Incorrectly Specified Chat Message Destinations

Tgstation.Server.Common is vulnerable to Incorrectly Specified Chat Message Destinations. The vulnerability exists because the library does not properly clear the DMAPI channels cache on TGS detach, which allows an attacker to gain sensitive information by sending malicious messages to configured...

CVE-2023-33198

tgstation-server (DMAPI chat channel cache) can be poisoned on TGS detach/reattach, causing chat messages to be sent to configured IRC/Discord channels until channels are updated or DreamDaemon is restarted. Affected: tgstation-server and DMAPI cache handling. Remediation: upgrade to tgstation-se...

CVE-2023-33198: Incorrectly Specified Destination in a Communication Channel

tgstation-server is a production scale tool for BYOND server management. The DreamMaker API DMAPI chat channel cache can possibly be poisoned by a tgstation-server TGS restart and reattach. This can result in sending chat messages to one of any of the configured IRC or Discord channels for the...

SuSE 10 Security Update : Linux kernel (i386) (ZYPP Patch Number 2097)

This kernel update fixes the following security problems : - A double userspace copy in a SCTP ioctl allows local attackers to overflow a buffer in the kernel, potentially allowing code execution and privilege escalation. 199441. CVE-2006-3745 - Local attackers were able to crash PowerPC systems...