DeutschShown in its original language — a full translation is planned for a future version.
Red Hat Enterprise Linux: Mehrere Schwachstellen
view advisory published 2020-03-31
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen, einen Denial of Service Zustand herbeizuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.
01
describes (14)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-14850US | low3.7 | — | ||
A denial of service vulnerability was discovered in nbdkit 1.12.7, 1.14.1 and 1.15.1. An attacker could connect to the nbdkit service and cause it to perform a large amount of work… | ||||
| CVE-2019-13038US | medium6.1 | — | ||
mod_auth_mellon through 0.14.2 has an Open Redirect via the login?ReturnTo= substring, as demonstrated by omitting the // after http: in the target URL. | ||||
| CVE-2019-12387US | medium6.1 | — | ||
In Twisted before 19.2.1, twisted.web did not validate or sanitize URIs or HTTP methods, allowing an attacker to inject invalid characters such as CRLF. | ||||
| CVE-2016-10245US | medium6.1 | — | ||
Insufficient sanitization of the query parameter in templates/html/search_opensearch.php could lead to reflected cross-site scripting or iframe injection. | ||||
| CVE-2019-9210US | high7.8 | — | ||
In AdvanceCOMP 2.1, png_compress in pngex.cc in advpng has an integer overflow upon encountering an invalid PNG size, which results in an attempted memcpy to write into a buffer th… | ||||
| CVE-2019-3820US | medium4.3 | — | ||
It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical access to a locked workstation… | ||||
| CVE-2018-10910US | low3.3OT elevated | — | ||
A bug in Bluez may allow for the Bluetooth Discoverable state being set to on when no Bluetooth agent is registered with the system. This situation could lead to the unauthorized p… | ||||
| CVE-2018-17828US | medium5.5 | — | ||
Directory traversal vulnerability in ZZIPlib 0.13.69 allows attackers to overwrite arbitrary files via a .. (dot dot) in a zip file, because of the function unzzip_cat in the bins/… | ||||
| CVE-2018-17407US | high7.8 | — | ||
An issue was discovered in t1_check_unusual_charstring functions in writet1.c files in TeX Live before 2018-09-21. A buffer overflow in the handling of Type 1 fonts allows arbitrar… | ||||
| CVE-2018-1000801US | medium5.5 | — | ||
okular version 18.08 and earlier contains a Directory Traversal vulnerability in function "unpackDocumentArchive(...)" in "core/document.cpp" that can result in Arbitrary file crea… | ||||
| CVE-2018-10916US | medium6.5 | — | ||
It has been discovered that lftp up to and including version 4.8.3 does not properly sanitize remote file names, leading to a loss of integrity on the local system when reverse mir… | ||||
| CVE-2018-10360US | medium6.5 | — | ||
The do_core_note function in readelf.c in libmagic.a in file 5.33 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted ELF… | ||||
| CVE-2018-11439US | medium6.5 | — | ||
The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cpp in TagLib 1.11.1 allows remote attackers to cause information disclosure (heap-based buffer over-read) via a crafted a… | ||||
| CVE-2017-6519US | critical9.1 | — | ||
avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source addresses that are not on-link, which allows remote attackers to cause a den… | ||||
02
references
External citations — patches, advisories, analysis.
- SUSE Security Update SUSE-SU-2020:2968-1 vom 2020-10-20external
- Red Hat Security Adivisory:RHSA-2020:1003 vom 2020-03-31external
- Red Hat Security Adivisory:RHSA-2020:1021 vom 2020-03-31external
- Red Hat Security Adivisory:RHSA-2020:1022 vom 2020-03-31external
- Red Hat Security Adivisory:RHSA-2020:1034 vom 2020-03-31external
- Red Hat Security Adivisory:RHSA-2020:1036 vom 2020-03-31external
- Red Hat Security Adivisory:RHSA-2020:1037 vom 2020-03-31external
- Red Hat Security Adivisory:RHSA-2020:1045 vom 2020-03-31external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan