Lucene search
+L
MageiaMost viewed

6213 matches found

Mageia
Mageia
added 2022/05/15 10:06 a.m.45 views

Updated clamav packages fix security vulnerability

Infinite loop vulnerability in the CHM file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior versions. CVE-2022-20770 Infinite loop vulnerability in the TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior...

8.6CVSS0.6AI score0.07117EPSS
SaveExploits0References4
Mageia
Mageia
added 2022/05/15 10:06 a.m.45 views

Updated python-waitress packages fix security vulnerability

When using Waitress versions 2.1.0 and prior behind a proxy that does not properly validate the incoming HTTP request matches the RFC7230 standard, Waitress and the frontend proxy may disagree on where one request starts and where it ends. This would allow requests to be smuggled via the front-en...

7.5CVSS0.3AI score0.0178EPSS
SaveExploits0References2
Mageia
Mageia
added 2022/05/12 10:24 a.m.45 views

Updated gerbv packages fix security vulnerability

An information disclosure vulnerability exists in the pick-and-place rotation parsing functionality of Gerbv 2.7.0 and dev commit b5f1eacd, and Gerbv forked 2.8.0. A specially-crafted pick-and-place file can exploit the missing initialization of a structure to leak memory contents. An attacker ca...

6.3CVSS4.1AI score0.01084EPSS
SaveExploits1References2
Mageia
Mageia
added 2022/02/12 5:31 p.m.45 views

Updated bluez packages fix security vulnerability

Ziming Zhang discovered that BlueZ incorrectly handled memory write operations in its gatt server. A remote attacker could possibly use this to cause BlueZ to crash leading to a denial of service, or potentially remotely execute code. CVE-2022-0204...

8.8CVSS2.6AI score0.01793EPSS
SaveExploits1References2
Mageia
Mageia
added 2022/01/25 12:13 p.m.45 views

Updated python-celery packages fix security vulnerability

Stored Command Injection CVE-2021-23727 Also fixes unfulfilled python3.8distbilliard installing pythone-celery...

7.5CVSS3.1AI score0.03877EPSS
SaveExploits1References2
Mageia
Mageia
added 2021/12/30 4:41 p.m.45 views

Updated e2guardian packages fix security vulnerability

e2guardian did not validate TLS hostnames CVE-2021-44273...

7.4CVSS1.1AI score0.0097EPSS
SaveExploits1References2
Mageia
Mageia
added 2021/12/19 12:26 p.m.45 views

Updated botan2 packages fix security vulnerability

Updated botan2 packages fix security vulnerability: The ElGamal implementation in Botan through 2.18.1, as used in Thunderbird and other products, allows plaintext recovery because, during interaction between two cryptographic libraries, a certain dangerous combination of the prime defined by the...

5.9CVSS2AI score0.01532EPSS
SaveExploits1References1
Mageia
Mageia
added 2021/11/20 7:31 p.m.45 views

Updated wireshark packages fix security vulnerability

IPPUSB dissector crash CVE-2021-39920. Modbus dissector crash CVE-2021-39921. C12.22 dissector crash CVE-2021-39922. PNRP dissector large loop wnpa-sec-2021-11. Bluetooth DHT dissector large loop CVE-2021-39924. Bluetooth SDP dissector crash CVE-2021-39925. Bluetooth HCIISO dissector crash...

7.5CVSS1.2AI score0.08139EPSS
SaveExploits8References16
Mageia
Mageia
added 2021/11/18 9:50 p.m.45 views

Updated qt4 packages fix security vulnerability

CVE-2020-24741, Do not attempt to load a library relative to $PWD...

2.1AI score
SaveExploits0References2
Mageia
Mageia
added 2021/11/18 9:50 p.m.45 views

Updated python-django-filter packages fix security vulnerability

In django-filter before version 2.4.0, automatically generated 'NumberFilter' instances, whose value was later converted to an integer, were subject to potential DoS from maliciously input using exponential format with sufficiently large exponents...

7.5CVSS3.7AI score0.01797EPSS
SaveExploits0References2
Mageia
Mageia
added 2021/10/04 4:42 p.m.45 views

Updated sqlite packages fix security vulnerability

The updated sqlite packages fix a security vulnerability: Use after free in sqlite in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page CVE-2021-30569...

