[월:] 2020년 09월

USN-4502-1: websocket-extensions vulnerability It was discovered that websocket-extensions does not properly parse special headers. A remote attacker could use this issue to cause regex backtracking, resulting in a denial of service. (CVE-2020-7663) Source: USN-4502-1: websocket-extensions vulnerability

USN-4503-1: Perl DBI module vulnerability It was discovered that Perl DBI module incorrectly handled certain calls. An attacker could possibly use this issue to execute arbitrary code. Source: USN-4503-1: Perl DBI module vulnerability

USN-4501-1: LuaJIT vulnerability It was discovered that an out-of-bounds read existed in LuaJIT. An attacker could use this to cause a denial of service (application crash) or possibly expose sensitive information. (CVE-2020-15890) Source: USN-4501-1: LuaJIT vulnerability

USN-4500-1: bsdiff vulnerabilities It was discovered that bsdiff mishandled certain input. If a user were tricked into opening a malicious file, an attacker could cause bsdiff to crash or potentially execute arbitrary code. Source: USN-4500-1: bsdiff vulnerabilities