lhcbdirac (>=10.2.5, <=10.2.16) potentially affected by CVE-2024-29905 via dirac (7.2.52)

dirac PYPI version 7.2.52 is affected by a known vulnerability. The following packages have a transitive dependency on dirac and may be impacted: - lhcbdirac =10.2.5, =10.2.16 Source cves: CVE-2024-29905 Source advisory: OSV:PYSEC-2026-1295...

ilcdirac (>=34.0.0a1, <=34.0.0a3) potentially affected by CVE-2024-29905 via dirac (7.3.34)

dirac PYPI version 7.3.34 is affected by a known vulnerability. The following packages have a transitive dependency on dirac and may be impacted: - ilcdirac =34.0.0a1, =34.0.0a3 Source cves: CVE-2024-29905 Source advisory: OSV:PYSEC-2026-1295...

ilcdirac (>=34.0.0a4, <=34.0.0a8) potentially affected by CVE-2024-29905 via dirac (7.3.36)

dirac PYPI version 7.3.36 is affected by a known vulnerability. The following packages have a transitive dependency on dirac and may be impacted: - ilcdirac =34.0.0a4, =34.0.0a8 Source cves: CVE-2024-29905 Source advisory: OSV:PYSEC-2026-1295...

ctadirac (>=2.2.0a1, <=2.2.46) potentially affected by CVE-2024-29905 via dirac (>=8.0.0, <=8.0.40)

dirac PYPI version =8.0.0, =2.2.0a1, =2.2.46 Source cves: CVE-2024-29905 Source advisory: OSV:PYSEC-2026-1295...

EUVD-2011-3902

Malware in sbrugna...

EUVD-2024-0200

Malicious code in bioql PyPI...

EUVD-2024-1306

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2017-18243

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The unpackparseunit function in libavcodec/diracparser.c in Libav 12.2 allows remote attackers to cause a denial of service segmentation fault via a crafted fil...

CVE-2024-29905

DIRAC is an interware, meaning a software framework for distributed computing. Prior to version 8.0.41, during the proxy generation process e.g., when using dirac-proxy-init, it is possible for unauthorized users on the same machine to gain read access to the proxy. This allows the user to then...

CVE-2024-24825

DIRAC is a distributed resource framework. In affected versions any user could get a token that has been requested by another user/agent. This may expose resources to unintended parties. This issue has been addressed in release version 8.0.37. Users are advised to upgrade. There are no known...

CVE-2024-29905

DIRAC is an interware, meaning a software framework for distributed computing. Prior to version 8.0.41, during the proxy generation process e.g., when using dirac-proxy-init, it is possible for unauthorized users on the same machine to gain read access to the proxy. This allows the user to then...

CVE-2024-29905 DIRAC: Unauthorized users can read proxy contents during generation

DIRAC is an interware, meaning a software framework for distributed computing. Prior to version 8.0.41, during the proxy generation process e.g., when using dirac-proxy-init, it is possible for unauthorized users on the same machine to gain read access to the proxy. This allows the user to then...

CVE-2024-29905 DIRAC: Unauthorized users can read proxy contents during generation

DIRAC is an interware, meaning a software framework for distributed computing. Prior to version 8.0.41, during the proxy generation process e.g., when using dirac-proxy-init, it is possible for unauthorized users on the same machine to gain read access to the proxy. This allows the user to then...

CVE-2024-29905 DIRAC: Unauthorized users can read proxy contents during generation

DIRAC is an interware, meaning a software framework for distributed computing. Prior to version 8.0.41, during the proxy generation process e.g., when using dirac-proxy-init, it is possible for unauthorized users on the same machine to gain read access to the proxy. This allows the user to then...

CVE-2024-29905

DIRAC is an interware, meaning a software framework for distributed computing. Prior to version 8.0.41, during the proxy generation process e.g., when using dirac-proxy-init, it is possible for unauthorized users on the same machine to gain read access to the proxy. This allows the user to then...

CVE-2024-29905

Summary: CVE-2024-29905 affects DIRAC prior to version 8.0.41. During the proxy generation process (e.g., dirac-proxy-init), unauthorized users on the same machine could gain read access to the proxy for a sub-millisecond window, enabling actions as if using the original proxy. The issue is mitig...

comdirac (>=0.22.0, <=1.3.3), ctadirac (>=2.0.0a0, <=2.2.46) +3 more potentially affected by CVE-2024-29905 via dirac (>=7.2.30, <=8.0.40)

dirac PYPI version =7.2.30, =0.22.0, =2.0.0a0, =33.0.0a1, =10.2.5, =10.4.23 - lhcbwebdirac 5.3.0a2 Source cves: CVE-2024-29905 Source advisory: MEND:CVE-2024-29905...

ilcdirac (>=34.0.0a1, <=34.0.0a3) potentially affected by CVE-2024-29905 via dirac (7.3.34)

dirac PYPI version 7.3.34 is affected by a known vulnerability. The following packages have a transitive dependency on dirac and may be impacted: - ilcdirac =34.0.0a1, =34.0.0a3 Source cves: CVE-2024-29905 Source advisory: OSV:GHSA-V6F3-GH5H-MQWX...

ctadirac (>=2.2.0a1, <=2.2.46) potentially affected by CVE-2024-29905 via dirac (>=8.0.0, <=8.0.40)

dirac PYPI version =8.0.0, =2.2.0a1, =2.2.46 Source cves: CVE-2024-29905 Source advisory: GHSA-V6F3-GH5H-MQWX...

ctadirac (>=2.0.0a0, <=2.0.31) potentially affected by CVE-2024-29905 via dirac (7.3.12)

dirac PYPI version 7.3.12 is affected by a known vulnerability. The following packages have a transitive dependency on dirac and may be impacted: - ctadirac =2.0.0a0, =2.0.31 Source cves: CVE-2024-29905 Source advisory: OSV:GHSA-V6F3-GH5H-MQWX...