8.8CVSS2.3AI score0.01359EPSS
SaveExploits0References2
Mageia
Mageia
added 2021/08/15 8:38 a.m.45 views

Updated thunderbird packages fix security vulnerabilities

Updated thunderbird packages fix security vulnerabilities: Uninitialized memory in a canvas object could have caused an incorrect free leading to memory corruption and a potentially exploitable crash CVE-2021-29980. Instruction reordering during JIT optimization resulted in a sequence of...

8.8CVSS1.6AI score0.01451EPSS
SaveExploits5References3
Mageia
Mageia
added 2021/07/27 8:21 p.m.45 views

Updated virtualbox packages fix security vulnerability

This update provides the upstream 6.1.24 maintenance release that fixes at least the following security vulnerabilities: An easily exploitable vulnerability in the Oracle VM VirtualBox component: Core prior to 6.1.24 allows high privileged attacker with logon to the infrastructure where Oracle VM...

8.2CVSS2.5AI score0.00731EPSS
SaveExploits0References3
Mageia
Mageia
added 2021/06/28 9:16 p.m.45 views

Updated leptonica packages fix security vulnerabilities

Leptonica before 1.80.0 allows a denial of service application crash via an incorrect left shift in pixConvert2To8 in pixconv.c CVE-2020-36277. Leptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c CVE-2020-36278. Leptonica before 1.80.0 allows a heap-bas...

7.5CVSS4.2AI score0.02871EPSS
SaveExploits5References3
Mageia
Mageia
added 2021/06/08 2:33 p.m.45 views

Updated librsvg packages fix a security vulnerability

This update patches the vendored smallvec Rust crate in librsvg to fix a security vulnerability: The Iterator implementation mishandles destructors, leading to a double free CVE-2021-25900...

9.8CVSS2.8AI score0.01666EPSS
SaveExploits1References2
Mageia
Mageia
added 2021/04/18 6:34 p.m.45 views

Updated clamav packages fix security vulnerability

The updated packages fix a security vulnerability: A vulnerability in the email parsing module in Clam AntiVirus ClamAV Software version 0.103.1 and all prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability i...

7.5CVSS5.1AI score0.03031EPSS
SaveExploits0References2
Mageia
Mageia
added 2021/03/12 1:25 a.m.45 views

Updated mumble packages fix a security vulnerability

Mumble before 1.3.4 allows remote code execution if a victim navigates to a crafted URL on a server list and clicks on the Open Webpage text CVE-2021-27229...

8.8CVSS3.1AI score0.03203EPSS
SaveExploits0References2
Mageia
Mageia
added 2021/03/04 12:26 p.m.45 views

Updated firefox packages fix security vulnerabilities

If Content Security Policy blocked frame navigation, the full destination of a redirect served in the frame was reported in the violation report; as opposed to the original frame URI. This could be used to leak sensitive information contained in such URIs CVE-2021-23968. As specified in the W3C...

8.8CVSS0.8AI score0.0153EPSS
SaveExploits0References3
Mageia
Mageia
added 2021/03/02 10:33 p.m.45 views

Updated xterm package fixes security vulnerability

xterm through Patch 365 allows remote attackers to cause a denial of service segmentation fault or possibly have unspecified other impact via a crafted UTF-8 character sequence. CVE-2021-27135...

9.8CVSS7.3AI score0.07844EPSS
SaveExploits1References4
Mageia
Mageia
added 2021/02/10 6:41 p.m.45 views

Updated gstreamer1.0-plugins-bad packages fix security vulnerability

A flaw was found in the gstreamer h264 component of gst-plugins-bad before v1.18.1 where when parsing a h264 header, an attacker could cause the stack to be smashed, memory corruption and possibly code execution. CVE-2021-3185...

9.8CVSS4.2AI score0.02377EPSS
SaveExploits0References4
Mageia
Mageia
added 2021/01/14 3:13 p.m.45 views

Updated php packages fix security vulnerability

FILTERVALIDATEURL accepts URLs with invalid userinfo CVE-2020-7071. streamgetcontents fails with maxlength=-1 or default. See upstream releasenotes for other changes...

