net-libs

Security Bug Reports

• <net-libs/libupnp-1.14.0: Denial of service via crafted SSDP message (CVE-2020-13848)

  727170 - Assigned to Gentoo Security
• <net-libs/libnpupnp-4.1.4: DNS rebinding vulnerability in npupnp (CVE-2021-31718)

  784593 - Assigned to Gentoo Security
• net-libs/libgrss: Does not perform TLS certificate validation (CVE-2016-20011)

  792264 - Assigned to Gentoo Security
• net-libs/libzapojit: improper TLS verification (CVE-2021-39360)

  809716 - Assigned to Gentoo Security
• <net-libs/libgfbgraph-0.2.5: improper TLS verification (CVE-2021-39358)

  809722 - Assigned to Gentoo Security
• <net-libs/ldns-1.8.0: Multiple vulnerabilities

  827828 - Assigned to Gentoo Security
• <net-libs/gnutls-3.7.3: Memory corruption in gnutls_x509_trust_list_verify_crt2()

  831573 - Assigned to Gentoo Security
• <net-libs/pacparser-1.4.0: Memory overwrite vulnerability

  844736 - Assigned to Gentoo Security
• <net-libs/gnutls-3.7.7: Double free in PKCS7 signature verification

  861803 - Assigned to Gentoo Security
• <net-libs/libvncserver-0.9.14: multiple vulnerabilities

  887067 - Assigned to Gentoo Security
• <net-libs/libetpan-1.9.4-r2: null pointer dereference

  891263 - Assigned to Gentoo Security
• <net-libs/gnutls-3.7.9: Bleichenbacher oracle in the TLS RSA key exchange

  893880 - Assigned to Gentoo Security
• <net-libs/libyang-2.1.55: null pointer dereferences

  903756 - Assigned to Gentoo Security
• <net-libs/libsignal-protocol-c-2.3.3-r1: unsigned integer overflow in bundled protobuf-c

  905098 - Assigned to Gentoo Security
• <net-libs/grpc-1.55.1: multiple vulnerabilities

  908217 - Assigned to Gentoo Security
• <net-libs/rabbitmq-c-0.13.0: credentials passed on command line

  908818 - Assigned to Gentoo Security
• <net-libs/libtirpc-1.3.4: Multiple vulnerabilities

  915404 - Assigned to Gentoo Security
• <net-libs/nodejs-{18.18.2,20.8.1}: multiple vulnerabilities

  916513 - Assigned to Gentoo Security
• <net-libs/pjproject-2.13.1: heap buffer overflow when parsing DNS packet

  917463 - Assigned to Gentoo Security
• net-libs/pjproject: UAF in SRTP media transport

  917613 - Assigned to Gentoo Security
• <net-libs/gnutls-3.8.2: timing sidechannel in RSA-PSK key exchange

  918663 - Assigned to Gentoo Security
• <net-libs/gnutls-3.8.3: Multiple vulnerabilities

  922262 - Assigned to Gentoo Security
• <net-libs/nodejs-{18.19.1,20.11.0}: Multiple vulnerabilities

  924704 - Assigned to Gentoo Security
• <net-libs/gnutls-3.8.5: multiple vulnerabilities

  927557 - Assigned to Gentoo Security
• <net-libs/nodejs-{18.20.1,20.12.1}: multiple vulnerabilities

  928532 - Assigned to Gentoo Security
• <net-libs/nodejs-{18.20.4, 20.15.1,22.4.1}: Multiple Vulnerabilities

  936204 - Assigned to Gentoo Security
• <net-libs/webkit-gtk-2.44.3{,-r410,-r600}: multiple vulnerabilities

  938026 - Assigned to Gentoo Security
• <net-libs/libpcap-1.10.5: Multiple vulnerabilities

  939952 - Assigned to Gentoo Security
• <net-libs/webkit-gtk-2.46.4{,-r410,-r600}: multiple vulnerabilities

  941276 - Assigned to Gentoo Security
• <net-libs/mbedtls-{2.28.9,3.6.2}: multiple vulnerabilities

  943337 - Assigned to Gentoo Security