Red Hat Security Advisory 2023-1525-01 - Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the container images for Red Hat OpenShift Container Platform 4.9.59.
c7fff0c27d61ac3bb7204fc93a47db5959206b2f34b2f34dc40a1a0403893667Ubuntu Security Notice 6001-1 - Xuewei Feng, Chuanpu Fu, Qi Li, Kun Sun, and Ke Xu discovered that the TCP implementation in the Linux kernel did not properly handle IPID assignment. A remote attacker could use this to cause a denial of service or inject forged data. Ke Sun, Alyssa Milburn, Henrique Kawakami, Emma Benoit, Igor Chervatyuk, Lisa Aichele, and Thais Moreira Hamasaki discovered that the Spectre Variant 2 mitigations for AMD processors on Linux were insufficient in some situations. A local attacker could possibly use this to expose sensitive information.
41aeeefd2d4b93824f7651b99bd053dcc55a7bddef73bc96c89bc61e6121be0cUbuntu Security Notice 6000-1 - It was discovered that the Upper Level Protocol subsystem in the Linux kernel did not properly handle sockets entering the LISTEN state in certain protocols, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service or possibly execute arbitrary code. It was discovered that the NVMe driver in the Linux kernel did not properly handle reset events in some situations. A local attacker could use this to cause a denial of service.
e9c783fd857dd877172d6b22feaf0fdab4162c87abb98b854318a9659634936dUbuntu Security Notice 5996-1 - It was discovered that Liblouis incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service.
afc136731ae805e620d9a77716ed30053b67f6264c1e80ddce0ecb76e1e197dbUbuntu Security Notice 5998-1 - It was discovered that the SocketServer component of Apache Log4j 1.2 incorrectly handled deserialization. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 16.04 ESM. It was discovered that the JMSSink component of Apache Log4j 1.2 incorrectly handled deserialization. An attacker could possibly use this issue to execute arbitrary code.
0e9670eb797b9ec131a46bb75f321c8da3450087baa95b89a755d534ca79e9f4Red Hat Security Advisory 2023-1666-01 - This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel. Issues addressed include a use-after-free vulnerability.
a10983af5c966d83e58f80ddf02f130625ff4676bb255290a87e3caa3d20ddfeDebian Linux Security Advisory 5383-1 - It was discovered that Ghostscript, the GPL PostScript/PDF interpreter, is prone to a buffer overflow vulnerability in the (T)BCP encoding filters, which could result in the execution of arbitrary code if malformed document files are processed (despite the -dSAFER sandbox being enabled).
20839c97303e76e3135923bb933c5080afa93fabe4f74944a7392a4cbea91788Debian Linux Security Advisory 5381-1 - Several security vulnerabilities have been discovered in the Tomcat servlet and JSP engine.
c075620320d7d452a30243d6d87c977e801a36d550d06001a3391e0382de4541Debian Linux Security Advisory 5382-1 - It was reported that cairosvg, a SVG converter based on Cairo, can send requests to external hosts when processing specially crafted SVG files with external file resource loading. An attacker can take advantage of this flaw to perform a server-side request forgery or denial of service. Fetching of external files is disabled by default with this update.
0c8c1a92738e22d3f18ad565f19f07b584a11c0516e315b9cfd2116de8bfe40dUniversal Media Server version 13.2.1 suffers from a cross site scripting vulnerability.
99fe20184de47187efc1748e6efa3a32417d3f31a2c376ca8116ec8b199b5902BulletProof FTP Server version 2019.0.0.51 suffers from a denial of service vulnerability.
3b95825072452a2511b9fb4edb98545d1962ccdb399d03e3ca5155bd5f53b07eMicrosoft Excel suffers from a spoofing vulnerability.
fa96d49859fc520f5cae2aff82756e1413ab3b90abbc5c84227e6a7ba5d34e63Mitel MiCollab AWV versions 8.1.2.4 and 9.1.3 suffers from a directory traversal and local file inclusion vulnerabilities.
652271da9011a184431640fd4bd3658e894c9f798d0f2d89bb23cfbba548010eUnified Remote version 3.13.0 suffers from a remote code execution vulnerability.
fb6c987128457e20caf89804fff3405afbd5a7051e4fe6cef3b37fa054caf96cHospitalRun version 1.0.0-beta local root exploit for macOS.
5974878a49f1ebd87d13c459e69f6e25119f1ca212ec3fb8f6659b619d908c93WIMAX SWC-5100W suffers from an authenticated remote command execution vulnerability.
40807cfd48b09028101bdae209a9063e826e5cc28533e25f7d21866a0f937c1f71 bytes small Linux/x86_64 bash shellcode with XOR encoding.
801d1c974de1f03b559e03ce6feeaff70b28545726389af5b9766890611a1dc5pdfkit version 08.7.2 suffers from a command injection vulnerability.
7455dfc044c06977c21e8e3869162c7d2bdd363891d31aa4cbd1acbadc18a9faflatnux version 2021-03.25 suffers from a remote code execution vulnerability.
e4a3789abf3f5e8b3a52f7142c1f6e2e6b66a63432190680cd888e30793a5effmodoboa version 2.0.4 suffers from an administrative takeover vulnerability.
3b42d60a7cd6213840e961f963f20c77472420c0b38e4932c246857412edc820POLR URL version 2.3.0 suffers from an administrative takeover vulnerability.
8989204e04ff5981dfa4a017e5fb7a350dd098d23a8c1ff6134df911a8af0cd8Auto Dealer Management System version 1.0 suffers from a broken access control vulnerability
8c001a32a732f55145003bf0470b37c1b3de72d8c9fa97d784e1370d9254261eLDAP Tool Box Self Service Password version 1.5.2 suffers from an account takeover vulnerability.
cd2eae47bff74cca424d49fe7fec5d29213305d0b719b89b4707051ee0e097d5Intern Record System version 1.0 suffers from a remote SQL injection vulnerability.
69b79ebce729b8e720b549850b508d3699a8a79a6beaea9adcd02d092e4c3a7eSimple Task Managing System version 1.0 suffers from a remote SQL injection vulnerability.
b32e0ef60ff9599b060ab84a1588a8e8cc4edbaf7d5436009355ed462e2e0e42
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed