688 matches found
CVE-2021-32773
Racket is a general-purpose programming language and an ecosystem for language-oriented programming. In versions prior to 8.2, code evaluated using the Racket sandbox could cause system modules to incorrectly use attacker-created modules instead of their intended dependencies. This could allow...
DEBIAN-CVE-2021-32773
Racket is a general-purpose programming language and an ecosystem for language-oriented programming. In versions prior to 8.2, code evaluated using the Racket sandbox could cause system modules to incorrectly use attacker-created modules instead of their intended dependencies. This could allow...
CVE-2021-32773
Racket is a general-purpose programming language and an ecosystem for language-oriented programming. In versions prior to 8.2, code evaluated using the Racket sandbox could cause system modules to incorrectly use attacker-created modules instead of their intended dependencies. This could allow...
Design/Logic Flaw
Racket is a general-purpose programming language and an ecosystem for language-oriented programming. In versions prior to 8.2, code evaluated using the Racket sandbox could cause system modules to incorrectly use attacker-created modules instead of their intended dependencies. This could allow...
UBUNTU-CVE-2021-32773
Racket is a general-purpose programming language and an ecosystem for language-oriented programming. In versions prior to 8.2, code evaluated using the Racket sandbox could cause system modules to incorrectly use attacker-created modules instead of their intended dependencies. This could allow...
CVE-2021-32773
Racket is a general-purpose programming language and an ecosystem for language-oriented programming. In versions prior to 8.2, code evaluated using the Racket sandbox could cause system modules to incorrectly use attacker-created modules instead of their intended dependencies. This could allow...
CVE-2021-32773
Racket is a general-purpose programming language and an ecosystem for language-oriented programming. In versions prior to 8.2, code evaluated using the Racket sandbox could cause system modules to incorrectly use attacker-created modules instead of their intended dependencies. This could allow...
Racket Access Control Error Vulnerability
Racket is an open source general-purpose programming language and an ecosystem for language-oriented programming.An access control error vulnerability exists in Racket versions prior to 8.2, which stems from the fact that code evaluated using the Racket sandbox may cause system modules to...
[ASA-202107-39] racket: sandbox escape
Arch Linux Security Advisory ASA-202107-39 ========================================== Severity: Medium Date : 2021-07-20 CVE-ID : CVE-2021-32773 Package : racket Type : sandbox escape Remote : Yes Link : https://security.archlinux.org/AVG-2175 Summary ======= The package racket before version 8.2...
CVE-2021-32773 Confused deputy attack in sandbox module resolution
Racket is a general-purpose programming language and an ecosystem for language-oriented programming. In versions prior to 8.2, code evaluated using the Racket sandbox could cause system modules to incorrectly use attacker-created modules instead of their intended dependencies. This could allow...
CVE-2021-32773
Racket is a general-purpose programming language and an ecosystem for language-oriented programming. In versions prior to 8.2, code evaluated using the Racket sandbox could cause system modules to incorrectly use attacker-created modules instead of their intended dependencies. This could allow...
CVE-2021-32773
CVE-2021-32773 affects the Racket sandbox prior to version 8.2. In those versions, code evaluated in the sandbox could cause system modules to erroneously use attacker-created modules instead of their intended dependencies, allowing attackers to control system functions and access restricted faci...
CVE-2021-32773
Racket is a general-purpose programming language and an ecosystem for language-oriented programming. In versions prior to 8.2, code evaluated using the Racket sandbox could cause system modules to incorrectly use attacker-created modules instead of their intended dependencies. This could allow...
CVE-2021-32773: Unintended Proxy or Intermediary
Racket is a general-purpose programming language and an ecosystem for language-oriented programming. In versions prior to 8.2, code evaluated using the Racket sandbox could cause system modules to incorrectly use attacker-created modules instead of their intended dependencies. This could allow...
PT-2021-6526
Name of the Vulnerable Software and Affected Versions Racket versions prior to 8.2 Description The issue concerns code evaluated using the Racket sandbox, which could cause system modules to incorrectly use attacker-created modules instead of their intended dependencies. This could allow system...
Racket security vulnerabilities
Racket is an open source general-purpose programming language and an ecosystem for language-oriented programming.An access control error vulnerability exists in Racket versions prior to 8.2, which stems from the fact that code evaluated using the Racket sandbox may cause system modules to...
azureml-automl-core (>=1.0.23, <=1.0.33), kassandra (0.0.1) +3 more potentially affected by CVE-2021-29619 via tensorflow (1.11.0)
tensorflow PYPI version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - azureml-automl-core =1.0.23, =2.0.2, =0.3.4, =0.6.2, =0.6.5 Source cves: CVE-2021-29619 Source advisory: OSV:GHSA-WVJW-P9F5-VQ28...
azureml-automl-core (>=1.0.23, <=1.0.33), kassandra (0.0.1) +3 more potentially affected by CVE-2021-29618 via tensorflow (1.11.0)
tensorflow PYPI version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - azureml-automl-core =1.0.23, =2.0.2, =0.3.4, =0.6.2, =0.6.5 Source cves: CVE-2021-29618 Source advisory: OSV:GHSA-XQFJ-CR6Q-PC8W...
azureml-automl-core (>=1.0.23, <=1.0.33), kassandra (0.0.1) +3 more potentially affected by CVE-2021-29617 via tensorflow (1.11.0)
tensorflow PYPI version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - azureml-automl-core =1.0.23, =2.0.2, =0.3.4, =0.6.2, =0.6.5 Source cves: CVE-2021-29617 Source advisory: OSV:GHSA-MMQ6-Q8R3-48FM...
azureml-automl-core (>=1.0.23, <=1.0.33), kassandra (0.0.1) +3 more potentially affected by CVE-2021-29616 via tensorflow (1.11.0)
tensorflow PYPI version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - azureml-automl-core =1.0.23, =2.0.2, =0.3.4, =0.6.2, =0.6.5 Source cves: CVE-2021-29616 Source advisory: OSV:GHSA-4HVV-7X94-7VQ8...