Google Chrome Passwords Module Memory Misreference Vulnerability

Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in the Google Chrome Passwords module, which stems from a confusion in the instructions responsible for freeing memory in the Passwords module. An attacker can exploit this vulnerability to...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in the Google Chrome Passwords module, which stems from a confusion in the instructions responsible for freeing memory in the Passwords module. An attacker can exploit this vulnerability to...

cloud-init: randomly generated passwords logged in clear-text to world-readable file

A flaw was found in cloud-init. When a system is configured through cloud-init and the "Set Passwords" module is used with "chpasswd" directive and "RANDOM", the randomly generated password for the relative user is written in clear-text in a file readable by any existing user of the system. The...