amplo (>=0.9.0 <=0.10.1), apache-airflow-backport-providers-microsoft-azure (>=2020.5.20rc1 <=2020.11.23rc1) +49 more potentially affected by CVE-2022-30187 via azure-storage-blob (>=0.37.0 <=12.12.0)

azure-storage-blob PYPI version =0.37.0, =0.9.0, =2020.5.20rc1, =1.0.0b1, =1.0.0b1, =0.21.2111.177147b1, =0.2.7, =1.0.72.1, =1.37.0, =0.0.1, =1.0.0, =0.3.8, =0.6.3, =0.16.0, =0.21.1rc2 and more Source cves: CVE-2022-30187 Source advisory: OSV:GHSA-64X4-9HC6-R2H6...

Microsoft: CBC Padding Oracle in Azure Blob Storage Encryption Library

Summary The Azure Storage Encryption library in Java and other languages is vulnerable to a CBC Padding Oracle attack, similar to CVE-2020-8911. The library is not vulnerable to the equivalent of CVE-2020-8912, but only because it currently only supports AES-CBC as encryption mode. Severity...

GHSA-64X4-9HC6-R2H6 Microsoft: CBC Padding Oracle in Azure Blob Storage Encryption Library

Summary The Azure Storage Encryption library in Java and other languages is vulnerable to a CBC Padding Oracle attack, similar to CVE-2020-8911. The library is not vulnerable to the equivalent of CVE-2020-8912, but only because it currently only supports AES-CBC as encryption mode. Severity...

MAL-2022-1378 Malicious code in azure-storage-blob-changefeed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c82d9678e620a731040f4e69c1e04932c1484859155e94875d9e5d5a96fff1e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-storage-blob (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94b5ebb48afe8466af23879ea49942310d63823078c7b8127bbe94867ec42b15 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1377 Malicious code in azure-storage-blob (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94b5ebb48afe8466af23879ea49942310d63823078c7b8127bbe94867ec42b15 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in perf-storage-blob-track-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 567e0f79387c321ef5292bc42ca46151d74d37f8f9a468ccbb20d3a267dceca1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5294 Malicious code in perf-storage-blob-track-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 567e0f79387c321ef5292bc42ca46151d74d37f8f9a468ccbb20d3a267dceca1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in perf-storage-blob (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2f6c7362b392d0583633d3cbfd35be3f01be426651d5331da86d2e95f9e917f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5293 Malicious code in perf-storage-blob (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2f6c7362b392d0583633d3cbfd35be3f01be426651d5331da86d2e95f9e917f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in storage-blob-track-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3607a0554a0463b3991dbaa481801aa5e3519da54506a5967664c934d0d6836 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-112 Malicious code in @azure-tests/perf-storage-blob-track-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0724245e727790fb75c31579601a9d00160e01fd720d1dae58dab67537157970 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-111 Malicious code in @azure-tests/perf-storage-blob (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98c435c2b1738c33dab5842fd1b25457f25c0537f25ae2b5b59ced164335686b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-eventhubs-checkpointstore-blob (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 446f07ebe7277743c5b75edd4e41ddee867b36339feabc5d6040ae83fb8c8ea8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1329 Malicious code in azure-eventhubs-checkpointstore-blob (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 446f07ebe7277743c5b75edd4e41ddee867b36339feabc5d6040ae83fb8c8ea8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eventhubs-checkpointstore-blob (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9babd1468e42173ab131cb6119eb9b4c94b572ad32923d658b73a7c5ca1a35ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2895 Malicious code in eventhubs-checkpointstore-blob (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9babd1468e42173ab131cb6119eb9b4c94b572ad32923d658b73a7c5ca1a35ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in storage-blob-changefeed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5ec10706b700f85078575711f130d2a6f13bfd273978be1dc44bbeecfb13d84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6309 Malicious code in storage-blob-changefeed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5ec10706b700f85078575711f130d2a6f13bfd273978be1dc44bbeecfb13d84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-20183

In hypxcreateblobdmabuf of faceauthhypx.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndro...