No Image

USN-4537-1: Aptdaemon vulnerability

2020-09-24 KENNETH 0

USN-4537-1: Aptdaemon vulnerability Vaisha Bernard discovered that Aptdaemon incorrectly handled the Locale property. A local attacker could use this issue to test for the presence of local files. Source: USN-4537-1: Aptdaemon vulnerability

No Image

USN-4535-1: RDFLib vulnerability

2020-09-24 KENNETH 0

USN-4535-1: RDFLib vulnerability Gabriel Corona discovered that RDFLib did not properly load modules on the command-line. An attacker could possibly use this issue to cause RDFLib to execute arbitrary code. (CVE-2019-7653) Source: USN-4535-1: RDFLib vulnerability

No Image

USN-4534-1: Perl DBI module vulnerability

2020-09-23 KENNETH 0

USN-4534-1: Perl DBI module vulnerability It was discovered that Perl DBI module incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash or expose sensitive information. Source: USN-4534-1: Perl DBI module vulnerability

No Image

USN-4533-1: LTSP Display Manager vulnerabilities

2020-09-23 KENNETH 0

USN-4533-1: LTSP Display Manager vulnerabilities Veeti Veteläinen discovered that the LTSP Display Manager (ldm) incorrectly handled user logins from unsupported shells. A local attacker could possibly use this issue to gain root privileges. (CVE-2019-20373) Source: USN-4533-1: LTSP Display Manager vulnerabilities

No Image

USN-4532-1: Netty vulnerabilities

2020-09-23 KENNETH 0

USN-4532-1: Netty vulnerabilities It was discovered that Netty incorrectly handled certain HTTP headers. By sending an HTTP header with whitespace before the colon, a remote attacker could possibly use this issue to perform an HTTP request smuggling attack. (CVE-2019-16869) It was discovered that Netty incorrectly handled certain HTTP headers. By sending an HTTP header that lacks a colon, a remote attacker could possibly use this issue to perform an HTTP request smuggling attack. (CVE-2019-20444) It was discovered that Netty incorrectly handled certain HTTP headers. By sending a Content-Length header accompanied by a second Content-Length header, or by a Transfer-Encoding header, a remote attacker could possibly use this issue to perform an HTTP request smuggling attack. (CVE-2019-20445) Source: USN-4532-1: Netty vulnerabilities