Mittel 6.5Linux-Server
Mittel 6.5Linux-Server
ansible-pylibssh: accepts a changed SSH host key when host_key_auto_add is enabled
Kritisch 9.8Linux-Server
quay: Red Hat Quay: unauthenticated registry signing-key takeover via service key rotation
Kritisch 9.9Linux-Server
quay: quay: SQL LIKE wildcard injection in robot listing leaks cross-tenant robot tokens
Kritisch 9.8Linux-Server
Apache HTTP Server: Mehrere Schwachstellen
Concurrent Execution using Shared Resource with Improper Synchronization vulnerability in Apache HTTP Server's mod_http2 in assign_headers() can lead to RCE. This issue affects Apache HTTP Server: from 2.4.55 through 2.4.70. Affected releases of mod_h2 from GitHub: from 2.0.8 through 2.0.42.
Hoch 8.1Linux-Server
rsyslog: Schwachstelle ermöglicht SQL-Injection
Hoch 7.3Linux-Server
pappl-retrofit: Directory traversal in the add-ppdfiles and delete-ppdfiles actions
A flaw was found in pappl-retrofit. The application fails to properly sanitize user-supplied filenames when handling the upload and deletion of PostScript Printer Description (PPD) files. A remote, unauthenticated attacker can exploit this directory traversal flaw by submitting filenames containing path traversal sequences. This allows the attacker to upload or delete arbitrary files on the system, which can result in data corruption, denial of service, or arbitrary command…
MittelLinux-Server
org.apache.xmlgraphics/batik-dom: Apache XML Graphics Batik: Harden validation in SAXDocumentFactory
XXE vulnerability in Apache XML Graphics Batik. This issue affects Apache XML Graphics Batik: through 1.19. Users are recommended to upgrade to version 1.20, which fixes the issue.
Mittel 5.5Linux-Server
BusyBox: Mehrere Schwachstellen
busybox: Out-of-bounds read in volume_id_get_buffer() via an offset+length wraparound
Mittel 6.3Linux-Server
BusyBox: Mehrere Schwachstellen
busybox: tar deferred hardlink target resolved through a deferred symlink escapes the extraction directory
Mittel 6.3Linux-Server
BusyBox: Mehrere Schwachstellen
busybox: cpio hardlink target not sanitized under FEATURE_PATH_TRAVERSAL_PROTECTION
Mittel 5.5Linux-Server
BusyBox: Mehrere Schwachstellen
busybox: Divide-by-zero and heap over-read in the volume_id HFS+ prober
Mittel 5.5Linux-Server
BusyBox: Mehrere Schwachstellen
busybox: Divide-by-zero in the volume_id FAT prober via a zero sectors_per_cluster value
Hoch 7.6Linux-Server
BusyBox: Mehrere Schwachstellen
A flaw was found in BusyBox. The udhcpc6 DHCPv6 client does not properly validate the size of network options sent by a server before copying them into memory. A malicious DHCPv6 server on the local network can exploit this flaw by sending a crafted reply, triggering a stack-based buffer overflow. This vulnerability could allow an attacker to achieve arbitrary code execution with root privileges or cause a denial of service (DoS) crash.
Mittel 4.3Linux-Server
BusyBox: Mehrere Schwachstellen
busybox: Use-after-free of requested_ipv6 in udhcpc6
Hoch 7.5Linux-Server
BusyBox: Mehrere Schwachstellen
A flaw was found in BusyBox. When the httpd web server processes subdirectory configuration files, an overly long index page name can trigger a stack-based buffer overflow. An attacker with permissions to write to a subdirectory configuration file could exploit this vulnerability to execute arbitrary code with elevated privileges or cause a denial of service (DoS) by crashing the server process.
Mittel 5.3Linux-Server
BusyBox: Mehrere Schwachstellen
busybox: httpd password rule bypass for pre-compressed .gz files via Accept-Encoding: gzip
Hoch 7.5Linux-Server
BusyBox: Mehrere Schwachstellen
A flaw was found in BusyBox. When the TFTP (Trivial File Transfer Protocol) client requests a custom small block size and receives a standard response, it falls back to the default block size without resizing the allocated memory buffer. A malicious TFTP server can exploit this issue by sending standard-sized network packets during a transfer, causing a heap buffer overflow. This flaw allows an attacker to achieve arbitrary code execution or cause a Denial of Service (DoS)…
Hoch 7.1Linux-Server
grafana: Grafana: Viewer role can create, modify and delete Loki alerting rules
Hoch 8.5Linux-Server
librecad: librecad: Arbitrary code execution via crafted DWG file
LibreCAD through 2.2.1.6 contains a heap-based out-of-bounds write vulnerability in the bundled libdxfrw dwgReader18::parseDataPage() function due to unchecked buffer size and page offsets. Attackers can craft an AC1018 (R2004) DWG file with malicious startOffset values that cause decompress18 to write past the heap buffer when opened, causing crashes and potential code execution.