5.3CVSS1.8AI score0.02983EPSS
SaveExploits1References2
Mageia
Mageia
added 2020/12/17 1:10 p.m.45 views

Updated x11-server packages fix security vulnerabilities

A flaw was found in the X.Org Server. An out-of-bounds access in the XkbSetMap function may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability CVE-2020-14360. A flaw was found in...

7.8CVSS2AI score0.00393EPSS
SaveExploits0References5
Mageia
Mageia
added 2020/11/23 7:51 p.m.45 views

Updated tcpreplay package fixes security vulnerabilities

An issue was discovered in tcpreplay tcpprep v4.3.3. There is a heap buffer overflow vulnerability in MemcmpInterceptorCommon that can make tcpprep crash and cause a denial of service CVE-2020-24265. An issue was discovered in tcpreplay tcpprep v4.3.3. There is a heap buffer overflow vulnerabilit...

7.5CVSS2.6AI score0.02562EPSS
SaveExploits2References2
Mageia
Mageia
added 2020/11/08 2:14 p.m.45 views

Updated libproxy packages fix a security vulnerability

url.cpp in libproxy through 0.4.15 is prone to a buffer overflow when PAC is enabled, as demonstrated by a large PAC file that is delivered without a Content-length header. CVE-2020-26154...

9.8CVSS3.3AI score0.03556EPSS
SaveExploits0References3
Mageia
Mageia
added 2020/10/16 3:44 p.m.45 views

Updated wireshark packages fix security vulnerabilities

The TCP dissector could crash CVE-2020-25862. The MIME Multipart dissector could crash CVE-2020-25863. The BLIP dissector could crash CVE-2020-25866...

7.5CVSS1.3AI score0.04918EPSS
SaveExploits3References6
Mageia
Mageia
added 2020/09/15 12:55 p.m.45 views

Updated zeromq packages fix security vulnerability

If a raw TCP socket is opened and connected to an endpoint that is fully configured with CURVE/ZAP, legitimate clients will not be able to exchange any message. Handshakes complete successfully, and messages are delivered to the library, but the server application never receives them...

7.5CVSS7.6AI score0.03408EPSS
SaveExploits0References2
Mageia
Mageia
added 2020/08/25 8:13 a.m.45 views

Updated luajit packages fix security vulnerability

An issue has been found in luajit, a just in time compiler for Lua. An out-of-bounds read could happen because gc handler frame traversal is mishandled CVE-2020-15890...

7.5CVSS2.3AI score0.02886EPSS
SaveExploits1References2
Mageia
Mageia
added 2020/07/10 8:01 a.m.45 views

Updated coturn packages fix security vulnerability

The updated package fixes a security vulnerability: In coturn before version 4.5.1.3, there is an issue whereby STUN/TURN response buffer is not initialized properly. There is a leak of information between different client connections. One client an attacker could use their connection to...

7.5CVSS3AI score0.01898EPSS
SaveExploits0References2
Mageia
Mageia
added 2020/07/05 7:48 p.m.45 views

Updated libvncserver packages fix security vulnerability

Updated libvncserver packages fix security vulnerabilities: libvncclient/sockets.c in LibVNCServer had a buffer overflow via a long socket filename CVE-2019-20839. libvncserver/rfbregion.c had a NULL pointer dereference CVE-2020-14397. Byte-aligned data was accessed through uint32t pointers in...

7.5CVSS6.1AI score0.03589EPSS
SaveExploits0References3
Mageia
Mageia
added 2020/06/10 10:26 p.m.45 views

Updated sudo packages fix security vulnerability

Updated sudo packages fix security vulnerabilities: It was found that sudo always allowed commands to be run with unknown user or group ids if the sudo configuration allowed it for example via the "ALL" alias. This could allow sudo to impersonate non-existent account and depending on how...

