11934 matches found
ECHO-76F4-7CF3-CF0C Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-9F94-7A94-38F2 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-E669-60AB-47B1 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-0604-BD3A-B682 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-921C-CF23-A536 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-6D7C-44B6-7927 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-E743-7D24-399D Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-9EE0-8A6D-05C4 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-41D8-11D7-C2F9 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-75D3-8223-1EAF Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-118E-D157-3C99 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-E2DB-8D34-38B2 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-C1FB-FC7F-12CB Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-D2A3-9D9C-9856 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-7900-AC8B-AA81 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-2441-678C-5F7A Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-E120-768D-97D2
Bulletin has no description...
ECHO-14A8-C7C0-3DA6 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-0730-9900-C29E Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-B333-B6A8-CE38 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-46B4-9377-9297 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-310B-3EDB-2BA5 mod_usertrack in Apache 1.3.11 through 1.3.20 generates predictable session IDs (host IP, system time, PID), which "allows local users to obtain session IDs and bypass authentication when these session IDs are used for authentication". Red Hat states "This is not a security issue. The mod_usertrack cookies are not designed to be used for authentication." NVD affected range is 1.3.11-1.3.20, far below the shipped 2.4.68. Debian: unimportant. https://security-tracker.debian.org/tracker/CVE-2001-1534
Bulletin has no description...
ECHO-8C8B-2C3D-5D6B
Bulletin has no description...
ECHO-44A7-5B9C-A1D1
Bulletin has no description...
ECHO-C407-4140-3BFE
Bulletin has no description...
ECHO-1E54-75FE-1AAE Local DoS in Apache httpd 2.0.59/2.2.4 with the Prefork MPM: a worker process can stop request processing or force the master to fork many workers. Both the Apache and Red Hat vendors state this is "by design" and "Not a vulnerability" - in the httpd security model the less privileged children fully handle connections, so any local user able to run arbitrary code in a child can do this; hosts with untrusted local users must use suexec. NVD lists only 2.0.59/2.2.4 (shipped is 2.4.68). Debian: unimportant. https://security-tracker.debian.org/tracker/CVE-2007-3303
Bulletin has no description...
ECHO-AD54-7743-1269 suexec in Apache HTTP Server 2.2.3 does not verify user/group ID combinations, which "might allow local users to leverage other vulnerabilities". The vendor disputes the issue because the attack "rely on an insecure server configuration" in which the unprivileged server user already has write access to the document root and can run arbitrary code; the suexec security model is not intended to protect against privilege escalation in such a configuration. NVD lists only 2.2.3 as affected (shipped version is 2.4.68). Debian: unimportant. https://security-tracker.debian.org/tracker/CVE-2007-1743
Bulletin has no description...
ECHO-19A7-8D2C-488F
Bulletin has no description...
ECHO-4685-AA81-91FD Reported against the mod_php module for Apache 2.0.x, allowing local users with write access to PHP scripts to signal the server process group and reuse its file descriptors. The PHP developers disputed the report ("The opened file descriptors are opened by Apache. It is the job of Apache to protect them ... Not a bug in PHP"), and Red Hat states it "is not a vulnerability" since mod_php runs with the privileges of the httpd child by design. NVD carries the "disputed" tag. mod_php is not shipped by the apache2 source package and is not used in these images. https://security-tracker.debian.org/tracker/CVE-2003-1307
Bulletin has no description...
ECHO-2734-798D-A68B
Bulletin has no description...
ECHO-F759-D499-AD5C DoS (bandwidth consumption) via a Range header specifying multiple copies of the same fragment over a TCP connection with a large window size. The severity is explicitly disputed by third parties (NVD carries the "disputed" tag) because the large TCP window size the attack relies on is not normally supported or configured by the server, and the same effect is achievable by simply downloading the file. Red Hat states it "does not consider this issue to be a security vulnerability". Debian classifies it as an unimportant issue. No code change required in the shipped 2.4.68 build. https://security-tracker.debian.org/tracker/CVE-2007-0086
Bulletin has no description...
ECHO-7EFD-2F5F-A5C3
Bulletin has no description...
ECHO-D542-982C-16CF
Bulletin has no description...
ECHO-D40E-0BF5-74BE
Bulletin has no description...
ECHO-A932-EED9-9DA1
Bulletin has no description...
ECHO-AC1D-7850-4B59
Bulletin has no description...
ECHO-DF0F-A0FD-992D
Bulletin has no description...
ECHO-ABFA-BD9C-1987
Bulletin has no description...
ECHO-0658-0C59-AC79
Bulletin has no description...
ECHO-70E5-DF73-C55E
Bulletin has no description...
ECHO-EDD3-8CA6-AEC9 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-A558-0C0D-D635 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-8EB5-B966-95E0 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-484D-6B11-C030 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-24D3-194D-5BF9 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-0B3B-7E35-1F11 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-A56E-4044-53B4 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-22AB-9210-84D0 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...