DEBIAN-CVE-2023-1672

A race condition exists in the Tang server functionality for key generation and key rotation. This flaw results in a small time window where Tang private keys become readable by other processes on the same host...

UBUNTU-CVE-2023-1672

A race condition exists in the Tang server functionality for key generation and key rotation. This flaw results in a small time window where Tang private keys become readable by other processes on the same host...

Race condition

A race condition exists in the Tang server functionality for key generation and key rotation. This flaw results in a small time window where Tang private keys become readable by other processes on the same host...

CVE-2023-1672

A race condition exists in the Tang server functionality for key generation and key rotation. This flaw results in a small time window where Tang private keys become readable by other processes on the same host...

CVE-2023-1672 Race condition exists in the key generation and rotation functionality

A race condition exists in the Tang server functionality for key generation and key rotation. This flaw results in a small time window where Tang private keys become readable by other processes on the same host...

CVE-2023-1672 Race condition exists in the key generation and rotation functionality

A race condition exists in the Tang server functionality for key generation and key rotation. This flaw results in a small time window where Tang private keys become readable by other processes on the same host...

CVE-2023-1672 Race condition exists in the key generation and rotation functionality

A race condition exists in the Tang server functionality for key generation and key rotation. This flaw results in a small time window where Tang private keys become readable by other processes on the same host...

CVE-2023-1672

The CVE-2023-1672 entry describes a race condition in Tang server key generation/rotation that could allow Tang private keys to be read by other processes on the same host. Connected advisories/plugins confirm Tang is affected across multiple Linux distributions (e.g., MiracleLinux tang-14-2.el9,...

CVE-2023-1672

A race condition exists in the Tang server functionality for key generation and key rotation. This flaw results in a small time window where Tang private keys become readable by other processes on the same host...

MAL-2023-568 Malicious code in literal-fs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a6301bbe43b32cb4560eeb8b8cf7525ae5d1e18f851406ee8d72a4dcd0eb494 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pretty-literal-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 364c533f74b84a92914fb0654862ca1daf2f125812bd1fba9f8a8f112c773248 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-426 Malicious code in fca-tpk05 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e686517998e98824fb4c4bde8bf891215eee0f0274b60fe8d5620402ec1953b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Tang 竞争条件问题漏洞

Tang is an open source server from latchset that binds data to the web. Tang suffers from a security vulnerability that stems from the presence of a competitive condition for key generation and key rotation, which can cause other processes on the same host to read the private key within a short...

MAL-2023-393 Malicious code in fca-dongdz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a178ae400bbd58633f7d8005bd8c591a3adbba417117cba116f6f7a6d97d569 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-391 Malicious code in fca-dongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb7e267d4770ed0eb30406e55aaa5ef9f11d1737106e559cfe828f9f6cbe00a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-300 Malicious code in ecorp-secret-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d0bf7826238a624701946507e61cf63dc75ea421397e13d125e2721546c812f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-205 Malicious code in confusion-1337 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d5e0f5fa705444941a3db8182bfc9c7eacb35a3bda7f57cccae5e088eb93404 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-308 Malicious code in eone-gui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 918a850c8ec6b0b41a411a0def932e85ad9aba0a16d8fe866752386a2a59470b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 ESM : Gerbv vulnerabilities (USN-6209-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 ESM host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6209-1 advisory. Claudio Bozzato discovered that Gerbv incorrectly handled certain Gerber files. An attacker could possibly use this...

MAL-2023-544 Malicious code in juno-branding (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7445e9499982b52ca2f99b800d45f9d94599662f468ea58eac6c4a2dc8910ac3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...