CVE-2022-34641

CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a and RISCV-Boom commit ad64c5419151e5e886daee7084d8399713b46b4b implements the incorrect exception type when a PMP violation occurs during address translation...

CVE-2022-34641

CVE-2022-34641 affects CVA6 and RISCV-Boom due to an incorrect exception type emitted when a PMP violation occurs during address translation. Affected commits: CVA6 d315ddd0f1be27c1b3f27eb0b8daf471a952299a and RISCV-Boom ad64c5419151e5e886daee7084d8399713b46b4b. Consequence: this mismatch could l...

CVE-2022-34636

CVE-2022-34636 affects CVA6 and RISCV-Boom. The root issue is the use of an incorrect exception type when a PMA violation occurs during address translation. This is documented across multiple sources referencing the same commit set (CVA6 d315ddd0f1be27c1b3f27eb0b8daf471a952299a and RISCV-Boom ad6...

CVE-2022-34636

CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a and RISCV-Boom commit ad64c5419151e5e886daee7084d8399713b46b4b implements the incorrect exception type when a PMA violation occurs during address translation...

PT-2022-22264 · Unknown +1 · Riscv-Boom +1

Name of the Vulnerable Software and Affected Versions: CVA6 version d315ddd0f1be27c1b3f27eb0b8daf471a952299a RISCV-Boom version ad64c5419151e5e886daee7084d8399713b46b4b Description: The issue arises from the implementation of the incorrect exception type when a PMP violation occurs during address...

CVA6 安全漏洞

CVA6 is an application class 6 RISC-V CPU open-sourced by the OpenHW Group in Canada. A security vulnerability exists in CVA6 and RISCV-Boom that stems from a PMA violation during address translation that could result in an incorrect exception type...

CVA6 安全漏洞

CVA6 is an application class 6 RISC-V CPU open-sourced by the OpenHW Group in Canada. A security vulnerability exists in CVA6 and RISCV-Boom that stems from a PMP conflict during address translation that could result in an incorrect exception type...

[SECURITY] Fedora 35 Update: golang-github-nicksnyder-i18n-2-2.1.2-5.fc35

go-i18n is a Go package and a command that helps you translate Go programs in to multiple languages. - Supports pluralized strings for all 200+ languages in the Unicode Common Locale Data Repository CLDR. - Code and tests are automatically generated from CLDR data. - Supports strings with named...

netty: Request smuggling via content-length header

A flaw was found in Netty. There is an issue where the content-length header is not validated correctly if the request uses a single Http2HeaderFrame with the endstream set to true. This flaw leads to request smuggling if the request is proxied to a remote peer and translated to HTTP/1.1. The...

Malicious code in eslint-plugin-translation-vars (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2d3f1b78d30920863239e9f77d1fb8208df96b4cf0e41bf69fd693bba483041 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2828 Malicious code in eslint-plugin-translation-vars (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2d3f1b78d30920863239e9f77d1fb8208df96b4cf0e41bf69fd693bba483041 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

[SECURITY] Fedora 36 Update: golang-github-nicksnyder-i18n-2-2.1.2-5.fc36

go-i18n is a Go package and a command that helps you translate Go programs in to multiple languages. - Supports pluralized strings for all 200+ languages in the Unicode Common Locale Data Repository CLDR. - Code and tests are automatically generated from CLDR data. - Supports strings with named...

Malicious Package

Overview eslint-plugin-translation-vars is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if...

The vulnerability of the Network Address Translation (NAT) technology implementation in Windows operating systems arises from insufficient validation of input data. This allows attackers to trigger service interruptions.

The vulnerability of the Network Address Translation NAT technology implementation in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

OPENSUSE-SU-2022:10031-1 Security update for wdiff

This update for wdiff fixes the following issues: This update ships wdiff. Updated to 1.2.2: Updated Vietnamese, Swedish, Estonian, Chinese traditional, Brazilian Portuguese and Russian translations. Updated gnulib. Used more recent autotools: autoconf 2.69 and automake 1.14.1. updated to 1.2.1:...

Catly-Translate 安全漏洞

Catly-Translate is the easy-to-use Baidu translation method. A security vulnerability exists in Catly-Translate. An attacker exploited the vulnerability to access sensitive user information and digital currency keys, as well as elevated privileges...

OPENSUSE-SU-2022:10020-1 Security update for neomutt

This update for neomutt fixes the following issues: neomutt was updated to 20220429: Bug Fixes Do not crash on an invalid usethreads/sort combination Fix: stuck browser cursor Resolve move the cursor after Index: fix menu size on new mail Don't overlimit LMDB mmap size OpenBSD y/n translation fix...

Security update for neomutt (moderate)

openSUSE Security Update: Security update for neomutt Announcement ID: openSUSE-SU-2022:10020-1 Rating: moderate References: 1184787 1185705 Cross-References: CVE-2021-32055 CVE-2022-1328 CVSS scores: CVE-2021-32055 NVD : 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H CVE-2021-32055 SUSE: 5.3...

Malicious code in tribe-translation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 523d522dc9f1424b019a0e809ffa898a230b2a08b15f85ee68e3f0841dde9ce8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

OPENSUSE-SU-2022:10018-1 Security update for atheme

This update for atheme fixes the following issues: atheme was updated to release 7.2.12: CVE-2022-24976: Fixed General authentication bypass in Atheme IRC services with InspIRCd 3 boo1195989 Track SASL login EID Update to release 7.2.11 Add a preliminary Turkish translation Add HMAC-MD5 verify-on...