7.5CVSS3.5AI score0.03295EPSS
SaveExploits0References5
Mageia
Mageia
added 2020/05/15 3:48 p.m.45 views

Updated netkit-telnet packages fix security vulnerability

Updated netkit-telnetd packages fix security vulnerability: A vulnerability was found where incorrect bounds checks in the telnet server’s telnetd handling of short writes and urgent data, could lead to information disclosure and corruption of heap data. An unauthenticated remote attacker could...

10CVSS1.6AI score0.74339EPSS
SaveExploits2References2
Mageia
Mageia
added 2020/05/05 12:20 p.m.45 views

Updated chromium-browser-stable packages fix security vulnerabilities

Chromium-browser 81.0.4044.129 fixes security issues: Multiple flaws were found in the way Chromium 81.0.4044.122 processes various types of web content, where loading a web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information...

9.6CVSS2.2AI score0.01365EPSS
SaveExploits0References2
Mageia
Mageia
added 2020/04/20 2:02 p.m.45 views

Updated webkit2 packages fix security vulnerability

The webkit2 package has been updated to version 2.28.1, fixing security issues and other bugs...

8.8CVSS3.7AI score0.02898EPSS
SaveExploits0References3
Mageia
Mageia
added 2020/03/06 4:13 p.m.45 views

Updated libsolv packages fix security vulnerability

Updated libsolv packages fix security vulnerability: An out-of-bounds read was discovered in libsolv when the last schema has a length that is less than the length of the input schema. A remote attacker may abuse this flaw to crash an application that uses libsolv CVE-2019-20387...

7.5CVSS7.5AI score0.02338EPSS
SaveExploits0References3
Mageia
Mageia
added 2020/01/05 3:37 p.m.45 views

Updated advancecomp packages fix security vulnerability

Updated advancecomp package fixes security vulnerability: An issue was discovered in AdvanceCOMP through 2.1. An invalid memory address occurs in the function advpngunfilter8 in lib/png.c. It can be triggered by sending a crafted file to a binary. It allows an attacker to cause a Denial of Servic...

7.8CVSS4.9AI score0.01247EPSS
SaveExploits1References2
Mageia
Mageia
added 2020/01/05 3:37 p.m.45 views

Updated cyrus-sasl packages fix security vulnerability

Updated cyrus-sasl packages fix security vulnerability: Stephan Zeisberg reported an out-of-bounds write vulnerability in the sasladdstring function in cyrus-sasl2, a library implementing the Simple Authentication and Security Layer. A remote attacker can take advantage of this issue to cause...

7.5CVSS7.7AI score0.08036EPSS
SaveExploits1References2
Mageia
Mageia
added 2019/12/19 1:44 p.m.45 views

Updated flightcrew packages fix security vulnerabilities

The updated packages fix security vulnerabilities: An issue was discovered in FlightCrew v0.9.2 and earlier. A NULL pointer dereference occurs in GetRelativePathToNcx or GetRelativePathsToXhtmlDocuments when a NULL pointer is passed to xc::XMLUri::isValidURI. This affects third-party software not...

7.8CVSS2AI score0.0163EPSS
SaveExploits1References2
Mageia
Mageia
added 2019/12/19 1:44 p.m.45 views

Updated libssh packages fix security vulnerability

Updated libssh packages fix security vulnerability: In an environment where a user is only allowed to copy files and not to execute applications, it would be possible to pass a location which contains commands to be executed in addition CVE-2019-14889...

9.3CVSS3.2AI score0.03174EPSS
SaveExploits0References2
Mageia
Mageia
added 2019/11/30 1:06 p.m.45 views

Updated mosquitto packages fix security vulnerability

Updated mosquitto packages fix security vulnerability: A vulnerability was discovered in mosquitto, allowing a malicious MQTT client to cause a denial of service stack overflow and daemon crash, by sending a specially crafted SUBSCRIBE packet containing a topic with a extremely deep hierarchy...

6.5CVSS2.2AI score0.02742EPSS
SaveExploits0References2
Mageia
Mageia
added 2019/11/14 4:58 p.m.45 views

Updated fribidi packages fix security vulnerability

Updated fribidi packages fix security vulnerability: A stack buffer overflow in the fribidigetparembeddinglevelsex function in lib/fribidi-bidi.c of GNU FriBidi 1.0.0 through 1.0.7 allows an attacker to cause a denial of service or possibly execute arbitrary code by delivering crafted text conten...

