16 matches found
MAL-2026-1280 Malicious code in py-sysbench (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 bcd34dcdc69398d2b97a0890cc550974824096b2844524f868505aa32032f147 Importing the module starts a silent cryptocurrency mining in the background for a hardcoded wallet. --- Category: MALICIOUS - The campaign has clearly malicio...
Malicious code in py-sysbench (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 bcd34dcdc69398d2b97a0890cc550974824096b2844524f868505aa32032f147 Importing the module starts a silent cryptocurrency mining in the background for a hardcoded wallet. --- Category: MALICIOUS - The campaign has clearly malicio...
CVE-2024-25178 affecting package sysbench for versions less than 1.0.20-3
CVE-2024-25178 affecting package sysbench for versions less than 1.0.20-3. A patched version of the package is available...
CVE-2024-25176 affecting package sysbench for versions less than 1.0.20-3
CVE-2024-25176 affecting package sysbench for versions less than 1.0.20-3. A patched version of the package is available...
CBL Mariner 2.0 Security Update: luajit / sysbench (CVE-2024-25178)
The version of luajit / sysbench installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-25178 advisory. - LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an out-of-bounds read in the...
Azure Linux 3.0 Security Update: luajit / sysbench (CVE-2024-25178)
The version of luajit / sysbench installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-25178 advisory. - LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an out-of-bounds read in the...
CBL Mariner 2.0 Security Update: luajit / sysbench (CVE-2024-25176)
The version of luajit / sysbench installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-25176 advisory. - LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240626 have a stack-buffer-overflow in...
Azure Linux 3.0 Security Update: luajit / sysbench (CVE-2024-25176)
The version of luajit / sysbench installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-25176 advisory. - LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240626 have a stack-buffer-overflow in...
CVE-2024-25176 affecting package sysbench for versions less than 1.0.20-6
CVE-2024-25176 affecting package sysbench for versions less than 1.0.20-6. A patched version of the package is available...
CVE-2024-25178 affecting package sysbench for versions less than 1.0.20-6
CVE-2024-25178 affecting package sysbench for versions less than 1.0.20-6. A patched version of the package is available...
AZL-65424 CVE-2024-25178 affecting package sysbench for versions less than 1.0.20-6
LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an out-of-bounds read in the stack-overflow handler in ljstate.c...
AZL-65427 CVE-2024-25176 affecting package sysbench for versions less than 1.0.20-6
LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240626 have a stack-buffer-overflow in ljstrfmtwfnum in ljstrfmtnum.c...
AZL-65394 CVE-2024-25176 affecting package sysbench for versions less than 1.0.20-3
LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240626 have a stack-buffer-overflow in ljstrfmtwfnum in ljstrfmtnum.c...
AZL-65391 CVE-2024-25178 affecting package sysbench for versions less than 1.0.20-3
LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an out-of-bounds read in the stack-overflow handler in ljstate.c...
CVE-2019-19391 affecting package sysbench for versions less than 1.0.20-3
CVE-2019-19391 affecting package sysbench for versions less than 1.0.20-3. A patched version of the package is available...
AZL-41306 CVE-2019-19391 affecting package sysbench for versions less than 1.0.20-3
In LuaJIT through 2.0.5, as used in Moonjit before 2.1.2 and other products, debug.getinfo has a type confusion issue that leads to arbitrary memory write or read operations, because certain cases involving valid stack levels and options are mishandled. NOTE: The LuaJIT project owner states that...