CVE-2025-2312

CVE-2025-2312 affects cifs-utils (cifs.upcall) where, in containerized environments, an upcall is made to the wrong namespace, risking disclosure of the host Kerberos credentials cache. Public advisories across multiple distributions (Debian, Mageia, Alpine Linux, CBL-Mariner) confirm the flaw an...

CVE-2025-2312

A flaw was found in cifs-utils. When trying to obtain Kerberos credentials, the cifs.upcall program from the cifs-utils package makes an upcall to the wrong namespace in containerized environments. This issue may lead to disclosing sensitive data from the host's Kerberos credentials cache...

CVE-2025-2312 cifs.upcall makes an upcall to the wrong namespace in containerized environments

A flaw was found in cifs-utils. When trying to obtain Kerberos credentials, the cifs.upcall program from the cifs-utils package makes an upcall to the wrong namespace in containerized environments. This issue may lead to disclosing sensitive data from the host's Kerberos credentials cache...

CVE-2025-2312 cifs.upcall makes an upcall to the wrong namespace in containerized environments

A flaw was found in cifs-utils. When trying to obtain Kerberos credentials, the cifs.upcall program from the cifs-utils package makes an upcall to the wrong namespace in containerized environments. This issue may lead to disclosing sensitive data from the host's Kerberos credentials cache...

CVE-2025-2312

A flaw was found in cifs-utils. When trying to obtain Kerberos credentials, the cifs.upcall program from the cifs-utils package makes an upcall to the wrong namespace in containerized environments. This issue may lead to disclosing sensitive data from the host's Kerberos credentials cache...

Siemens Simcenter Nastran 2306、Siemens Simcenter Nastran 2312和Siemens Simcenter Nastran 2406 安全漏洞

Simcenter Nastran is a finite element method solver with computational performance, accuracy and reliability. A heap buffer overflow vulnerability exists in Siemens Simcenter Nastran, which can be exploited by an attacker to execute code in the context of the current process...

PT-2024-2988 · Siemens · Teamcenter Visualization +2

Name of the Vulnerable Software and Affected Versions: JT2Go versions prior to V2312.0004 Parasolid V35.1 versions prior to V35.1.254 Parasolid V36.0 versions prior to V36.0.207 Parasolid V36.1 versions prior to V36.1.147 Teamcenter Visualization V14.2 versions prior to V14.2.0.12 Teamcenter...

Service Continuity doesn't work on CWA ChromeOS version 2312 or older

Service Continuity doesn’t work when using Citrix Workspace App for ChromeOS version 2312 or older. The Service Continuity banner doesn’t show up in case of Cloud outages on Citrix Workspace App for Chrome OS. This occurs even when Service Continuity is enabled via Google Admin Console for the...

openSUSE: Security Advisory for chromium (openSUSE-SU-2023:0234-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MAL-2024-945 Malicious code in wlwz-2312-2nd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 882cba6a3732f5a8d767cbf8721517b4495dcef6f36d8b7caeca1a565ff8b00b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-2nd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 882cba6a3732f5a8d767cbf8721517b4495dcef6f36d8b7caeca1a565ff8b00b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-7505 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c7360cb70a37acefe9bafaf2f5ddce7d1cbb4fd9810f217ee6c5ba4aaf3727a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-3602 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da808703d524fdcc6aa062b469243740cb1f96ddce506044463df68479f1bd70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-8205 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ccd33479e08b47b1611fd01a1109f9a7ef0b33196ea5516226acec51d916638 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-8203 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b6157f55472c57f53d1d451afa02655698597f9535be7021e5e9f9b0552863e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-7905 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8c68a2663a7a188916befd49cd7e7cf13234eb6d83a82204e653c8a96139c98 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-7902 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc4c555cd9b6629dc3e1ef3e7b51a4ec04a28cc7bfe43abf7864a9c38acbd604 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-1601 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5bc0e7158d5619f4e675f0c91a267739b04b6497be26ddeaa336c28335e8a06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-8103 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b7ef89aa825a4b724a25a95595bc1af6bc7590b373b4ca0b62abbf7acaf2a57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-7806 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 429f162a437e29e187824827b59e4917853e02e9517a5bafaffd7c4df62202b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...