SUSE CVE-2017-17439

In Heimdal through 7.4, remote unauthenticated attackers are able to crash the KDC by sending a crafted UDP packet containing empty data fields for client name or realm. The parser would unconditionally dereference NULL pointers in that case, leading to a segmentation fault. This is related to th...

SUSE CVE-2017-18244

The stereoprocessing function in libavcodec/aacps.c in Libav 12.2 allows remote attackers to cause a denial of service out-of-bounds read via a crafted aac file, related to ffpsapply...

SUSE CVE-2018-14461

The LDP parser in tcpdump before 4.9.3 has a buffer over-read in print-ldp.c:ldptlvprint...

SUSE CVE-2018-20217

A Reachable Assertion issue was discovered in the KDC in MIT Kerberos 5 aka krb5 before 1.17. If an attacker can obtain a krbtgt ticket using an older encryption type single-DES, triple-DES, or RC4, the attacker can crash the KDC by making an S4U2Self request...

SUSE CVE-2021-36222

ecverify in kdc/kdcpreauthec.c in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 before 1.18.4 and 1.19.x before 1.19.2 allows remote attackers to cause a NULL pointer dereference and daemon crash. This occurs because a return value is not properly managed in a certain situation...

SUSE CVE-2022-2031

A flaw was found in Samba. The security vulnerability occurs when KDC and the kpasswd service share a single account and set of keys, allowing them to decrypt each other's tickets. A user who has been requested to change their password, can exploit this flaw to obtain and use tickets to other...

SUSE CVE-2022-36004

TensorFlow is an open source platform for machine learning. When tf.random.gamma receives large input shape and rates, it gives a CHECK fail that can trigger a denial of service attack. We have patched the issue in GitHub commit 552bfced6ce4809db5f3ca305f60ff80dd40c5a3. The fix will be included i...

SUSE CVE-2022-44640

Heimdal before 7.7.1 allows remote attackers to execute arbitrary code because of an invalid free in the ASN.1 codec used by the Key Distribution Center KDC...

Security Bulletin: IBM CICS TX Standard is vulnerable to an Open Container Initiative Distribution Specification vulnerability (CVE-2021-41190).

Summary IBM CICS TX Standard is vulnerable to an Open Container Initiative Distribution Specification vulnerability CVE-2021-41190. The fix removes this vulnerability from IBM CICS TX Standard. Vulnerability Details CVEID:CVE-2021-41190 DESCRIPTION: Open Container Initiative Distribution...

Security Bulletin: IBM CICS TX Advanced is vulnerable to an Open Container Initiative Distribution Specification vulnerability (CVE-2021-41190).

Summary IBM CICS TX Advanced is vulnerable is vulnerable to an Open Container Initiative Distribution Specification vulnerability CVE-2021-41190. The fix removes this vulnerability from IBM CICS TX Advanced. Vulnerability Details CVEID:CVE-2021-41190 DESCRIPTION: Open Container Initiative...

SUSE SLES15 Security Update : podman (SUSE-SU-2023:0326-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0326-1 advisory. podman was updated to version 4.3.1: 4.3.1: Bugfixes - Fixed a deadlock between the podman ps and podman container inspect commands...

Malicious code in tkccalendar (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 254bade3f624909b0affad604dd128b2212d3e5debf35db4303405002ec22a5b Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in tkcalnedar (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 3278249ca47f04ae413f07499cdbb1ddb9ea1b2728b08f0dffa7259c44478190 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1610 Malicious code in beautifuloup (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx f40099fdaf3de2f2531a5cc04e7f213371ba9dea34aa70d6ab5fe9c8f8e0b964 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in beautifulsooup (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 20295d15744840724442dda39ce2b027e50b10c1d88c6096693b327ae31b9a9e Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in beeautifulsoup (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 48df79f5920068aec8708f4f064f6290a6b69116ffa7d826630e41b1bdeb5036 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1626 Malicious code in beautifulsuop (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx df1ed5abeb9bc99da5bd07d1c2408f50915eb7cf6e632c80f3fa50bf8e4561c1 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1856 Malicious code in giptython (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx e4f24f0e607f40d62174910c08aebbf2b13c2c3d4c095e0704bbaa819ce37082 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1863 Malicious code in gitpythhon (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 343e63e36143032387f50eb49d722fbee7af34ab9f23ac6f28a482fa194b10e8 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1881 Malicious code in igtpython (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 573c0f3cc220d739194d0751a2eeec89e8ef60f3b53443ee8a4cf02806270ce0 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...