CVE-2021-42574

CVE-2021-42574 - Code generator // Update: 05.11.2021 It's now possible to not only encode, but also decode files. Means that now files containing supported bidi chars can be translated to template files with bidi placeholders LRO, .... Generate malicious files using recently published bidi-attac...

CVE-2021-42574

Trojan Source:Invisible Vulnerabilities - Code generator — In simple terms, the vulnerability is that the code looks different from what it will be when compiled : The attack consists of using embedded control characters in comments and strings to reorder source code characters in a way that...

TrojanSourceFinder

TrojanSourceFinder TrojanSourceFinder ayuda a los desarrolladores a detectar la vulnerabilidad "Trojan Source" en el código fuente. La vulnerabilidad Trojan Source permite a un atacante hacer que el código malicioso parezca inocente. En general, el atacante intenta engañar haciendo pasar su códig...

bidi-guard

bidi-guard Scan code for invisible bidirectional Unicode characters Why This Exists Invisible Unicode bidirectional characters can make source code display differently than it executes. This is CVE-2021-42574 — the Trojan Source attack. An attacker embeds characters that reverse text direction. I...

nullorigin

NullOrigin 🛡️ Universal AI Provenance & Watermark Sanitization Middleware Research artifact — for watermarking robustness evaluation only. 🔬 Research use only NullOrigin is a research artifact. It is published to support academic and independent study of watermarking robustness, and for no other...

unicode-control-characters-action

Unicode Control Characters Action A GitHub Action to find Unicode control characters using the Red Hat diagnostic tool https://access.redhat.com/security/vulnerabilities/RHSB-2021-007 to detect RHSB-2021-007 Trojan source attacks CVE-2021-42574,CVE-2021-42694 Inputs args Required The script...

Rocky Linux 8 [CIQ] Security Update: gcc-toolset-10-annobin / gcc-toolset-10-annobin-debuginfo (crlsa-2021_4592)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20214592 advisory. Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 The following changes were introduced in...

Rocky Linux 8 [CIQ] Security Update: gcc-toolset-10-binutils / gcc-toolset-10-binutils-debuginfo / etc (crlsa-2021_4649)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20214649 advisory. Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 The following changes were introduced in...

Rocky Linux 8 [CIQ] Security Update: annobin / annobin-annocheck / annobin-annocheck-debuginfo / etc (crlsa-2021_4593)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20214593 advisory. Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 The following changes were introduced in...

Rocky Linux 8 [CIQ] Security Update: gcc-toolset-10-gcc / gcc-toolset-10-gcc-c++ / etc (crlsa-2021_4585)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20214585 advisory. Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 The following changes were introduced in gcc ...

MiracleLinux 7 : binutils-2.27-44.base.el7.1 (AXSA:2021-2508:04)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-2508:04 advisory. Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 The following changes were introduced ...

MiracleLinux 8 : gcc-toolset-10-annobin-9.29-1.el8.2, gcc-toolset-10-gcc-10.3.1-1.2.el8 (AXSA:2021-2881:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-2881:01 advisory. Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 The following changes were introduced ...

MiracleLinux 8 : gcc-8.5.0-4.el8 (AXSA:2022-2957:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-2957:01 advisory. Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 The following changes were introduced ...

MiracleLinux 8 : annobin-9.72-1.el8.2 (AXSA:2022-2958:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-2958:01 advisory. Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 The following changes were introduced ...

MiracleLinux 8 : binutils-2.30-108.el8.1 (AXSA:2022-2955:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-2955:01 advisory. Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 The following changes were introduced ...

MiracleLinux 8 : llvm-toolset:rhel8 (AXSA:2022-2984:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-2984:01 advisory. Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 The following changes were introduced ...

MiracleLinux 8 : gcc-toolset-11-annobin-9.85-1.el8.1, gcc-toolset-11-binutils-2.36.1-1.el8.1, gcc-toolset-11-gcc-11.2.1-1.2.el8 (AXSA:2021-2882:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-2882:01 advisory. Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 The following changes were introduced ...

MiracleLinux 8 : gcc-toolset-10-binutils-2.35-8.el8.6 (AXSA:2021-2879:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-2879:01 advisory. Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 The following changes were introduced ...

RHEL 8 : gcc (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - Developer environment: Homoglyph characters can lead to trojan source attack CVE-2021-42694 - The...

RHEL 8 : developer_environment (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - Developer environment: Homoglyph characters can lead to trojan source attack CVE-2021-42694 - An issue wa...