git2 Rust package suppresses ssh host key checking

By default, when accessing an ssh repository ie via an ssh: git repository url the git2 Rust package does not do any host key checking. Additionally, the provided API is not sufficient for a an application to do meaningful checking itself. Impact When connecting to an ssh repository, and when an...

agnes (>=0.3.0, <=0.3.2), agpm_interactions (0.0.1) +407 more potentially affected by unknown CVE via prettytable-rs (>=0.5.2, <=0.9.0)

prettytable-rs CARGO version =0.5.2, =0.3.0, =0.1.0, =0.2.3, =1.0.0, =0.1.0, =0.1.1, =3.1.3, =0.2.0, =0.2.0, =0.5.1, =0.1.0, =0.2.0, =0.3.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-GFGM-CHR3-X6PX...

prettytable-rs: Force cast a &Vec<T> to &[T] may lead to undefined behavior

In function Table::asref, a reference of vector is force cast to slice. There are multiple problems here: 1. To guarantee the size is correct, we have to first do Vec::shrinktofit. The function requires a mutable reference, so we have to force cast from immutable to mutable, which is undefined...

CVE-2022-23507 Light client verification not taking into account chain ID

Tendermint is a high-performance blockchain consensus engine for Byzantine fault tolerant applications. Versions prior to 0.28.0 contain a potential attack via Improper Verification of Cryptographic Signature, affecting anyone using the tendermint-light-client and related packages to perform ligh...

CVE-2022-23507 Light client verification not taking into account chain ID

Tendermint is a high-performance blockchain consensus engine for Byzantine fault tolerant applications. Versions prior to 0.28.0 contain a potential attack via Improper Verification of Cryptographic Signature, affecting anyone using the tendermint-light-client and related packages to perform ligh...

CVE-2022-23507: Improper Verification of Cryptographic Signature

Tendermint is a high-performance blockchain consensus engine for Byzantine fault tolerant applications. Versions prior to 0.28.0 contain a potential attack via Improper Verification of Cryptographic Signature, affecting anyone using the tendermint-light-client and related packages to perform ligh...

CVE-2022-43557

The BD BodyGuard™ infusion pumps specified allow for access through the RS-232 serial port interface. If exploited, threat actors with physical access, specialized equipment and knowledge may be able to configure or disable the pump. No electronic protected health information ePHI, protected heal...

Code injection

The BD BodyGuard™ infusion pumps specified allow for access through the RS-232 serial port interface. If exploited, threat actors with physical access, specialized equipment and knowledge may be able to configure or disable the pump. No electronic protected health information ePHI, protected heal...

CVE-2022-43557 BD BodyGuard™ Pumps – RS-232 Interface Vulnerability

The BD BodyGuard™ infusion pumps specified allow for access through the RS-232 serial port interface. If exploited, threat actors with physical access, specialized equipment and knowledge may be able to configure or disable the pump. No electronic protected health information ePHI, protected heal...

CVE-2022-43557: Missing Protection Mechanism for Alternate Hardware Interface

The BD BodyGuard™ infusion pumps specified allow for access through the RS-232 serial port interface. If exploited, threat actors with physical access, specialized equipment and knowledge may be able to configure or disable the pump. No electronic protected health information ePHI, protected heal...

CVE-2022-43557 BD BodyGuard™ Pumps – RS-232 Interface Vulnerability

The BD BodyGuard™ infusion pumps specified allow for access through the RS-232 serial port interface. If exploited, threat actors with physical access, specialized equipment and knowledge may be able to configure or disable the pump. No electronic protected health information ePHI, protected heal...

CVE-2022-43557

The CVE-2022-43557 issue affects BD BodyGuard infusion pumps via the RS-232 serial port. Documents consistently state that threat actors with physical access and specialized equipment could configure or disable the pump by exploiting the alternate hardware interface. The vulnerability has a CVSSv...

agnes (>=0.3.0, <=0.3.2), agpm_interactions (0.0.1) +407 more potentially affected by unknown CVE via prettytable-rs (>=0.5.2, <=0.9.0)

prettytable-rs CARGO version =0.5.2, =0.3.0, =0.1.0, =0.2.3, =1.0.0, =0.1.0, =0.1.1, =3.1.3, =0.2.0, =0.2.0, =0.5.1, =0.1.0, =0.2.0, =0.3.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0074...

kamadak-exif vulnerable to Infinite loop when parsing PNG files

Impact Reader::readfromcontainer can cause an infinite loop when a crafted PNG file is given. Patches Version 0.5.3 includes the fix. Workarounds No workaround is available. Applications that do not pass files with the PNG signature to Reader::readfromcontainer are not affected. References For mo...

PT-2022-34687 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.213 Description: A potential off-by-one overflow issue was identified in the il4965 rs fill link cmd function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2022-33893 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.61 Description: The issue concerns a potential off-by-one overflow in the il4965 rs fill link cmd function. This function is related to wifi and specifically the iwlegacy 4965 module. The actual impact and...

PT-2022-34139 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.137 Description: The issue is related to a potential off-by-one overflow in the il4965 rs fill link cmd function. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

rs-tiengen.de Cross Site Scripting vulnerability OBB-2799285

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Fedora: Security Advisory for gerbv (FEDORA-2022-4a3ef86baa)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 36 Update: gerbv-2.9.2-1.fc36

Gerber Viewer gerbv is a viewer for Gerber files. Gerber files are generated from PCB CAD system and sent to PCB manufacturers as basis for the manufacturing process. The standard supported by gerbv is RS-274X. gerbv also supports drill files. The format supported are known under names as NC-dril...