DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Red Hat Enterprise Linux: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2020-09-29
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.
01
beschreibt (16)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-11764US | medium5.5 | — | ||
An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp. | ||||
| CVE-2020-11763US | medium5.5 | — | ||
An issue was discovered in OpenEXR before 2.4.1. There is an std::vector out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp. | ||||
| CVE-2020-11761US | medium5.5 | — | ||
An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder::refill in ImfFastHuf.cpp. | ||||
| CVE-2020-0556US | high7.1 | — | ||
Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation of privilege and denial of service via adjacen… | ||||
| CVE-2019-3696US | high7.3 | — | ||
A Improper Limitation of a Pathname to a Restricted Directory vulnerability in the packaging of pcp of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterpr… | ||||
| CVE-2019-3695US | high7.8 | — | ||
A Improper Control of Generation of Code vulnerability in the packaging of pcp of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterprise High Performance… | ||||
| CVE-2020-8632US | medium5.5OT erhöht | — | ||
In cloud-init through 19.4, rand_user_password in cloudinit/config/cc_set_passwords.py has a small default pwlen value, which makes it easier for attackers to guess passwords. | ||||
| CVE-2020-8631US | medium5.5OT erhöht | — | ||
cloud-init through 19.4 relies on Mersenne Twister for a random password, which makes it easier for attackers to predict passwords, because rand_str in cloudinit/util.py calls the… | ||||
| CVE-2019-20386US | low2.4 | — | ||
An issue was discovered in button_open in login/logind-button.c in systemd before 243. When executing the udevadm trigger command, a memory leak may occur. | ||||
| CVE-2019-18609US | critical9.8 | — | ||
An issue was discovered in amqp_handle_input in amqp_connection.c in rabbitmq-c 0.9.0. There is an integer overflow that leads to heap memory corruption in the handling of CONNECTI… | ||||
| CVE-2019-17400US | high7.5 | — | ||
The unoconv package before 0.9 mishandles untrusted pathnames, leading to SSRF and local file inclusion. | ||||
| CVE-2019-17402US | medium6.5 | — | ||
Exiv2 0.27.2 allows attackers to trigger a crash in Exiv2::getULong in types.cpp when called from Exiv2::Internal::CiffDirectory::readDirectory in crwimage_int.cpp, because there i… | ||||
| CVE-2019-16707US | medium6.5 | — | ||
Hunspell 1.7.0 has an invalid read operation in SuggestMgr::leftcommonsubstring in suggestmgr.cxx. | ||||
| CVE-2019-3833US | high7.5 | — | ||
Openwsman, versions up to and including 2.6.9, are vulnerable to infinite loop in process_connection() when parsing specially crafted HTTP requests. A remote, unauthenticated attac… | ||||
| CVE-2018-17095US | high8.8 | — | ||
An issue has been discovered in mpruett Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0. A heap-based buffer overflow in Expand3To4Module::run ha… | ||||
| CVE-2018-13440US | medium6.5 | — | ||
The audiofile Audio File Library 0.3.6 has a NULL pointer dereference bug in ModuleState::setup in modules/ModuleState.cpp, which allows an attacker to cause a denial of service vi… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SUSE Security Update SUSE-SU-2020:2967-1 vom 2020-10-20external
- SUSE Security Update SUSE-SU-2020:2966-1 vom 2020-10-20external
- SUSE Security Update SUSE-SU-2020:3034-1 vom 2020-10-26external
- RedHat Security Advisory vom 2020-09-29external
- RedHat Security Advisory vom 2020-09-29external
- RedHat Security Advisory vom 2020-09-29external
- RedHat Security Advisory vom 2020-09-29external
- RedHat Security Advisory vom 2020-09-29external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan