Lucene search
+L

500 matches found

RedHat Linux
RedHat Linux
•added 2021/11/01 8:22 a.m.•18 views

environment: Unicode's bidirectional (BiDi) override characters can cause trojan source attacks

A flaw was found in the way Unicode standards are implemented in the context of development environments, which have specialized requirements for rendering text. An attacker could exploit this to deceive a human reviewer by creating a malicious patch containing well placed BiDi characters. The...

8.3CVSS6.9AI score0.12881EPSS
SaveExploits4References9
RedHat Linux
RedHat Linux
•added 2021/11/01 8:09 a.m.•18 views

environment: Unicode's bidirectional (BiDi) override characters can cause trojan source attacks

A flaw was found in the way Unicode standards are implemented in the context of development environments, which have specialized requirements for rendering text. An attacker could exploit this to deceive a human reviewer by creating a malicious patch containing well placed BiDi characters. The...

8.3CVSS6.9AI score0.12881EPSS
SaveExploits4References9
RedHat Linux
RedHat Linux
•added 2021/11/01 8:03 a.m.•18 views

environment: Unicode's bidirectional (BiDi) override characters can cause trojan source attacks

A flaw was found in the way Unicode standards are implemented in the context of development environments, which have specialized requirements for rendering text. An attacker could exploit this to deceive a human reviewer by creating a malicious patch containing well placed BiDi characters. The...

8.3CVSS6.9AI score0.12881EPSS
SaveExploits4References9
RedHat Linux
RedHat Linux
•added 2021/11/01 7:57 a.m.•15 views

environment: Unicode's bidirectional (BiDi) override characters can cause trojan source attacks

A flaw was found in the way Unicode standards are implemented in the context of development environments, which have specialized requirements for rendering text. An attacker could exploit this to deceive a human reviewer by creating a malicious patch containing well placed BiDi characters. The...

8.3CVSS6.9AI score0.12881EPSS
SaveExploits4References9
RedHat Linux
RedHat Linux
•added 2021/11/01 7:47 a.m.•22 views

environment: Unicode's bidirectional (BiDi) override characters can cause trojan source attacks

A flaw was found in the way Unicode standards are implemented in the context of development environments, which have specialized requirements for rendering text. An attacker could exploit this to deceive a human reviewer by creating a malicious patch containing well placed BiDi characters. The...

8.3CVSS6.9AI score0.12881EPSS
SaveExploits4References9
RedHat Linux
RedHat Linux
•added 2021/11/01 7:44 a.m.•19 views

environment: Unicode's bidirectional (BiDi) override characters can cause trojan source attacks

A flaw was found in the way Unicode standards are implemented in the context of development environments, which have specialized requirements for rendering text. An attacker could exploit this to deceive a human reviewer by creating a malicious patch containing well placed BiDi characters. The...

8.3CVSS6.9AI score0.12881EPSS
SaveExploits4References9
RedHat Linux
RedHat Linux
•added 2021/11/01 7:44 a.m.•21 views

environment: Unicode's bidirectional (BiDi) override characters can cause trojan source attacks

A flaw was found in the way Unicode standards are implemented in the context of development environments, which have specialized requirements for rendering text. An attacker could exploit this to deceive a human reviewer by creating a malicious patch containing well placed BiDi characters. The...

8.3CVSS6.9AI score0.12881EPSS
SaveExploits4References9
OSV
OSV
•added 2021/11/01 4:15 a.m.•10 views

ALPINE-CVE-2021-42574

An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via control sequences, which can be used to craft source code that renders different logic than the logical ordering of tokens ingested by compilers and...

8.3CVSS6.8AI score0.12881EPSS
SaveExploits4References1
NVD
NVD
•added 2021/11/01 4:15 a.m.•33 views

CVE-2021-42574

An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via control sequences, which can be used to craft source code that renders different logic than the logical ordering of tokens ingested by compilers and...

8.3CVSS0.12881EPSS
SaveExploits4References18
OSV
OSV
•added 2021/11/01 4:15 a.m.•7 views

DEBIAN-CVE-2021-42574

An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via control sequences, which can be used to craft source code that renders different logic than the logical ordering of tokens ingested by compilers and...

8.3CVSS6.8AI score0.12881EPSS
SaveExploits4References1
attackerkb
attackerkb
•added 2021/11/01 4:15 a.m.•10 views

CVE-2021-42574

An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via control sequences, which can be used to craft source code that renders different logic than the logical ordering of tokens ingested by compilers and...

8.3CVSS6.8AI score0.12881EPSS
SaveExploits4References22
UbuntuCve
UbuntuCve
•added 2021/11/01 4:15 a.m.•81 views

CVE-2021-42574

An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via control sequences, which can be used to craft source code that renders different logic than the logical ordering of tokens ingested by compilers and...

8.3CVSS6.9AI score0.12881EPSS
SaveExploits4References5
OSV
OSV
•added 2021/11/01 4:15 a.m.•33 views

UBUNTU-CVE-2021-42574

An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via control sequences, which can be used to craft source code that renders different logic than the logical ordering of tokens ingested by compilers and...

8.3CVSS6.8AI score0.12881EPSS
SaveExploits4References6
Prion
Prion
•added 2021/11/01 4:15 a.m.•43 views

Design/Logic Flaw

DISPUTED An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via control sequences, which can be used to craft source code that renders different logic than the logical ordering of tokens ingested by...

5.1CVSS8.4AI score0.12881EPSS
SaveExploits4References18Affected Software3
Vulnrichment
Vulnrichment
•added 2021/11/01 12:00 a.m.•25 views

CVE-2021-42574

An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via control sequences, which can be used to craft source code that renders different logic than the logical ordering of tokens ingested by compilers and...

6.8AI score0.12881EPSS
SaveExploits4References18
Tenable Nessus
Tenable Nessus
•added 2021/11/01 12:00 a.m.•62 views

RHEL 7 : binutils (RHSA-2021:4033)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:4033 advisory. The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the ar...

8.3CVSS6.9AI score0.12881EPSS
SaveExploits4References6
CVE
CVE
•added 2021/11/01 12:00 a.m.•839 views

CVE-2021-42574

CVE-2021-42574 describes a trojan-source style vulnerability in the Unicode Bidirectional Algorithm up to Unicode 14.0, allowing visual reordering of code tokens via BiDi control characters. Connected advisories confirm public attention across GCC/binutils/toolchains, with mitigations including u...

8.3CVSS6.8AI score0.12881EPSS
SaveIn wildExploits4References18Affected Software1
Positive Technologies
Positive Technologies
•added 2021/11/01 12:00 a.m.•14 views

PT-2021-4639

Name of the Vulnerable Software and Affected Versions Unicode Specification versions prior to 14.0 Jira Service Management affected versions not specified Jira Software affected versions not specified Jira Work Management affected versions not specified Description The issue is related to the...

10CVSS7AI score0.12881EPSS
SaveExploits4References124
AlpineLinux
AlpineLinux
•added 2021/11/01 12:00 a.m.•105 views

CVE-2021-42574

An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via control sequences, which can be used to craft source code that renders different logic than the logical ordering of tokens ingested by compilers and...

8.3CVSS6.8AI score0.12881EPSS
SaveExploits4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/01 12:00 a.m.•4 views

CVE-2021-42574: Improper Control of Generation of Code

An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via control sequences, which can be used to craft source code that renders different logic than the logical ordering of tokens ingested by compilers and...

8.3CVSS6.8AI score0.12881EPSS
SaveExploits4References2
Rows per page
Query Builder