER dissectors, along with the DICOM, DMP, LLTD, OpenFlow, RELOAD, RPCoRDMA, RPKI-Router, S7COMM, SCCP, Thread, Thrift, USB, and WCCP dissectors were susceptible...

7.5CVSS1.1AI score0.02839EPSS
SaveExploits19References22
Mageia
Mageia
added 2017/07/23 7:58 p.m.72 views

Updated c-ares packages fix security vulnerability

The c-ares function aresparsenaptrreply, which is used for parsing NAPTR responses, could be triggered to read memory outside of the given input buffer if the passed in DNS response packet was crafted in a particular way CVE-2017-1000381...

7.5CVSS3.2AI score0.0331EPSS
SaveExploits0References2
Mageia
Mageia
added 2017/01/03 10:05 p.m.72 views

Updated kernel-linus packages fix security vulnerabilities

This update is based on upstream 4.4.39 and fixes at least the following security issues: Due to lack of size checking on ICMP header length, it is possible to cause out-of-bounds read on stack CVE-2016-8399 The TCP stack in the Linux kernel before 4.8.10 mishandles skb truncation, which allows...

7.8CVSS3.5AI score0.11127EPSS
SaveExploits24References8
Mageia
Mageia
added 2016/12/07 11:48 a.m.72 views

Updated kernel-linus-4.4.32 packages fix security vulnerability

This update is based on upstream 4.4.32 and fixes alteast the following security issues: Vladimir Bene discovered an unbounded recursion in the VLAN and TEB Generic Receive Offload GRO processing implementations in the Linux kernel, A remote attacker could use this to cause a stack corruption,...

7.8CVSS2.8AI score0.07613EPSS
SaveExploits0References7
Mageia
Mageia
added 2016/11/09 9:43 p.m.72 views

Updated mariadb packages fix security vulnerabilities

A race condition was found in the way MariaDB performed MyISAM engine table repair. A database user with shell access to the server running mysqld could use this flaw to change permissions of arbitrary files writable by the mysql system user CVE-2016-6663. This update fixes several vulnerabilitie...

7CVSS2.3AI score0.06706EPSS
SaveExploits18References4
Mageia
Mageia
added 2015/07/27 9:53 a.m.72 views

Updated java-1.8.0-openjdk package fixes security vulnerabilities

Multiple flaws were discovered in the 2D, CORBA, JMX, Libraries and RMI components in OpenJDK. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions CVE-2015-4760, CVE-2015-2628, CVE-2015-4731, CVE-2015-2590, CVE-2015-4732, CVE-2015-4733. A flaw was fou...

10CVSS5.6AI score0.9986EPSS
SaveExploits1References5
Total number of security vulnerabilities5000