Search CVE reports
191 – 200 of 42614 results
When sending invalid base64 SASL data, login process is disconnected from the auth server, causing all active authentication sessions to fail. Invalid BASE64 data can be used to DoS a vulnerable server to break concurrent logins....
1 affected package
dovecot
| Package | 18.04 LTS |
|---|---|
| dovecot | Not affected |
In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users to observe or manipulate the screen contents, or cause an application crash, because of incorrect permissions.
1 affected package
tigervnc
| Package | 18.04 LTS |
|---|---|
| tigervnc | Needs evaluation |
Incus is a system container and virtual machine manager. Prior to version 6.23.0, instance template files can be used to cause arbitrary read or writes as root on the host server. Incus allows for pongo2 templates within instances...
2 affected packages
incus, lxd
| Package | 18.04 LTS |
|---|---|
| incus | — |
| lxd | Needs evaluation |
Incus is a system container and virtual machine manager. Prior to version 6.23.0, a specially crafted storage bucket backup can be used by an user with access to Incus' storage bucket feature to crash the Incus daemon. Repeated...
2 affected packages
incus, lxd
| Package | 18.04 LTS |
|---|---|
| incus | — |
| lxd | Not affected |
Incus is a system container and virtual machine manager. Incus provides an API to retrieve VM screenshots. That API relies on the use of a temporary file for QEMU to write the screenshot to which is then picked up and sent to the...
2 affected packages
incus, lxd
| Package | 18.04 LTS |
|---|---|
| incus | — |
| lxd | Not affected |
Incus is a system container and virtual machine manager. Prior to version 6.23.0, a lack of validation of the image fingerprint when downloading from simplestreams image servers opens the door to image cache poisoning and under...
2 affected packages
incus, lxd
| Package | 18.04 LTS |
|---|---|
| incus | — |
| lxd | Needs evaluation |
A memory leak exists in the Grassroots DICOM library (GDCM). The bug occurs when parsing malformed DICOM files with non-standard VR types in file meta information. The vulnerability leads to vast memory allocations and resource...
1 affected package
gdcm
| Package | 18.04 LTS |
|---|---|
| gdcm | Needs evaluation |
Picomatch is a glob matcher written JavaScript. Versions prior to 4.0.4, 3.0.2, and 2.3.2 are vulnerable to a method injection vulnerability affecting the `POSIX_REGEX_SOURCE` object. Because the object inherits...
1 affected package
node-anymatch
| Package | 18.04 LTS |
|---|---|
| node-anymatch | Needs evaluation |
Picomatch is a glob matcher written JavaScript. Versions prior to 4.0.4, 3.0.2, and 2.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) when processing crafted extglob patterns. Certain patterns using extglob...
1 affected package
node-anymatch
| Package | 18.04 LTS |
|---|---|
| node-anymatch | Needs evaluation |
Active Storage allows users to attach cloud and local files in Rails applications. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1 Active Storage's proxy controller does not limit the number of byte ranges in an HTTP Range header....
1 affected package
rails
| Package | 18.04 LTS |
|---|---|
| rails | Needs evaluation |