CVE-2023-21549 Windows SMB Witness Service Elevation of Privilege Vulnerability

...

PT-2023-1028 · Microsoft · Windows Smb Witness Service +1

Name of the Vulnerable Software and Affected Versions: Windows SMB Witness Service affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows SMB Witness Service, which can be exploited by a remote attacker to elevate their privileges. Thi...

CVE-2023-21549

Technical details for CVE-2023-21549 are not present in the provided documents. The connected entries do not describe affected products/versions or remediation. Monitor official sources for updates on this CVE.

GO-2022-1098 Denial of service in message decoding in github.com/btcsuite/btcd

Erroneous message decoding can cause denial of service. Improper checking of maximum witness size during node message decoding prevented nodes in Lightning Labs lnd before 0.15.2-beta to sync...

btcd mishandles witness size checking

btcd before 0.23.2, as used in Lightning Labs lnd before 0.15.2-beta and other Bitcoin-related products, mishandles witness size checking. Specific Go Packages Affected github.com/btcsuite/btcd/wire...

GHSA-2CHG-86HQ-7W38 btcd mishandles witness size checking

btcd before 0.23.2, as used in Lightning Labs lnd before 0.15.2-beta and other Bitcoin-related products, mishandles witness size checking. Specific Go Packages Affected github.com/btcsuite/btcd/wire...

CVE-2022-44797

btcd before 0.23.2, as used in Lightning Labs lnd before 0.15.2-beta and other Bitcoin-related products, mishandles witness size checking...

UBUNTU-CVE-2022-44797

btcd before 0.23.2, as used in Lightning Labs lnd before 0.15.2-beta and other Bitcoin-related products, mishandles witness size checking...

CVE-2022-44797

btcd before 0.23.2, as used in Lightning Labs lnd before 0.15.2-beta and other Bitcoin-related products, mishandles witness size checking...

CVE-2022-44797

btcd before 0.23.2, as used in Lightning Labs lnd before 0.15.2-beta and other Bitcoin-related products, mishandles witness size checking...

CVE-2022-44797

CVE-2022-44797 affects btcd before 0.23.2 (used in Lightning Labs lnd before 0.15.2-beta and other Bitcoin products) due to mishandling of witness size checking, enabling high-impact network exploitation. The CVSSv3.1 base score is 9.8 (CRITICAL) with full confidentiality, integrity, and availabi...

CVE-2022-44797

btcd before 0.23.2, as used in Lightning Labs lnd before 0.15.2-beta and other Bitcoin-related products, mishandles witness size checking...

btcd 安全漏洞

btcd is a Bitcoin in Go open source alternative node-wide Bitcoin implementation written in Go golang. A security vulnerability exists in versions prior to btcd 0.23.2, which stems from improper handling of witness size checks...

CVE-2022-44797

btcd before 0.23.2, as used in Lightning Labs lnd before 0.15.2-beta and other Bitcoin-related products, mishandles witness size checking...

PT-2022-27317 · Btcd +1 · Btcd +1

Name of the Vulnerable Software and Affected Versions: btcd versions prior to 0.23.2 lnd versions prior to 0.15.2-beta Description: The issue is related to the mishandling of witness size checking, which can cause denial of service due to erroneous message decoding. Improper checking of maximum...

PT-2022-37284 · Git +1 · Swiftnio

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as Invalid-free. It involves the NIOHTTP1.HTTPDecoder.didFinishHead function and a protocol witness for...

MAL-2022-5009 Malicious code in obyte-witness (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a4debb3661ec42370ef86dee9ee2a1ab55e15aa1dcddd4504a5e88ce9d37eee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in obyte-witness (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a4debb3661ec42370ef86dee9ee2a1ab55e15aa1dcddd4504a5e88ce9d37eee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview obyte-witness is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

HPESBST04258 rev.1 - HPE Nimble Storage and HPE Alletra 6000 Peer Persistence Witness OVA Using Polkit's Pkexec, Local Elevated Privileges

Potential Security Impact: Local: Elevated Privileges SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Alletra 6000 v5.2.1.0, v5.3.x, v6.0.0.0 HPE Nimble Storage Hybrid Flash Arrays v5.2.1.0, v5.3.x, v6.0.0.0 Nimble Storage All Flash Arrays v5.2.1.0, v5.3.x, v6.0.0.0 CVSS Score...