opensuse Archives - CVE Vulnerability

CVE-2018-7685

Sun, 26 Feb 2023 06:51:07 +0000

The decoupled download and installation steps in libzypp before 17.5.0 could lead to a corrupted RPM being left in the cache, where a later call would not display the corrupted RPM warning and allow installation, a problem caused by malicious warnings only displayed during download.

The post CVE-2018-7685 appeared first on CVE Vulnerability.

CVE-2018-20860

Sun, 26 Feb 2023 06:48:45 +0000

libopenmpt before 0.3.13 allows a crash with malformed MED files.

The post CVE-2018-20860 appeared first on CVE Vulnerability.

CVE-2018-20532

Sun, 26 Feb 2023 06:48:37 +0000

There is a NULL pointer dereference at ext/testcase.c (function testcase_read) in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service.

The post CVE-2018-20532 appeared first on CVE Vulnerability.

CVE-2018-20533

Sun, 26 Feb 2023 06:48:37 +0000

There is a NULL pointer dereference at ext/testcase.c (function testcase_str2dep_complex) in libsolvext.a in libsolv through 0.7.2 that will cause a denial of service.

The post CVE-2018-20533 appeared first on CVE Vulnerability.

CVE-2018-20534

Sun, 26 Feb 2023 06:48:37 +0000

** DISPUTED ** There is an illegal address access at ext/testcase.c in libsolv.a in libsolv through 0.7.2 that will cause a denial of service. NOTE: third parties dispute this issue stating that the issue affects the test suite and not the underlying library. It cannot be exploited in any real-world application.

The post CVE-2018-20534 appeared first on CVE Vulnerability.

CVE-2018-20177

Sun, 26 Feb 2023 06:48:29 +0000

rdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to a Heap-Based Buffer Overflow in the function rdp_in_unistr() and results in memory corruption and possibly even a remote code execution.

The post CVE-2018-20177 appeared first on CVE Vulnerability.

CVE-2018-1000802

Sun, 26 Feb 2023 06:44:40 +0000

Python Software Foundation Python (CPython) version 2.7 contains a CWE-77: Improper Neutralization of Special Elements used in a Command (‘Command Injection’) vulnerability in shutil module (make_archive function) that can result in Denial of service, Information gain via injection of arbitrary files on the system or entire drive. This attack appear to be exploitable via Passage of unfiltered user input to the function. This vulnerability appears to have been fixed in after commit add531a1e55b0a739b0f42582f1c9747e5649ace.

The post CVE-2018-1000802 appeared first on CVE Vulnerability.

CVE-2020-9484

Sun, 26 Feb 2023 06:43:46 +0000

When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able to control the contents and name of a file on the server; and b) the server is configured to use the PersistenceManager with a FileStore; and c) the PersistenceManager is configured with sessionAttributeValueClassNameFilter=”null” (the default unless a SecurityManager is used) or a sufficiently lax filter to allow the attacker provided object to be deserialized; and d) the attacker knows the relative file path from the storage location used by FileStore to the file the attacker has control over; then, using a specifically crafted request, the attacker will be able to trigger remote code execution via deserialization of the file under their control. Note that all of conditions a) to d) must be true for the attack to succeed.

The post CVE-2020-9484 appeared first on CVE Vulnerability.

CVE-2020-9490

Sun, 26 Feb 2023 06:43:46 +0000

Apache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the ‘Cache-Digest’ header in a HTTP/2 request would result in a crash when the server actually tries to HTTP/2 PUSH a resource afterwards. Configuring the HTTP/2 feature via “H2Push off” will mitigate this vulnerability for unpatched servers.

The post CVE-2020-9490 appeared first on CVE Vulnerability.

CVE-2020-9429

Sun, 26 Feb 2023 06:43:45 +0000

In Wireshark 3.2.0 to 3.2.1, the WireGuard dissector could crash. This was addressed in epan/dissectors/packet-wireguard.c by handling the situation where a certain data structure intentionally has a NULL value.

The post CVE-2020-9429 appeared first on CVE Vulnerability.