azureml-automl-dnn-nlp (>=1.37.0, <=1.46.1.post1), azureml-automl-dnn-vision (>=1.37.0, <=1.46.1) +31 more potentially affected by CVE-2021-42343 via distributed (2.30.1)

distributed PYPI version 2.30.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - azureml-automl-dnn-nlp =1.37.0, =1.37.0, =1.34.0, =1.37.0, =1.37.0, =0.1.0, =0.9.22.post0, =0.1.0, =0.1.0, =0.1.0a1, =0.0.5, =0.0.5, =0.1...

dask-janelia (0.1.2), fibsem-tools (>=0.1.3, <=0.1.4) potentially affected by CVE-2021-42343 via distributed (2020.12.0)

distributed PYPI version 2020.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dask-janelia 0.1.2 - fibsem-tools =0.1.3, =0.1.4 Source cves: CVE-2021-42343 Source advisory: OSV:PYSEC-2021-871...

azureml-automl-dnn-nlp (>=1.47.0, <=1.48.0.post1), azureml-automl-dnn-vision (>=1.47.0, <=1.48.0) +26 more potentially affected by CVE-2021-42343 via distributed (>=2021.1.1, <=2021.9.1)

distributed PYPI version =2021.1.1, =1.47.0, =1.47.0, =1.47.0, =1.47.0, =1.47.0.post1, =1.33.1, =3.0.0.dev4, =0.19.0a210422, =4.3.0, =2021.8.2.dev2, =0.0.0, =0.3.7, =0.3.17 - gam 1.1.1 and more Source cves: CVE-2021-42343 Source advisory: OSV:PYSEC-2021-871...

PYSEC-2021-872

Withdrawn as duplicate of PYSEC-2021-871. An issue was discovered in the Dask distributed package before 2021.10.0 for Python. Single machine Dask clusters started with dask.distributed.LocalCluster or dask.distributed.Client which defaults to using LocalCluster would mistakenly configure their...

PYSEC-2021-871

An issue was discovered in the Dask distributed package before 2021.10.0 for Python. Single machine Dask clusters started with dask.distributed.LocalCluster or dask.distributed.Client which defaults to using LocalCluster would mistakenly configure their respective Dask workers to listen on extern...

CVE-2021-42343

An issue was discovered in the Dask distributed package before 2021.10.0 for Python. Single machine Dask clusters started with dask.distributed.LocalCluster or dask.distributed.Client which defaults to using LocalCluster would mistakenly configure their respective Dask workers to listen on extern...

CVE-2021-42343

The CVE-2021-42343 entry describes a vulnerability in the Dask distributed package prior to 2021.10.0 for Python. When using a single-machine Dask cluster created via dask.distributed.LocalCluster or dask.distributed.Client, workers could be configured to listen on external interfaces instead of ...

CVE-2021-42343

An issue was discovered in the Dask distributed package before 2021.10.0 for Python. Single machine Dask clusters started with dask.distributed.LocalCluster or dask.distributed.Client which defaults to using LocalCluster would mistakenly configure their respective Dask workers to listen on extern...

autogluon (>=0.0.5, <=0.0.7b17042020), azureml-automl-dnn-nlp (>=1.37.0, <=1.48.0.post1) +74 more potentially affected by CVE-2021-42343 via distributed (>=1.13.0, <=2021.9.1)

distributed PYPI version =1.13.0, =0.0.5, =1.37.0, =1.37.0, =1.34.0, =1.37.0, =1.37.0, =0.1.19008.12a1, =1.33.1, =3.0.0.dev4, =1.1.1.6, =0.1.0, =0.2.1 and more Source cves: CVE-2021-42343 Source advisory: MEND:CVE-2021-42343...

CVE-2021-42343

An issue was discovered in the Dask distributed package before 2021.10.0 for Python. Single machine Dask clusters started with dask.distributed.LocalCluster or dask.distributed.Client which defaults to using LocalCluster would mistakenly configure their respective Dask workers to listen on extern...

Apache Storm code issue vulnerability

Apache Storm is a free and open source distributed real-time computing system. Apache Storm code issue vulnerability. An attacker could exploit the vulnerability to achieve remote code execution...

Apache Storm Command Injection Vulnerability

Apache Storm is a free and open source distributed real-time computing system. A command injection vulnerability exists in Apache Storm's getTopologyHistory service. An attacker can exploit this vulnerability by sending a specially crafted thrift request to the Nimbus server to achieve remote cod...

CVE-2021-42343: Undefined Security Weakness

An issue was discovered in the Dask distributed package before 2021.10.0 for Python. Single machine Dask clusters started with dask.distributed.LocalCluster or dask.distributed.Client which defaults to using LocalCluster would mistakenly configure their respective Dask workers to listen on extern...

Python Dask security vulnerabilities

Python Dask is a flexible parallel computing library for Python. Dask suffers from a security vulnerability that stems from the fact that standalone Dask clusters started as Dask .distributed.LocalCluster or Dask .distributed. client LocalCluster is used by default will incorrectly configure thei...

[SECURITY] Fedora 33 Update: nodejs-14.18.1-1.fc33

Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications that run across distributed devices...

[SECURITY] Fedora 34 Update: nodejs-14.18.1-1.fc34

Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications that run across distributed devices...

Squirrel Engine Bug Could Let Attackers Hack Games and Cloud Services

Researchers have disclosed an out-of-bounds read vulnerability in the Squirrel programming language that can be abused by attackers to break out of the sandbox restrictions and execute arbitrary code within a SquirrelVM, thus giving a malicious actor complete access to the underlying machine...

Apache Traffic Control input validation error vulnerability

Apache Traffic Control is a distributed and scalable content distribution solution from the Apache Foundation. Apache Traffic Control Traffic Ops is vulnerable to an input validation error, which is caused when an authenticated Apache Traffic Control Traffic Ops user with portal-level privileges...

Huawei HarmonyOS security vulnerabilities

Huawei HarmonyOS is an operating system from Huawei, China. A security vulnerability exists in a component of Huawei HarmonyOS, which provides a microkernel-based, full-scenario distributed operating system. An attacker can exploit the vulnerability to cause a WLAN denial of service...

Huawei HarmonyOS security vulnerabilities

Huawei HarmonyOS is an operating system from Huawei of China. A security vulnerability exists in Huawei HarmonyOS, which provides a microkernel-based, fully-scoped distributed operating system. An attacker could exploit this vulnerability to compromise confidentiality...