CVE-2024-25221

creationtimestamp| type| source ---|---|--- 2024-02-16 23:16:55+00:00| seen| https://t.me/ctinow/186681 2024-03-06 15:46:08+00:00| seen| https://t.me/ctinow/201454...

CVE-2024-25414

creationtimestamp| type| source ---|---|--- 2024-02-16 03:22:04+00:00| seen| https://t.me/ctinow/186094 2024-03-08 08:56:39+00:00| seen| https://t.me/ctinow/203154...

CVE-2024-23479

creationtimestamp| type| source ---|---|--- 2024-02-15 22:31:40+00:00| seen| https://t.me/ctinow/185927 2024-02-19 11:22:18+00:00| seen| https://t.me/truesecator/5427 2024-03-08 08:56:32+00:00| seen| https://t.me/ctinow/203148 2024-07-22 12:54:50+00:00| seen| https://t.me/MrVGunz/1211...

CVE-2023-40057

creationtimestamp| type| source ---|---|--- 2024-02-15 22:31:30+00:00| seen| https://t.me/ctinow/185919 2024-02-19 11:22:18+00:00| seen| https://t.me/truesecator/5427 2024-03-08 08:26:40+00:00| seen| https://t.me/ctinow/203136 2024-07-22 12:54:50+00:00| seen| https://t.me/MrVGunz/1211...

Updated bind packages fix security vulnerabilities

The updated packages fix security vulnerabilities: Parsing large DNS messages may cause excessive CPU load. CVE-2023-4408 Querying RFC 1918 reverse zones may cause an assertion failure when "nxdomain-redirect" is enabled. CVE-2023-5517 Enabling both DNS64 and serve-stale may cause an assertion...

MGASA-2024-0038 Updated bind packages fix security vulnerabilities

The updated packages fix security vulnerabilities: Parsing large DNS messages may cause excessive CPU load. CVE-2023-4408 Querying RFC 1918 reverse zones may cause an assertion failure when "nxdomain-redirect" is enabled. CVE-2023-5517 Enabling both DNS64 and serve-stale may cause an assertion...

DEBIAN-CVE-2023-6937

wolfSSL prior to 5.6.6 did not check that messages in one DTLS record do not span key boundaries. As a result, it was possible to combine DTLS messages using different keys into one DTLS record. The most extreme edge case is that, in DTLS 1.3, it was possible that an unencrypted DTLS 1.3 record...

UBUNTU-CVE-2023-6937

wolfSSL prior to 5.6.6 did not check that messages in one DTLS record do not span key boundaries. As a result, it was possible to combine DTLS messages using different keys into one DTLS record. The most extreme edge case is that, in DTLS 1.3, it was possible that an unencrypted DTLS 1.3 record...

CVE-2023-32462

creationtimestamp| type| source ---|---|--- 2024-02-15 14:26:58+00:00| seen| https://t.me/ctinow/185542 2024-03-06 20:21:50+00:00| seen| https://t.me/ctinow/201752...

CVE-2024-25212

creationtimestamp| type| source ---|---|--- 2024-02-15 13:16:27+00:00| seen| https://t.me/ctinow/185488 2024-03-06 15:16:50+00:00| seen| https://t.me/ctinow/201420...

Out-of-bounds

The implementation of lib9p's handling of RWALK messages was missing a bounds check needed when unpacking the message contents. The missing check means that the receipt of a specially crafted message will cause lib9p to overwrite unrelated memory. The bug can be triggered by a malicious bhyve gue...

CVE-2022-23092 Missing bounds check in 9p message handling

The implementation of lib9p's handling of RWALK messages was missing a bounds check needed when unpacking the message contents. The missing check means that the receipt of a specially crafted message will cause lib9p to overwrite unrelated memory. The bug can be triggered by a malicious bhyve gue...

PT-2024-15131 · Wolfssl +1 · Wolfssl +1

Name of the Vulnerable Software and Affected Versions: wolfSSL versions prior to 5.6.6 Description: The issue arises from the failure to check that messages in one DTLS record do not span key boundaries, allowing the combination of DTLS messages using different keys into one DTLS record. In the...

CVE-2023-40154

creationtimestamp| type| source ---|---|--- 2024-02-14 17:03:13+00:00| seen| https://t.me/ctinow/184818 2024-03-06 14:41:21+00:00| seen| https://t.me/ctinow/201393...

CVE-2023-38561

creationtimestamp| type| source ---|---|--- 2024-02-14 17:03:06+00:00| seen| https://t.me/ctinow/184812 2024-03-06 14:41:24+00:00| seen| https://t.me/ctinow/201396...

CVE-2023-44283

creationtimestamp| type| source ---|---|--- 2024-02-14 16:51:49+00:00| seen| https://t.me/ctinow/184789 2024-03-06 09:06:34+00:00| seen| https://t.me/ctinow/201134...

Moderate: Red Hat Security Advisory: sudo security update

A security update for sudo is now available for Red Hat Enterprise Linux 8 and 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Oracle Linux 8 / 9 : sudo (ELSA-2024-0811)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-0811 advisory. - CVE-2023-28487 sudo: Sudo does not escape control characters in sudoreplay output Resolves: RHEL-21834 - CVE-2023-28486 sudo: Sudo does not escap...

Ubuntu: Security Advisory (USN-6633-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2024-14013 · Unknown · Contiki-Ng

Name of the Vulnerable Software and Affected Versions: Contiki-NG versions prior to 4.9 Description: The issue is caused by insufficient control of the lengths for DIO and DAO messages, particularly when they contain RPL sub-option headers, allowing an attacker to trigger out-of-bounds reads in t...