Malicious code in aws-blue_green_deploy (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6598 Malicious code in amazon_search (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in amazon_search (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in amazon_kinesis-client-ruby (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6597 Malicious code in amazon_kinesis-client-ruby (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in alerty-plugin-amazon-sns (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6550 Malicious code in alerty-plugin-amazon-sns (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in Be.Vlaanderen.Bаsisregisters.MessageHandling.AwsSqs.Sіmple (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in Be.Vlaanԁeren.Basіsregisters.Aws.DistrіbuteԁMutex (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in Be.Vlaaոderen.Basisregisters.Aws.DistribսtedS3Cache (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in down_load_ebook_aws_amazon_web_service_the_ultimate_guide_to_amaz_by_george_prestonship_u1mt7 (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in aws-ecs-devops-using-aws-cdk (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @terraform-aws-github-runner/aws-powertools-util (npm)

--- -= Per source details. Do not edit below this line.=-...

Medium: dnsmasq

Issue Overview: dnsmasq 2.9 is vulnerable to Integer Overflow via forwardquery. CVE-2023-49441 Affected Packages: dnsmasq Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories. Issue Correction...

Important: kernel

Issue Overview: A flaw was found in the Linux kernel. When reusing a socket with an attached dccpshctxccid as a listener, the socket will be used after being released leading to denial of service DoS or a potential code execution. The highest threat from this vulnerability is to data...

Medium: python-jinja2

Issue Overview: Jinja is an extensible templating engine. The xmlattr filter in affected versions of Jinja accepts keys containing non-attribute characters. XML/HTML attributes cannot contain spaces, /, , or =, as each would then be interpreted as starting a separate attribute. If an application...

Medium: dnsmasq

Issue Overview: dnsmasq 2.9 is vulnerable to Integer Overflow via forwardquery. CVE-2023-49441 Affected Packages: dnsmasq Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories. Issue Correction...

Medium: iperf3

Issue Overview: It is possible for a malicious or malfunctioning client to send less than the expected amount of data to the server. If this happens, the server will hang indefinitely waiting for the remainder or until the connection gets closed. Because iperf3 is deliberately designed to service...

Important: unbound

Issue Overview: A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime configuration. If a process can connect over localhost to port 8953, it can alter the configuration of unbound.service. This flaw...

Important: libndp

Issue Overview: A vulnerability was found in libndp. A buffer overflow in NetworkManager that can be triggered by sending a malformed IPv6 router advertisement packet via malicious user locally. This happens as libndp was not validating correctly the route length information and hence leading to ...