7.8CVSS4.7AI score0.02182EPSS
SaveExploits0References2
Mageia
Mageia
added 2019/09/06 9:09 p.m.45 views

Updated libgcrypt packages fix security vulnerability

Updated libgcrypt packages fix security vulnerability: ECDSA timing side-channel attack vulnerability CVE-2019-13627...

6.3CVSS2.3AI score0.0051EPSS
SaveExploits0References2
Mageia
Mageia
added 2019/07/10 10:44 a.m.45 views

Updated irssi package fixes security vulnerability

Irssi before 1.0.8 and 1.2.x before 1.2.1, when SASL is enabled, has a use after free when sending SASL login to the server CVE-2019-13045...

8.1CVSS3.3AI score0.03361EPSS
SaveExploits0References2
Mageia
Mageia
added 2019/01/23 3:50 p.m.45 views

Updated perl-Email-Address package fixes security vulnerability

The parse method in the Email::Address module through 1.912 for Perl can consume a large amount of resources on specially prepared input, leading to Denial of Service. Prepared special input that caused this problem contained 30 form-field characters "\f" CVE-2018-12558...

7.5CVSS4.6AI score0.02673EPSS
SaveExploits0References2
Mageia
Mageia
added 2019/01/08 9:50 p.m.45 views

Updated qtbase5 packages fix security vulnerabilities

Double free in QXmlStreamReader CVE-2018-15518. Denial of Service on malformed BMP file in QBmpHandler CVE-2018-19873...

9.8CVSS2.3AI score0.03382EPSS
SaveExploits0References2
Mageia
Mageia
added 2018/11/11 9:39 p.m.45 views

Updated python-dulwich packages fix security vulnerability

Dulwich, when an SSH subprocess is used, allowed remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname CVE-2017-16228...

9.8CVSS6.8AI score0.0366EPSS
SaveExploits0References2
Mageia
Mageia
added 2018/10/19 6:36 p.m.45 views

Updated ghostscript packages fix security vulnerabilities

Updated ghostscript packages fix many bugs and security vulnerabilities: Bypassing executeonly to escape -dSAFER sandbox. CVE-2018-17961 Saved execution stacks can leak operator arrays. CVE-2018-18073 1Policy operator gives access to .forceput. CVE-2018-18284...

8.6CVSS1.8AI score0.16288EPSS
SaveExploits4References5
Mageia
Mageia
added 2018/10/14 12:58 a.m.45 views

Updated nextcloud packages fix security vulnerability

Nextcloud has been updated to 13.0.6 and fixes at least the following security issue: A missing sanitization of search results for an autocomplete field could lead to a stored XSS requiring user-interaction. The missing sanitization only affected user names, hence malicious search results could...

5.4CVSS2.5AI score0.00885EPSS
SaveExploits0References4
Mageia
Mageia
added 2018/08/10 2:37 p.m.45 views

Updated openvpn packages fix security vulnerability

Updated openvpn packages fix security vulnerability: Fix potential double-free in Interactive Service could lead to denial of service CVE-2018-9336...

7.8CVSS2.8AI score0.00598EPSS
SaveExploits1References2
Mageia
Mageia
added 2018/06/14 6:14 p.m.45 views

Updated firefox packages fix security vulnerability

A heap buffer overflow can occur in the Skia library when rasterizing paths using a maliciously crafted SVG file with anti-aliasing turned off. This results in a potentially exploitable crash CVE-2018-6126...

8.8CVSS2AI score0.07666EPSS
SaveExploits2References3
Mageia
Mageia
added 2018/04/30 7:08 p.m.45 views

Updated libofx packages fix security vulnerabilities

An exploitable buffer overflow vulnerability exists in the tag parsing functionality of LibOFX 0.9.11. A specially crafted OFX file can cause a write out of bounds resulting in a buffer overflow on the stack. An attacker can construct a malicious OFX file to trigger this vulnerability...

8.8CVSS5.1AI score0.02393EPSS
SaveExploits4References2
Total number of security vulnerabilities5000