net-misc

Security Bug Reports

• <net-misc/tigervnc-1.12.0-r2: Multiple vulnerabilities (CVE-2019-{15691, 15692, 15694, 15695}, CVE-2020-26117)

  700464 - Assigned to Gentoo Security
• net-misc/minidlna: remote DoS and memory corruption

  736226 - Assigned to Gentoo Security
• <net-misc/asterisk-{13.38.2, 16.16.2}: Multiple vulnerabilities

  771318 - Assigned to Gentoo Security
• net-misc/wget: Authorisation header disclosure on redirect (CVE-2021-31879)

  786957 - Assigned to Gentoo Security
• <net-misc/rsync-3.2.3-r5: improper TLS validation in rsync-ssl script (CVE-2020-14387)

  792576 - Assigned to Gentoo Security
• <net-misc/httpie-3.2.1: multiple vulnerabilities

  834801 - Assigned to Gentoo Security
• <net-misc/asterisk-{16.26.1,18.13.0}: multiple vulnerabilities

  838391 - Assigned to Gentoo Security
• <net-misc/rsync-3.2.4: Vulnerability in bundled zlib

  838724 - Assigned to Gentoo Security
• <net-misc/gsasl-2.0.1: Out of bounds read

  858848 - Assigned to Gentoo Security
• <net-misc/rsync-3.2.5_pre1: Insufficient file list verification

  862876 - Assigned to Gentoo Security
• net-misc/openvswitch: DoS via crafted packet

  869365 - Assigned to Gentoo Security
• <net-misc/rabbitmq-server-3.8.34: URI encryption with predictable secret seed

  875782 - Assigned to Gentoo Security
• <net-misc/asterisk-{16.29.1,18.15.1}: multiple vulnerabilities

  884797 - Assigned to Gentoo Security
• <net-misc/icaclient-23.2.0.10: session takeover vulnerability

  896180 - Assigned to Gentoo Security
• <net-misc/frr-8.4.1: DoS vulnerability via reachable assertion

  903757 - Assigned to Gentoo Security
• <net-misc/ntp-4.2.8_p16: Multiple vulnerabilities

  904337 - Assigned to Gentoo Security
• net-misc/frr: multiple vulnerabilities

  905882 - Assigned to Gentoo Security
• <net-misc/frr-9.0: multiple vulnerabilities

  906116 - Assigned to Gentoo Security
• <net-misc/curl-8.1.0: Multiple vulnerabilities

  906590 - Assigned to Gentoo Security
• <net-misc/yt-dlp-2023.07.06: cookie leak vulnerability (CVE-2023-35934)

  909780 - Assigned to Gentoo Security
• <net-misc/iperf-3.14: Denial of service vulnerability

  910083 - Assigned to Gentoo Security
• <net-misc/curl-8.2.0: fopen race condition (TOCTOU)

  910564 - Assigned to Gentoo Security
• net-misc/frr: multiple vulnerabilities

  913242 - Assigned to Gentoo Security
• <net-misc/ntpsec-1.2.2a: Crash with NTS if NTS is disabled

  914427 - Assigned to Gentoo Security
• <net-misc/memcached-1.6.22: multiple vulnerabilities

  916510 - Assigned to Gentoo Security
• <net-misc/frr-9.0.2: multiple vulnerabilities

  916902 - Assigned to Gentoo Security
• <net-misc/yt-dlp-2023.11.14 Generic Extractor MITM Vulnerability via Arbitrary Proxy Injection (CVE-2023-46121)

  917355 - Assigned to Gentoo Security
• net-misc/httpie-3.2.2: Missing SSL certificate validation

  917450 - Assigned to Gentoo Security
• net-misc/croc: multiple vulnerabilities

  918091 - Assigned to Gentoo Security
• <net-misc/rabbitmq-server-3.12.9: DoS via very large requests

  918527 - Assigned to Gentoo Security
• <net-misc/lldpd-1.0.17: out of bounds read

  918552 - Assigned to Gentoo Security
• <net-misc/curl-8.5.0: Multiple vulnerabilities

  919325 - Assigned to Gentoo Security
• <net-misc/curl-8.5.0: removes HSTS contents

  919889 - Assigned to Gentoo Security
• <net-misc/asterisk-{18.20.2,20.5.2}: denial of service via dtls hello

  920026 - Assigned to Gentoo Security
• [Tracker] Terrapin Vulnerability

  920280 - Assigned to Gentoo Security
• net-misc/dropbear: terrapin vulnerability

  920293 - Assigned to Gentoo Security
• <net-misc/putty-0.80: Terrapin vulnerability

  920304 - Assigned to Gentoo Security
• <net-misc/curl-8.6.0: OCSP verification bypass with TLS session reuse

  923413 - Assigned to Gentoo Security
• net-misc/openvswitch: multiple vulnerabilities

  924129 - Assigned to Gentoo Security
• <net-misc/curl-8.7.1: multiple vulnerabilities

  927960 - Assigned to Gentoo Security
• <net-misc/wget-1.24.5: cookie leakage with HSTS and subdomains

  930041 - Assigned to Gentoo Security
• <net-misc/putty-0.81: unsafe key generation

  930082 - Assigned to Gentoo Security