golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding

A flaw was found in golang. A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of requests...

Description of the security update for SharePoint Enterprise Server 2016: May 9, 2023 (KB5002397)

None None...

XWiki Platform 安全漏洞

XWiki Platform is a suite of Wiki platforms for creating web collaboration applications from the XWiki Foundation in France. A security vulnerability exists in XWiki Platform versions 3.3-milestone-2, prior to 14.10.4, and prior to 15.0-rc-1, which stems from a user being able to perform any acti...

ALSA-2023:2367 Moderate: containernetworking-plugins security and bug fix update

The Container Network Interface CNI project consists of a specification and libraries for writing plug-ins for configuring network interfaces in Linux containers, along with a number of supported plug-ins. CNI concerns itself only with network connectivity of containers and removing allocated...

Moderate: git-lfs security and bug fix update

Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fixes: golang: net/http: improper sanitization of Transfer-Encoding header CVE-2022-1705 golang:...

Upgraded Q -> 2 from #99 [1683646958313]

Judge has assessed an item in Issue 99 as 2 risk. The relevant finding follows: 03 ALLOWING ShortCollateral.refresh FUNCTION TO BE CALLABLE BY ANYONE CAN BE DANGEROUS --- The text was updated successfully, but these errors were encountered: All reactions...

Ubuntu: Security Advisory (USN-6060-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP10 : golang (EulerOS-SA-2023-1822)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a...

EulerOS 2.0 SP10 : golang (EulerOS-SA-2023-1804)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a...

[SECURITY] Fedora 38 Update: rust-fedora-update-feedback-2.1.2-2.fc38

Provide feedback for Fedora updates inspired by fedora-easy-karma...

[SECURITY] [DSA 5399-1] odoo security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5399-1 [email protected] https://www.debian.org/security/ Sebastien Delafond May 05, 2023 https://www.debian.org/security/faq -...

Ubuntu 22.04 LTS : Linux kernel (Intel IoTG) vulnerabilities (USN-6057-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6057-1 advisory. It was discovered that the Traffic-Control Index TCINDEX implementation in the Linux kernel contained a use-after-free vulnerability. A local attacker...

CVE-2021-45985 affecting package ntopng for versions less than 5.2.1-2

CVE-2021-45985 affecting package ntopng for versions less than 5.2.1-2. A patched version of the package is available...

CVE-2023-25012 affecting package kernel for versions less than 5.15.107.1-2

CVE-2023-25012 affecting package kernel for versions less than 5.15.107.1-2. A patched version of the package is available...

CVE-2023-1652 affecting package kernel for versions less than 5.15.107.1-2

CVE-2023-1652 affecting package kernel for versions less than 5.15.107.1-2. A patched version of the package is available...

CVE-2023-1838 affecting package kernel for versions less than 5.15.107.1-2

CVE-2023-1838 affecting package kernel for versions less than 5.15.107.1-2. A patched version of the package is available...

CVE-2023-1249 affecting package kernel for versions less than 5.15.107.1-2

CVE-2023-1249 affecting package kernel for versions less than 5.15.107.1-2. A patched version of the package is available...

CVE-2023-0590 affecting package kernel for versions less than 5.15.107.1-2

CVE-2023-0590 affecting package kernel for versions less than 5.15.107.1-2. A patched version of the package is available...

Upgraded Q -> 2 from #225 [1683100933057]

Judge has assessed an item in Issue 225 as 2 risk. The relevant finding follows: uint256 exponent = baseToken == address0 ? 18 - 4 : ERC20baseToken.decimals - 4; will revert since ERC20baseToken.decimals - 4; causes an underflow --- The text was updated successfully, but these errors were...

Amazon Linux 2023 : golang, golang-bin, golang-misc (ALAS2023-2023-175)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-175 advisory. Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to Uncontrolled Memory Consumption. CVE-2022-23772 cmd/go in Go before 1.16.14 and 1.17.x...