io.undertow:undertow-servlet (1.4.1.final), io.undertow:undertow-websockets-jsr (1.4.1.final) potentially affected by CVE-2024-1459 via io.undertow:undertow-core (1.4.1.final)

io.undertow:undertow-core MAVEN version 1.4.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.4.1.final - io.undertow:undertow-websockets-jsr 1.4.1.final Source cves:...

io.undertow:undertow-servlet (1.4.2.final), io.undertow:undertow-websockets-jsr (1.4.2.final) +2 more potentially affected by CVE-2024-1459 via io.undertow:undertow-core (1.4.2.final)

io.undertow:undertow-core MAVEN version 1.4.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.4.2.final - io.undertow:undertow-websockets-jsr 1.4.2.final -...

io.undertow:undertow-servlet (1.3.28.final), io.undertow:undertow-websockets-jsr (1.3.28.final) +1 more potentially affected by CVE-2024-1459 via io.undertow:undertow-core (1.3.28.final)

io.undertow:undertow-core MAVEN version 1.3.28.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.3.28.final - io.undertow:undertow-websockets-jsr 1.3.28.final -...

io.undertow:undertow-servlet (1.3.26.final), io.undertow:undertow-websockets-jsr (1.3.26.final) +9 more potentially affected by CVE-2024-1459 via io.undertow:undertow-core (1.3.26.final)

io.undertow:undertow-core MAVEN version 1.3.26.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.3.26.final - io.undertow:undertow-websockets-jsr 1.3.26.final -...

io.undertow:undertow-servlet (1.3.30.final), io.undertow:undertow-websockets-jsr (1.3.30.final) +6 more potentially affected by CVE-2024-1459 via io.undertow:undertow-core (1.3.30.final)

io.undertow:undertow-core MAVEN version 1.3.30.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.3.30.final - io.undertow:undertow-websockets-jsr 1.3.30.final -...

io.undertow:undertow-http2-test-suite (1.3.1.final), io.undertow:undertow-servlet (1.3.1.final) +1 more potentially affected by CVE-2024-1459 via io.undertow:undertow-core (1.3.1.final)

io.undertow:undertow-core MAVEN version 1.3.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.1.final - io.undertow:undertow-servlet 1.3.1.final -...

io.undertow:undertow-http2-test-suite (1.2.2.final), io.undertow:undertow-servlet (1.2.2.final) +2 more potentially affected by CVE-2024-1459 via io.undertow:undertow-core (1.2.2.final)

io.undertow:undertow-core MAVEN version 1.2.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.2.2.final - io.undertow:undertow-servlet 1.2.2.final -...

io.undertow:undertow-servlet (1.1.0.cr7), io.undertow:undertow-websockets-jsr (1.1.0.cr7) potentially affected by CVE-2024-1459 via io.undertow:undertow-core (1.1.0.cr7)

io.undertow:undertow-core MAVEN version 1.1.0.cr7 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.0.cr7 - io.undertow:undertow-websockets-jsr 1.1.0.cr7 Source cves:...

com.github.dkubiak:goldfish-collector-maven (1.0), com.github.dkubiak:goldfish-server (1.0) +3 more potentially affected by CVE-2024-1459 via io.undertow:undertow-core (1.1.4.final)

io.undertow:undertow-core MAVEN version 1.1.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.github.dkubiak:goldfish-collector-maven 1.0 - com.github.dkubiak:goldfish-server 1.0 -...

io.undertow:undertow-http2-test-suite (1.3.8.final), io.undertow:undertow-servlet (1.3.8.final) +1 more potentially affected by CVE-2024-1459 via io.undertow:undertow-core (1.3.8.final)

io.undertow:undertow-core MAVEN version 1.3.8.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.8.final - io.undertow:undertow-servlet 1.3.8.final -...

de.svenkubiak:mangooio-mongodb-extension (2.0.1), io.mangoo:mangooio-benchmark (2.2.0) +26 more potentially affected by CVE-2024-1459 via io.undertow:undertow-core (1.3.12.final)

io.undertow:undertow-core MAVEN version 1.3.12.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - de.svenkubiak:mangooio-mongodb-extension 2.0.1 - io.mangoo:mangooio-benchmark 2.2.0 -...

io.undertow:undertow-http2-test-suite (1.3.13.final), io.undertow:undertow-servlet (1.3.13.final) +1 more potentially affected by CVE-2024-1459 via io.undertow:undertow-core (1.3.13.final)

io.undertow:undertow-core MAVEN version 1.3.13.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.13.final - io.undertow:undertow-servlet 1.3.13.final -...

CentOS 8 : thunderbird (CESA-2023:0463)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2023:0463 advisory. - Mozilla: libusrsctp library out of date CVE-2022-46871 - Mozilla: Fullscreen notification bypass CVE-2022-46877 - Mozilla: Arbitrary file read from G...

Npm Trojan Bypasses UAC, Installs AnyDesk with "Oscompatible" Package

A malicious package uploaded to the npm registry has been found deploying a sophisticated remote access trojan on compromised Windows machines. The package, named "oscompatible," was published on January 9, 2024, attracting a total of 380 downloads before it was taken down. oscompatible included ...

This Week in Spring - January 16th, 2024

Hi, Spring fans! Welcome to another installment of This Week in Spring! It's the 16th of January already! We're closer to February than not! I can hardly believe it. As always, we've got a lot to cover so let's dive right into it. the Spring Authorization Server 1.3.0-m1 is now available this is...

Fedora 38 : unrealircd (2023-41f41fbb69)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-41f41fbb69 advisory. UnrealIRCd 6.1.4 This release fixes a crash issue with websockets in UnrealIRCd 6.1.0 - 6.1.3. The full advisory with all details is available at:...

CVE-2023-50784

A buffer overflow in websockets in UnrealIRCd 6.1.0 through 6.1.3 before 6.1.4 allows an unauthenticated remote attacker to crash the server by sending an oversized packet if a websocket port is open. Remote code execution might be possible on some uncommon, older platforms...

CVE-2023-50784

A buffer overflow in websockets in UnrealIRCd 6.1.0 through 6.1.3 before 6.1.4 allows an unauthenticated remote attacker to crash the server by sending an oversized packet if a websocket port is open. Remote code execution might be possible on some uncommon, older platforms...

Buffer overflow

A buffer overflow in websockets in UnrealIRCd 6.1.0 through 6.1.3 before 6.1.4 allows an unauthenticated remote attacker to crash the server by sending an oversized packet if a websocket port is open. Remote code execution might be possible on some uncommon, older platforms...

UnrealIRCd Security Vulnerability

UnrealIRCd is an open source IRC server from UnrealIRCd Open Source. A security vulnerability exists in UnrealIRCd versions 6.1.0 through 6.1.3, which stems from a buffer overflow vulnerability in websockets...