9181 matches found
kernel: usb: hub: Guard against accesses to uninitialized BOS descriptors
In the Linux kernel, the following vulnerability has been resolved: usb: hub: Guard against accesses to uninitialized BOS descriptors Many functions in drivers/usb/core/hub.c and drivers/usb/core/hub.h access fields inside udev-bos without checking if it was allocated and initialized. If...
kernel: drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
In the Linux kernel, the following vulnerability has been resolved: drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga For pptable structs that use flexible array sizes, use flexible arrays...
kernel: Linux kernel: ACPICA undefined behavior due to zero offset to null pointer
A flaw was found in ACPICA in the Linux kernel. This vulnerability allows for a denial of service via a null pointer dereference...
bpftool: Fix undefined behavior in qsort(NULL 0 ...)
...
PT-2024-40411 · Unknown · Simd-Json-Derive
Name of the Vulnerable Software and Affected Versions: simd-json-derive versions prior to 0.12.0 Description: The issue arises from an invalid use of MaybeUninit::uninit.assume init in the derive macro of simd-json-derive, leading to undefined behavior. This misuse can cause invalid memory access...
PT-2024-40524 · Unknown · Fast-Float
Name of the Vulnerable Software and Affected Versions: fast-float affected versions not specified Description: The fast-float library contains soundness issues, including undefined behavior when checking input length and functions marked as safe with non-local safety guarantees. The library is al...
MAL-2024-10575 Malicious code in modlog-archive (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3bc2d1d981039b25af543c99dcd5081c70b24b7ee9c3eb7d68b3c96003bd4a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Ymir: new stealthy ransomware in the wild
Introduction In a recent incident response case, we discovered a new and notable ransomware family in active use by the attackers, which we named "Ymir". The artifact has interesting features, including a large set of operations performed in memory with the help of the malloc , memmove and memcmp...
Netscale MPX/SDXr: LOM GUI is not accessible.
Unable to access the GUI of configured LOM IP. CLI access to LOM IP works but does not behave as expected...
CVE-2024-50228
In the Linux kernel, the following vulnerability has been resolved: mm: shmem: fix data-race in shmemgetattr I got the following KCSAN report during syzbot testing: ================================================================== BUG: KCSAN: data-race in genericfillattr / inodesetctimecurrent...
MAL-2024-10563 Malicious code in nfs-server-alpine (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d66c21af0a19ac1a2dafd01239a6a61a590bdc133e53a71bd9527b2a2708d7b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10564 Malicious code in octopus-library (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4f2d9eb61053da88b3c1c9f3f9cda88f3974f897595acd8e1c42ebef0aec126 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10568 Malicious code in poc-lelouch (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5593904da4697f6d80bea8f6926ba9668d25c9ba34ba801115e347ffc19c719c The OpenSSF Package Analysis project identified 'poc-lelouch' @ 1.6.0 npm as malicious. It is considered malicious because: - The package execut...
MAL-2024-10567 Malicious code in plaidreactnativedemo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 891b863e4d747888c84f2d3ea775aef863f28c96649614a6bc0be2d3480318e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10562 Malicious code in mongoose-4 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fce219918a29ca5834b05f314d7600b12af0243a7e6036b1ed553fb0b41d9cc2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10570 Malicious code in spliffy-benchmark (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ead6b661fb169fc63b0a65eb514024ee59694c0b4e6031a27afc765d0089b5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10558 Malicious code in dancer-pipeline (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02d1f4c0f5ff76788a930b3387f90983f8ef4ae8e8b2064c4829e76954feee04 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10566 Malicious code in pixiv-novel-editor (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ab4e5119a339b3970c17507784181c47d0872a8f642804a5d5a1bd4182e381e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10572 Malicious code in xcasset-gen (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55e5f7e5d499d4113f36ddf1be5df2ac0a49176ca22b7b86e106077f936801fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...