Amazon Linux 2023 : containerd, containerd-stress (ALAS2023-2023-079)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-079 advisory. - containerd is a container runtime available as a daemon for Linux and Windows. A bug was fou ...

Continue Reading

CVSS3 - HIGH

CVSS2 - MEDIUM

Amazon Linux 2023 : python3, python3-devel, python3-idle (ALAS2023-2023-104)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-104 advisory. - Python 3.9.x before 3.9.16 and 3.10.x before 3.10.9 on Linux allows local privilege escalati ...

Continue Reading

CVSS3 - HIGH

Amazon Linux 2023 : openssl, openssl-devel, openssl-libs (ALAS2023-2023-101)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-101 advisory. - A read buffer overrun can be triggered in X.509 certificate verification, specifically in na ...

Continue Reading

CVSS3 - HIGH

Amazon Linux 2023 : python3-jwt, python3-jwt+crypto (ALAS2023-2023-076)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-076 advisory. - PyJWT is a Python implementation of RFC 7519. PyJWT supports multiple different JWT signing algorithm ...

Continue Reading

CVSS3 - HIGH

CVSS2 - MEDIUM

Amazon Linux 2023 : xmlrpc-c, xmlrpc-c-apps, xmlrpc-c-c++ (ALAS2023-2023-068)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-068 advisory. - xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as chec ...

Continue Reading

CVSS3 - CRITICAL

CVSS2 - HIGH

IBM Aspera Faspex < 4.4.2 Patch Level 2 Multiple Vulnerabilities

According to its self-reported version, the instance of IBM Aspera Faspex running on the remote web server is prior to 4.4.2 Patch Level 2. It is, therefore, affected by multiple vulnerabilities, incl ...

Continue Reading

CVSS3 - CRITICAL

CVSS2 - HIGH

CBL Mariner 2.0 Security Update: m2crypto (CVE-2020-25657)

The version of m2crypto installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2020-25657 advisory. - A flaw ...

Continue Reading

CVSS3 - MEDIUM

CVSS2 - MEDIUM

CBL Mariner 2.0 Security Update: python3 (CVE-2022-42919)

The version of python3 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-42919 advisory. - Python 3 ...

Continue Reading

CVSS3 - HIGH

Back to Main

Subscribe for the latest news: