2413 matches found
PT-2022-5320 · Microsoft +1 · Dbghelp.Dll +1
Name of the Vulnerable Software and Affected Versions: Redis affected versions not specified Description: A critical vulnerability was found in a port or fork of Redis, affecting the dbghelp.dll library. The issue is related to an uncontrolled search path, which can be exploited remotely. The...
Risk of reuse of signatures across forks due to lack of chainID validation
Lines of code Vulnerability details Impact In the HolographERC20.sol contract the contract is started with the init function, during which the eip712init function is triggered : contracts/enforcer/HolographERC20.sol: 244: eip712initdomainSeperator, domainVersion; With CACHEDCHAINID = block.chaini...
Upgraded Q -> M from 42 [1666367610163]
Judge has assessed an item in Issue 42 as Medium risk. The relevant finding follows: Permit signature replay across forks Details: GolomTrader.sol defines chainId at contract deployment without reconstructing it for every signature. However, as stated in the security considerations section of...
Signature can be reused across forks due to lack of chainid validation
Lines of code Vulnerability details Impact The signature for GraphTokenUpgradeable.permit won't be resilient to chainsplits. In the event of a chain fork, the message will be assumed valid of both chains and this could allow replays attacks across forks. Proof of Concept The chainid for the...
EulerOS Virtualization 3.0.6.6 : git (EulerOS-SA-2022-2500)
According to the versions of the git packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Git for Windows is a fork of Git containing Windows-specific patches. This vulnerability affects users working on multi-user machine...
GSD-2022-1006081 s390: fix double free of GS and RI CBs on fork() failure
s390: fix double free of GS and RI CBs on fork failure This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.257 by commit...
GSD-2022-1005937 s390: fix double free of GS and RI CBs on fork() failure
s390: fix double free of GS and RI CBs on fork failure This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.212 by commit...
GSD-2022-1005740 s390: fix double free of GS and RI CBs on fork() failure
s390: fix double free of GS and RI CBs on fork failure This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.140 by commit...
PT-2022-34195
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.212 Description The issue concerns a double free of GS and RI CBs on fork failure. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...
PT-2022-34339
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.15 through 4.19.256 Description The issue is related to a double free of GS and RI CBs on fork failure. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 4.15...
PT-2022-33998
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.15 through 5.10.139 Description The issue concerns a double free of GS and RI CBs on fork failure. It was introduced in version 4.15 and fixed in version 5.10.140. The actual impact and attack plausibility have not yet...
GSD-2022-1005435 s390: fix double free of GS and RI CBs on fork() failure
s390: fix double free of GS and RI CBs on fork failure This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.64 by commit...
GSD-2022-1005026 s390: fix double free of GS and RI CBs on fork() failure
s390: fix double free of GS and RI CBs on fork failure This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.6 by commit...
PT-2022-33693 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.64 Description: The issue is related to a double free of GS and RI CBs on fork failure. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior ...
PT-2022-33284 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.15 through 5.19.5 Description: The issue concerns a double free of GS and RI CBs on fork failure. It was introduced in version 4.15 and fixed in version 5.19.6. The actual impact and attack plausibility have not yet be...
cargo-travis (>=0.0.10, <=0.0.11), cargo-travis-fork (>=0.0.11, <=0.0.12) potentially affected by unknown CVE via badge (>=0.2.0, <=0.3.0)
badge CARGO version =0.2.0, =0.0.10, =0.0.11, =0.0.12 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0057...
Malicious code in fork-ts-checker-webpack-lugin-alt (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aab6c3138834084628633efb364c3a3cca38b47891a4b52a61499b82b25f6a20 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-3105 Malicious code in fork-ts-checker-webpack-lugin-alt (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aab6c3138834084628633efb364c3a3cca38b47891a4b52a61499b82b25f6a20 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
