net-libs

Security Bug Reports

• <net-libs/libupnp-1.14.0: Denial of service via crafted SSDP message (CVE-2020-13848)

  727170 - Assigned to Gentoo Security
• <net-libs/nodejs-{12.21.0, 14.16.0}: Multiple vulnerabilities (CVE-2021-{22883,22884})

  772422 - Assigned to Gentoo Security
• <net-libs/nodejs-{12.22.1,14.16.1,15.14.0}: multiple vulnerabilities

  781704 - Assigned to Gentoo Security
• <net-libs/libnpupnp-4.1.4: DNS rebinding vulnerability in npupnp (CVE-2021-31718)

  784593 - Assigned to Gentoo Security
• net-libs/libgrss: Does not perform TLS certificate validation (CVE-2016-20011)

  792264 - Assigned to Gentoo Security
• <net-libs/nodejs-{12.22.4, 14.17.4}: Use-after-free in HTTP/2 handling (CVE-2021-22930)

  805053 - Assigned to Gentoo Security
• net-libs/libzapojit: improper TLS verification (CVE-2021-39360)

  809716 - Assigned to Gentoo Security
• <net-libs/libgfbgraph-0.2.5: improper TLS verification (CVE-2021-39358)

  809722 - Assigned to Gentoo Security
• <net-libs/nodejs-{12.22.6, 14.17.6}: multiple vulnerabilities

  811273 - Assigned to Gentoo Security
• <net-libs/nodejs-{12.22.7,14.18.1,16.13.0}: Multiple vulnerabilities (CVE-2021-{22959,22960})

  817938 - Assigned to Gentoo Security
• <net-libs/ldns-1.8.0: Multiple vulnerabilities

  827828 - Assigned to Gentoo Security
• <net-libs/nodejs-{12.22.10,14.19.0,16.14.1}: multiple vulnerabilities

  831037 - Assigned to Gentoo Security
• <net-libs/gnutls-3.7.3: Memory corruption in gnutls_x509_trust_list_verify_crt2()

  831573 - Assigned to Gentoo Security
• <net-libs/nodejs-{14.19.3,16.14.2}: multiple vulnerabilities

  835615 - Assigned to Gentoo Security
• <net-libs/pacparser-1.4.0: Memory overwrite vulnerability

  844736 - Assigned to Gentoo Security
• <net-libs/nodejs-{14.20.0,16.16.0,18.5.0}: multiple vulnerabilities

  857111 - Assigned to Gentoo Security
• <net-libs/gnutls-3.7.7: Double free in PKCS7 signature verification

  861803 - Assigned to Gentoo Security
• <net-libs/nodejs-{16.18.0,18.9.0}: multiple vulnerabilities via bundled undici

  865627 - Assigned to Gentoo Security
• <net-libs/nodejs-{14.20.1, 16.17.1, 18.9.1}: multiple vulnerabilities

  872692 - Assigned to Gentoo Security
• <net-libs/nodejs-{14.21.1,16.18.1,18.12.1}: multiple vulnerabilities

  879617 - Assigned to Gentoo Security
• <net-libs/mbedtls-{2.28.5,3.5.0}: multiple vulnerabilties

  886001 - Assigned to Gentoo Security
• <net-libs/libvncserver-0.9.14: multiple vulnerabilities

  887067 - Assigned to Gentoo Security
• <net-libs/libetpan-1.9.4-r2: null pointer dereference

  891263 - Assigned to Gentoo Security
• <net-libs/sofia-sip-1.13.16: multiple heap mishandling vulnerabilities

  891791 - Assigned to Gentoo Security
• <net-libs/gnutls-3.7.9: Bleichenbacher oracle in the TLS RSA key exchange

  893880 - Assigned to Gentoo Security
• <net-libs/libyang-2.1.55: null pointer dereferences

  903756 - Assigned to Gentoo Security
• <net-libs/libsignal-protocol-c-2.3.3-r1: unsigned integer overflow in bundled protobuf-c

  905098 - Assigned to Gentoo Security
• <net-libs/grpc-1.55.1: multiple vulnerabilities

  908217 - Assigned to Gentoo Security
• <net-libs/rabbitmq-c-0.13.0: credentials passed on command line

  908818 - Assigned to Gentoo Security
• <net-libs/libtirpc-1.3.4: Multiple vulnerabilities

  915404 - Assigned to Gentoo Security
• <net-libs/nghttp2-1.57.0: HTTP/2 Rapid Reset vulnerability

  915554 - Assigned to Gentoo Security
• <net-libs/nodejs-{18.18.2,20.8.1}: multiple vulnerabilities

  916513 - Assigned to Gentoo Security
• <net-libs/pjproject-2.13.1: heap buffer overflow when parsing DNS packet

  917463 - Assigned to Gentoo Security
• net-libs/pjproject: UAF in SRTP media transport

  917613 - Assigned to Gentoo Security
• <net-libs/nodejs-{16.20.2,18.17.1,20.5.1}: multiple vulnerabilities

  918086 - Assigned to Gentoo Security
• <net-libs/nodejs-{16.20.1,18.16.1,20.3.1}: multiple vulnerabilities

  918614 - Assigned to Gentoo Security
• <net-libs/gnutls-3.8.2: timing sidechannel in RSA-PSK key exchange

  918663 - Assigned to Gentoo Security
• <net-libs/gnutls-3.8.3: Multiple vulnerabilities

  922262 - Assigned to Gentoo Security
• <net-libs/mbedtls-{2.28.7,3.5.2}: multiple vulnerabilties

  923279 - Assigned to Gentoo Security
• <net-libs/webkit-gtk-2.42.5: multiple vulnerabilities

  923851 - Assigned to Gentoo Security
• <net-libs/nodejs-{18.19.1,20.11.0}: Multiple vulnerabilities

  924704 - Assigned to Gentoo Security
• <net-libs/gnutls-3.8.5: multiple vulnerabilities

  927557 - Assigned to Gentoo Security
• <net-libs/nodejs-{18.20.1,20.12.1}: multiple vulnerabilities

  928532 - Assigned to Gentoo Security
• net-libs/nghttp2: HTTP/2 CONTINUATION frames can be utilized for DoS attacks

  928541 - Assigned to Gentoo Security
• <net-libs/webkit-gtk-2.44.0: multiple vulnerabilities

  930116 - Assigned to Gentoo Security