CVE-2024-10345

Affected software: Perforce Helix Core prior to version 2024.2. Vulnerability: unauthenticated remote Denial of Service (DoS) via the shutdown function. Root cause: shutdown feature able to be triggered remotely without authentication, impacting availability. Impact: high impact to system availab...

CVE-2024-10345 Unauthenticated Denial of Service via Shutdown Function

In Helix Core versions prior to 2024.2, an unauthenticated remote Denial of Service DoS via the shutdown function was identified. Reported by Karol Więsek...

CVE-2024-10344: Uncontrolled Resource Consumption

In Helix Core versions prior to 2024.2, an unauthenticated remote Denial of Service DoS via the refuse function was identified. Reported by Karol Więsek...

Perforce Helix Core 资源管理错误漏洞

Perforce Helix Core is a scalable and secure version control system from Perforce, Inc. A resource management error vulnerability exists in versions of Perforce Helix Core prior to 2024.2 that originates from an unauthenticated remote denial of service via the auto-generation feature...

CVE-2024-10345: Uncontrolled Resource Consumption

In Helix Core versions prior to 2024.2, an unauthenticated remote Denial of Service DoS via the shutdown function was identified. Reported by Karol Więsek...

CVE-2024-10314: Uncontrolled Resource Consumption

In Helix Core versions prior to 2024.2, an unauthenticated remote Denial of Service DoS via the auto-generation function was identified. Reported by Karol Więsek...

PT-2024-16204 · Perforce · Helix Core

Name of the Vulnerable Software and Affected Versions: Helix Core versions prior to 2024.2 Description: An unauthenticated remote Denial of Service DoS was identified via the refuse function. This issue was reported by Karol Więsek. Recommendations: For Helix Core versions prior to 2024.2, update...

PT-2024-16181 · Perforce · Helix Core

Name of the Vulnerable Software and Affected Versions: Helix Core versions prior to 2024.2 Description: An unauthenticated remote Denial of Service DoS via the auto-generation function was identified. The issue was reported by Karol Więsek. Recommendations: For Helix Core versions prior to 2024.2...

Perforce Helix Core 资源管理错误漏洞

Perforce Helix Core is a scalable and secure version control system from Perforce, Inc. A resource management error vulnerability exists in versions of Perforce Helix Core prior to 2024.2 that originates from an unauthenticated remote denial of service via a shutdown feature...

Perforce Helix Core 资源管理错误漏洞

Perforce Helix Core is a scalable and secure version control system from Perforce, Inc. A resource management error vulnerability exists in versions of Perforce Helix Core prior to 2024.2 that originates from an unauthenticated remote denial of service via the auto-generation feature...

PT-2024-16205 · Perforce · Helix Core

Name of the Vulnerable Software and Affected Versions: Helix Core versions prior to 2024.2 Description: An unauthenticated remote Denial of Service DoS via the shutdown function was identified. The issue was reported by Karol Więsek. Recommendations: For Helix Core versions prior to 2024.2, updat...

OilRig Exploits Windows Kernel Flaw in Espionage Campaign Targeting UAE and Gulf

The Iranian threat actor known as OilRig has been observed exploiting a now-patched privilege escalation flaw impacting the Windows Kernel as part of a cyber espionage campaign targeting the U.A.E. and the broader Gulf region. "The group utilizes sophisticated tactics that include deploying a...

CVE-2024-8067

In versions of Helix Core prior to 2024.1 Patch 2 2024.1/2655224 a Windows ANSI API Unicode "best fit" argument injection was identified...

Perforce Helix Core 安全漏洞

Perforce Helix Core is a scalable and secure version control system from Perforce. A security vulnerability exists in Perforce Helix Core prior to version 2024.1 Patch 2, which stems from the best fit parameter containing a parameter injection vulnerability...

CVE-2024-8067: Improper Handling of Unicode Encoding

In versions of Helix Core prior to 2024.1 Patch 2 2024.1/2655224 a Windows ANSI API Unicode "best fit" argument injection was identified...

CVE-2024-8067

CVE-2024-8067 affects Perforce Helix Core prior to 2024.1 Patch 2 (2024.1/2655224). The issue is a Windows ANSI API Unicode “best fit” argument injection in Helix Core, caused by the best fit parameter handling. Public sources consistently describe this as a parameter injection vulnerability that...

CVE-2024-8067 Unicode "best fit" argument injection

In versions of Helix Core prior to 2024.1 Patch 2 2024.1/2655224 a Windows ANSI API Unicode "best fit" argument injection was identified...

CVE-2024-8067 Unicode "best fit" argument injection

In versions of Helix Core prior to 2024.1 Patch 2 2024.1/2655224 a Windows ANSI API Unicode "best fit" argument injection was identified...

PT-2024-38783 · Perforce · Helix Core

Name of the Vulnerable Software and Affected Versions: Helix Core versions prior to 2024.1 Patch 2 Description: A Windows ANSI API Unicode "best fit" argument injection issue was identified. Recommendations: For versions prior to 2024.1 Patch 2, update to 2024.1 Patch 2 or later to resolve the...

Iranian Cyber Group OilRig Targets Iraqi Government in Sophisticated Malware Attack

Iraqi government networks have emerged as the target of an "elaborate" cyber attack campaign orchestrated by an Iran state-sponsored threat actor called OilRig. The attacks singled out Iraqi organizations such as the Prime Minister's Office and the Ministry of Foreign Affairs, cybersecurity compa...