Search CVE reports
121 – 130 of 42559 results
MapServer is a system for developing web-based GIS applications. Starting in version 4.2 and prior to version 8.6.1, a heap-buffer-overflow write in MapServer’s SLD (Styled Layer Descriptor) parser lets a remote, unauthenticated...
1 affected package
mapserver
| Package | 18.04 LTS |
|---|---|
| mapserver | Needs evaluation |
pypdf is a free and open-source pure-python PDF library. Versions prior to 6.9.2 have a vulnerability in which an attacker can craft a PDF which leads to an infinite loop. This requires reading a file in non-strict mode. This has...
2 affected packages
pypdf, pypdf2
| Package | 18.04 LTS |
|---|---|
| pypdf | — |
| pypdf2 | Needs evaluation |
Incus is a system container and virtual machine manager. Incus instances have an option to provide credentials to systemd in the guest. For containers, this is handled through a shared directory. Prior to version 6.23.0, an...
2 affected packages
incus, lxd
| Package | 18.04 LTS |
|---|---|
| incus | — |
| lxd | Needs evaluation |
Incus is a system container and virtual machine manager. Prior to version 6.23.0, the web server spawned by `incus webui` incorrectly validates the authentication token such that an invalid value will be accepted. `incus webui`...
2 affected packages
incus, lxd
| Package | 18.04 LTS |
|---|---|
| incus | — |
| lxd | Needs evaluation |
If auth_username_chars is empty, it is possible to inject arbitrary LDAP filter to Dovecot's LDAP authentication. This leads to potentially bypassing restrictions and allows probing of LDAP structure. Do not clear out...
1 affected package
dovecot
| Package | 18.04 LTS |
|---|---|
| dovecot | Not affected |
A mail message containing excessive amount of RFC 2231 MIME parameters causes LMTP to use too much CPU. A suitably formatted mail message causes mail delivery process to consume large amounts of CPU time. Use MTA capabilities to...
1 affected package
dovecot
| Package | 18.04 LTS |
|---|---|
| dovecot | Vulnerable |
Attacker can send a specifically crafted message before authentication that causes managesieve to allocate large amount of memory. Attacker can force managesieve-login to be unavailable by repeatedly crashing the process. Protect...
1 affected package
dovecot
| Package | 18.04 LTS |
|---|---|
| dovecot | Vulnerable |
Sending "NOOP (((...)))" command with 4000 parenthesis open+close results in ~1MB extra memory usage. Longer commands will result in client disconnection. This 1 MB can be left allocated for longer time periods by not sending the...
1 affected package
dovecot
| Package | 18.04 LTS |
|---|---|
| dovecot | Not affected |
Doveadm credentials are verified using direct comparison which is susceptible to timing oracle attack. An attacker can use this to determine the configured credentials. Figuring out the credential will lead into full access to the...
1 affected package
dovecot
| Package | 18.04 LTS |
|---|---|
| dovecot | Not affected |
Dovecot OTP authentication is vulnerable to replay attack under specific conditions. If auth cache is enabled, and username is altered in passdb, then OTP credentials can be cached so that same OTP reply is valid. An attacker able...
1 affected package
dovecot
| Package | 18.04 LTS |
|---|---|
| dovecot | Vulnerable |