GHSA-GQ2J-CR96-GVQX `MirrorPadGrad` heap out of bounds read

Impact If MirrorPadGrad is given outsize input paddings, TensorFlow will give a heap OOB error. python import tensorflow as tf tf.rawops.MirrorPadGradinput=1, paddings=0x77f00000,0xa000000, mode = 'REFLECT' Patches We have patched the issue in GitHub commit 717ca98d8c3bba348ff62281fdf38dcb5ea1ec9...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read. This is If MirrorPadGrad is given outsize input paddings. Remediation Upgrade tensorflow-lite to version 2.12.0 or higher. References - GitHub Commit - Vulnerable Code Credit: Vul AI...

CVE-2022-41895

TensorFlow is an open source platform for machine learning. If MirrorPadGrad is given outsize input paddings, TensorFlow will give a heap OOB error. We have patched the issue in GitHub commit 717ca98d8c3bba348ff62281fdf38dcb5ea1ec92. The fix will be included in TensorFlow 2.11. We will also...

kernel: dm mirror log: round up region bitmap size to BITS_PER_LONG

In the Linux kernel, the following vulnerability has been resolved: dm mirror log: round up region bitmap size to BITSPERLONG The code in dm-log rounds up bitsetsize to 32 bits. It then uses findnextzerobitle on the allocated region. findnextzerobitle accesses the bitmap using unsigned long...

flatpak: flatpak-builder --mirror-screenshots-url can access files outside the build directory

A path traversal vulnerability was found in Flatpak. This happens when flatpak-builder applies finish-args last in the build. At this point the build directory will have the full access that is specified in the manifest, so running flatpak build against it will gain those permissions...

kernel: dm mirror log: round up region bitmap size to BITS_PER_LONG

In the Linux kernel, the following vulnerability has been resolved: dm mirror log: round up region bitmap size to BITSPERLONG The code in dm-log rounds up bitsetsize to 32 bits. It then uses findnextzerobitle on the allocated region. findnextzerobitle accesses the bitmap using unsigned long...

GSD-2022-1004753 dm mirror log: round up region bitmap size to BITS_PER_LONG

dm mirror log: round up region bitmap size to BITSPERLONG This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.200 by commit...

GSD-2022-1004642 dm mirror log: round up region bitmap size to BITS_PER_LONG

dm mirror log: round up region bitmap size to BITSPERLONG This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.124 by commit...

GSD-2022-1004490 dm mirror log: round up region bitmap size to BITS_PER_LONG

dm mirror log: round up region bitmap size to BITSPERLONG This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.49 by commit...

GSD-2022-1004292 dm mirror log: round up region bitmap size to BITS_PER_LONG

dm mirror log: round up region bitmap size to BITSPERLONG This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.6 by commit...

PT-2022-33015

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.200 Description A potential security issue has been identified in the Linux Kernel, related to the dm mirror log, where the region bitmap size is rounded up to BITS PER LONG. The actual impact and attack...

PT-2022-32752

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.49 Description A potential security issue has been identified in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. The issue is related to the dm mirror log, where the...

PT-2022-32904

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.124 Description The issue is related to the dm mirror log, where the region bitmap size is rounded up to BITS PER LONG. This is an automated ID intended to aid in discovery of potential security...

PT-2022-32554

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.6 Description A potential security issue has been identified in the Linux Kernel, related to the dm mirror log, where the region bitmap size is rounded up to BITS PER LONG. The actual impact and attack...

OESA-2022-1788 flatpak-builder security update

Flatpak-builder is a tool for building flatpaks from sources. Security Fixes: Flatpak is a Linux application sandboxing and distribution framework. A path traversal vulnerability affects versions of Flatpak prior to 1.12.3 and 1.10.6. flatpak-builder applies finish-args last in the build. At this...

Remote Code Execution (RCE)

PyCrowdTangle is vulnerable to remote code execution. An attacker can inject and execute malicious code through the malicious request packages as the library does not properly remove malicious packages from many mirror sites...

Remote Code Execution (RCE)

bin-collection is vulnerable to remote code execution. An attacker can inject and execute malicious code through the malicious request packages as the library does not properly remove malicious packages from many mirror sites...

gis.south-ayrshire.gov.uk Cross Site Scripting vulnerability OBB-2759371

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| gis.south-ayrshire.gov.uk ---|--- Open...

uczelnie.edu.pl Open Redirect vulnerability OBB-2733948

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| uczelnie.edu.pl ---|--- Open Bug Bounty...

Malicious code in github-issue-mirror (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53c17384d1c768408fef8ecd20ce108799e6f4a49d07582146e2be615018530d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...