Поиск уязвимостей

There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vc_do_resize function in drivers/tty/vt/vt.c.

In cloud-init through 19.4 rand_user_password in cloudinit/config/cc_set_passwords.py has a small default pwlen value which makes it easier for attackers to guess passwords.

cloud-init through 19.4 relies on Mersenne Twister for a random password which makes it easier for attackers to predict passwords because rand_str in cloudinit/util.py calls the random.choice function.

A vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack

update-policy rules of type "subdomain" are enforced incorrectly

A flaw in native PKCS#11 code can lead to a remotely triggerable assertion failure in pk11.c

A truncated TSIG response can lead to an assertion failure

Attempting QNAME minimization after forwarding can lead to an assertion failure in resolver.c

In BIND 9.15.6 -> 9.16.5 9.17.0 -> 9.17.3 An attacker who can establish a TCP connection with the server and send data on that connection can exploit this to trigger the assertion failure causing the server to exit.

A buffer boundary check assertion in rdataset.c can fail incorrectly during zone transfer

A buffer boundary check assertion in rdataset.c can fail incorrectly during zone transfer

Incomplete fix for CVE-2019-11250 allows for token leak in logs when logLevel >= 9

Secret leaks in logs for vSphere Provider kube-controller-manager

Bypass of Kubernetes API Server proxy TOCTOU

Webhook redirect in kube-apiserver

Kubernetes man in the middle using LoadBalancer or ExternalIPs

curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.

curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.