DEBIAN-CVE-2023-50716

eProsima Fast DDS formerly Fast RTPS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.13.0, 2.12.2, 2.11.3, 2.10.3, and 2.6.7, an invalid DATAFRAG Submessage causes a bad-free error, and the Fast-DDS process can be remotely...

UBUNTU-CVE-2023-50716

eProsima Fast DDS formerly Fast RTPS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.13.0, 2.12.2, 2.11.3, 2.10.3, and 2.6.7, an invalid DATAFRAG Submessage causes a bad-free error, and the Fast-DDS process can be remotely...

Memory corruption

eProsima Fast DDS formerly Fast RTPS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.13.0, 2.12.2, 2.11.3, 2.10.3, and 2.6.7, an invalid DATAFRAG Submessage causes a bad-free error, and the Fast-DDS process can be remotely...

CVE-2023-50716 Invalid DATA_FRAG Submessage causes a bad-free error

eProsima Fast DDS formerly Fast RTPS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.13.0, 2.12.2, 2.11.3, 2.10.3, and 2.6.7, an invalid DATAFRAG Submessage causes a bad-free error, and the Fast-DDS process can be remotely...

CVE-2023-50716 Invalid DATA_FRAG Submessage causes a bad-free error

eProsima Fast DDS formerly Fast RTPS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.13.0, 2.12.2, 2.11.3, 2.10.3, and 2.6.7, an invalid DATAFRAG Submessage causes a bad-free error, and the Fast-DDS process can be remotely...

CVE-2023-50716 Invalid DATA_FRAG Submessage causes a bad-free error

eProsima Fast DDS formerly Fast RTPS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.13.0, 2.12.2, 2.11.3, 2.10.3, and 2.6.7, an invalid DATAFRAG Submessage causes a bad-free error, and the Fast-DDS process can be remotely...

CVE-2023-50716

CVE-2023-50716 affects eProsima Fast DDS (formerly Fast RTPS). Prior to versions 2.13.0, 2.12.2, 2.11.3, 2.10.3, and 2.6.7, an invalid DATA_FRAG Submessage can trigger a bad-free memory release within the Inline_qos/SerializedPayload path of the affected object, allowing the Fast-DDS process to b...

eProsima Fast DDS Security Vulnerability

eProsima Fast DDS is the C++ implementation of eProsima's OMG Object Management Group DDS Data Distribution Service standard. A security vulnerability exists in eProsima Fast DDS Fast RTPS versions prior to 2.13.0, 2.12.2, 2.11.3, 2.10.3, and 2.6.7, which stems from an invalid DATAFRAG sub-messag...

Hardcoded credentials

Maintenance Server, in Cybellum's QCOW air-gapped distribution China Edition, versions 2.15.5 through 2.27, was compiled with a hard-coded private cryptographic key. An attacker with administrative privileges & access to the air-gapped server could potentially use this key to run commands on the...

CVE-2023-42419 Improper Management of Cryptographic Keys in the Maintenance Server in QCOW Air-Gapped Distribution (China Edition)

Maintenance Server, in Cybellum's QCOW air-gapped distribution China Edition, versions 2.15.5 through 2.27, was compiled with a hard-coded private cryptographic key. An attacker with administrative privileges & access to the air-gapped server could potentially use this key to run commands on the...

CVE-2023-42419 Improper Management of Cryptographic Keys in the Maintenance Server in QCOW Air-Gapped Distribution (China Edition)

Maintenance Server, in Cybellum's QCOW air-gapped distribution China Edition, versions 2.15.5 through 2.27, was compiled with a hard-coded private cryptographic key. An attacker with administrative privileges & access to the air-gapped server could potentially use this key to run commands on the...

BIG-IP Resource Allocation DoS

The vulnerabilities of the BIG-IP Access Policy Manager, as well as of other software solutions such as BIG-IP Advanced Firewall Manager, BIG-IP Advanced Web Application Firewall, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Application...

SCP Unlimited Resource Distribution Command Execution

The vulnerability of the SCP utility for access control and remote authentication, as well as software such as BIG-IP Advanced Firewall Manager, BIG-IP Advanced Web Application Firewall, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP...

U.S. Court Orders NSO Group to Hand Over Pegasus Spyware Code to WhatsApp

A U.S. judge has ordered NSO Group to hand over its source code for Pegasus and other remote access trojans to Meta as part of the social media giant's ongoing litigation against the Israeli spyware vendor. The decision marks a major legal victory for Meta, which filed the lawsuit in October 2019...

PikaBot malware on the rise: What organizations need to know

A new type of malware is being used by ransomware gangs in their attacks, and its name is PikaBot. A relatively new trojan that emerged in early 2023, PikaBot is the apparent successor to the infamous QakBot QBot trojan that was shut down in August 2023. QBot was used by many ransomware gangs in...

GitHub Rolls Out Default Secret Scanning Push Protection for Public Repositories

GitHub on Thursday announced that it's enabling secret scanning push protection by default for all pushes to public repositories. "This means that when a supported secret is detected in any push to a public repository, you will have the option to remove the secret from your commits or, if you dee...

com.hazelcast:hazelcast-distribution (>=4.2, <=4.2.8), de.muenchen.oss.digiwf:digiwf-coverage (>=0.18.1, <=1.13.4) +69 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast-all (>=4.2, <=4.2.8)

com.hazelcast:hazelcast-all MAVEN version =4.2, =4.2, =0.18.1, =0.18.1, =4.0.0, =4.0.0, =4.0.0, =0.13.0, =0.13.0, =0.15.0, =0.15.0, =0.16.0, =4.4.108, =1.3.158, =1.3.158, =1.3.158, =1.3.170 and more Source cves: CVE-2023-45859 Source advisory: GHSA-XH6M-7CR7-XX66...

com.hazelcast:hazelcast-distribution (>=4.1-beta-1, <=4.1.10) potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast-all (>=4.1-beta-1, <=4.1.10)

com.hazelcast:hazelcast-all MAVEN version =4.1-beta-1, =4.1-beta-1, =4.1.10 Source cves: CVE-2023-45859 Source advisory: OSV:GHSA-XH6M-7CR7-XX66...

com.hazelcast:hazelcast-distribution (>=4.1-beta-1, <=4.1.10) potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast-all (>=4.1-beta-1, <=4.1.10)

com.hazelcast:hazelcast-all MAVEN version =4.1-beta-1, =4.1-beta-1, =4.1.10 Source cves: CVE-2023-45859 Source advisory: GHSA-XH6M-7CR7-XX66...

com.hazelcast:hazelcast-all (1.8.5), com.hazelcast:hazelcast-client (1.8.5) +10 more potentially affected by CVE-2023-45859 via com.hazelcast:hazelcast (1.8.5)

com.hazelcast:hazelcast MAVEN version 1.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-all 1.8.5 - com.hazelcast:hazelcast-client 1.8.5 - com.hazelcast:hazelcast-hibernate 1.8....