CVE-2023-36326

Integer Overflow vulnerability in RELIC before commit 34580d840469361ba9b5f001361cad659687b9ab, allows attackers to execute arbitrary code, cause a denial of service, and escalate privileges when calling realloc function in bngrow function...

Rekor's compressed archives can result in OOM conditions

Summary Two vulnerabilities have been found in Rekor types for archive files JARs and APKs, where Rekor would crash due to out of memory conditions caused by reading archive metadata files into memory without checking their sizes first causing a Denial of Service of Rekor. These vulnerabilities...

GHSA-2H5H-59F5-C5X9 Rekor's compressed archives can result in OOM conditions

Summary Two vulnerabilities have been found in Rekor types for archive files JARs and APKs, where Rekor would crash due to out of memory conditions caused by reading archive metadata files into memory without checking their sizes first causing a Denial of Service of Rekor. These vulnerabilities...

PT-2022-36799 · Git +1 · Relic

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow WRITE crash has been reported, involving functions such as dv copy, bn lsh, and cryptofuzz::module::relic bignum::LShift1::Run...

relic:cryptofuzz-relic: Heap-buffer-overflow in dv_copy

Project: https://github.com/relic-toolkit/relic.git Detailed Report: https://oss-fuzz.com/testcase?key=5088370718277632 Project: relic Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-relic Job Type: libfuzzerasanrelic Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

relic:cryptofuzz-relic: Use-of-uninitialized-value in bn_trim

Detailed Report: https://oss-fuzz.com/testcase?key=4554575069970432 Project: relic Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-relic Job Type: libfuzzermsanrelic Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: bntrim bndivdig bnsizestr Sanitizer: memory...

relic:cryptofuzz-relic: Heap-buffer-overflow in dv_rshd

Project: https://github.com/relic-toolkit/relic.git Detailed Report: https://oss-fuzz.com/testcase?key=5128534769401856 Project: relic Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-relic Job Type: libfuzzerasanrelic Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

relic:cryptofuzz-relic: Heap-buffer-overflow in SHA256Result

Project: https://github.com/relic-toolkit/relic.git Detailed Report: https://oss-fuzz.com/testcase?key=5862497144143872 Project: relic Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-relic Job Type: libfuzzerasani386relic Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address...

relic:cryptofuzz-relic: Heap-buffer-overflow in bn_muld_low

Project: https://github.com/relic-toolkit/relic.git Detailed Report: https://oss-fuzz.com/testcase?key=5437823528599552 Project: relic Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-relic Job Type: libfuzzerasani386relic Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address...

The Humble Hub

Over the weekend I organized some old computing equipment. I found this beauty in one of my boxes. It's a Netgear EN104TP hub. I've mentioned this device before, in this blog and my books. This sort of device was the last of the true hubs. In an age where cables seem reserved for data centers or...

Malicious Package

Overview ddc-new-relic is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

MAL-2022-2378 Malicious code in ddc-new-relic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 724b8e2d9bbce93045922539d67f166495a0abac1fe3d410e5cea2ec861e82d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ddc-new-relic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 724b8e2d9bbce93045922539d67f166495a0abac1fe3d410e5cea2ec861e82d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in ddc-new-relic

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

GHSA-2RVX-CVFC-MCP2 New Relic .NET Agent contains SQL Injection

New Relic .NET Agent before 6.3.123.0 adds SQL injection flaws to safe applications via vectors involving failure to escape quotes during use of the Slow Queries feature, as demonstrated by a mishandled quote in a VALUES clause of an INSERT statement, after bypassing a SET SHOWPLANALL ON protecti...

New Relic .NET Agent contains SQL Injection

New Relic .NET Agent before 6.3.123.0 adds SQL injection flaws to safe applications via vectors involving failure to escape quotes during use of the Slow Queries feature, as demonstrated by a mishandled quote in a VALUES clause of an INSERT statement, after bypassing a SET SHOWPLANALL ON protecti...

New Relic: Reflected XSS in VPN Appliance

@mr-hakhak discovered an XSS vulnerability in a VPN appliance. While this appliance is not normally accessed via the browser, the web interface was disabled to prevent future issues...

New Relic: Reflected Cross site Scripting (XSS) on https://one.newrelic.com

The attacker can execute javascript on the victims account just after the authentication process. Steps To Reproduce: 1 Open the url:...

relic:cryptofuzz-relic: Use-of-uninitialized-value in void boost::multiprecision::detail::assign_bits<boost::multiprecision::backends:

Detailed Report: https://oss-fuzz.com/testcase?key=6613664521125888 Project: relic Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-relic Job Type: libfuzzermsanrelic Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: void...

New Relic: Verification Link not expiring leading to Account Takeover.

@bbunnny reported that verification links that are sent out on account creation can be used to access a victim's account until those links have expired. As access to those links requires that an attacker have access to the victim's email, this issue is out of scope for our program...