Improper Verification of Cryptographic Signature

Overview Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature when the spark.network.crypto.enabled is true and the cipher is not explicitly configured, resulting in the use of AES in CTR mode without authentication. An attacker can compromise the...

Improper Verification of Cryptographic Signature

Overview org.apache.spark:spark-network-common2.12 is an open-source distributed general-purpose cluster-computing framework. Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature when the spark.network.crypto.enabled is true and the cipher is not...

CVE-2025-55039 Apache Spark, Apache Spark: RPC encryption defaults to unauthenticated AES-CTR mode, enabling man-in-the-middle ciphertext modification attacks

This issue affects Apache Spark versions before 3.4.4, 3.5.2 and 4.0.0. Apache Spark versions before 4.0.0, 3.5.2 and 3.4.4 use an insecure default network encryption cipher for RPC communication between nodes. When spark.network.crypto.enabled is set to true it is set to false by default, but...

Linux Distros Unpatched Vulnerability : CVE-2023-53599

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: crypto: afalg - Fix missing initialisation affecting gcm-aes-s390 Fix afalgallocareq to...

EUVD-2014-4830

Malware in sbrugna...

EUVD-2013-5388

Malware in sbrugna...

EUVD-2017-15007

Malware in sbrugna...

EUVD-2018-0296

Malware in sbrugna...

EUVD-2017-0176

Malware in sbrugna...

EUVD-2016-1398

Malware in sbrugna...

EUVD-2013-4407

Malware in sbrugna...

EUVD-2016-1397

Malware in sbrugna...

EUVD-2020-4212

Malware in sbrugna...

EUVD-2015-4570

Malware in sbrugna...

EUVD-2018-13576

Malware in sbrugna...

EUVD-2017-16797

Malware in sbrugna...

EUVD-2021-19554

Malware in sbrugna...

EUVD-2020-0050

Malware in sbrugna...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986865)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986865 advisory. In the Linux kernel, the following vulnerability has been resolved: mac80211: fix use-after-free in CCMP/GCMP RX When PN checking is done in mac80211, for...

CVE-2023-53599

In the Linux kernel, the following vulnerability has been resolved: crypto: afalg - Fix missing initialisation affecting gcm-aes-s390 Fix afalgallocareq to initialise areq-firstrsgl.sgl.sgt.sgl to point to the scatterlist array in areq-firstrsgl.sgl.sgl. Without this, the gcm-aes-s390 driver will...