RLSA-2024:8859 Moderate: xmlrpc-c security update

XML-RPC is a remote procedure call RPC protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a simple RPC remote procedure call over the Internet. It converts an RPC into an XML document,...

Malicious code in eth-cmeta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e390d3f621f6795cefcac7ff48cd9734854f2734360b55599683db6ece8b468d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

VMIR 安全漏洞

VMIR is a standalone library written in C by the individual developer Andreas Smas. A security vulnerability exists in VMIR version e8117, which stems from a segmentation violation in the functionprepareparse function...

wac 安全漏洞

wac WebAssembly in C is a minimal WebAssembly interpreter written in C by the individual developer Joel Martin. A security vulnerability exists in version 385e1 of wac, which stems from a heap overflow in the interpret function and could lead to an attacker causing a denial of service via a...

EulerOS 2.0 SP9 : c-ares (EulerOS-SA-2024-2808)

According to the versions of the c-ares package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : c-ares is a C library for asynchronous DNS requests. aresreadline is used to parse local configuration files such as /etc/resolv.conf, /etc/...

EulerOS 2.0 SP10 : c-ares (EulerOS-SA-2024-2900)

According to the versions of the c-ares package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : c-ares is a C library for asynchronous DNS requests.aresreadline is used to parse local configuration files such as /etc/resolv.conf, /etc/...

EulerOS 2.0 SP9 : c-ares (EulerOS-SA-2024-2824)

According to the versions of the c-ares package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : c-ares is a C library for asynchronous DNS requests. aresreadline is used to parse local configuration files such as /etc/resolv.conf, /etc/...

EulerOS 2.0 SP10 : c-ares (EulerOS-SA-2024-2881)

According to the versions of the c-ares package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : c-ares is a C library for asynchronous DNS requests.aresreadline is used to parse local configuration files such as /etc/resolv.conf, /etc/...

wac 安全漏洞

wac WebAssembly in C is a minimal WebAssembly interpreter written in C by the individual developer Joel Martin. A security vulnerability exists in wac version 385e1, which stems from a heap overflow in the loadmodule function and could lead to an attacker causing a denial of service via a special...

VMIR 安全漏洞

VMIR is a standalone library written in C by the individual developer Andreas Smas. A security vulnerability exists in VMIR version e8117, which stems from a segmentation violation in the wasmparseblock function...

VMIR 安全漏洞

VMIR is a standalone library written in C by the individual developer Andreas Smas. A security vulnerability exists in VMIR version e8117, which stems from a heap buffer overflow in the wasmparsesectionfunctions function...

EulerOS 2.0 SP10 : xmlrpc-c (EulerOS-SA-2024-2899)

According to the versions of the xmlrpc-c package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An issue was discovered in libexpat before 2.6.3.xmlparse.c does not reject a negative length for XMLParseBuffer.CVE-2024-45490 An issue was...

VMIR 安全漏洞

VMIR is a standalone library written in C by the individual developer Andreas Smas. A security vulnerability exists in VMIR version e8117, which stems from a segmentation violation in the importfunction function...

wac 安全漏洞

wac WebAssembly in C is a minimal WebAssembly interpreter written in C by the individual developer Joel Martin. A security vulnerability exists in wac version 385e1, which stems from the presence of a heap overflow...

wac 安全漏洞

wac WebAssembly in C is a minimal WebAssembly interpreter written in C by the individual developer Joel Martin. A security vulnerability exists in wac version 385e1, which stems from a heap overflow in the setupcall function and could lead to an attacker causing a denial of service via a speciall...

VMIR 安全漏洞

VMIR is a standalone library written in C by the individual developer Andreas Smas. A security vulnerability exists in VMIR version e8117, which stems from a heap buffer overflow in the wasmcall function...

RockyLinux 8 : xmlrpc-c (RLSA-2024:8859)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:8859 advisory. libexpat: Integer Overflow or Wraparound CVE-2024-45491 Tenable has extracted the preceding description block directly from the RockyLinux security advisory. Note...

EulerOS 2.0 SP10 : xmlrpc-c (EulerOS-SA-2024-2919)

According to the versions of the xmlrpc-c package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An issue was discovered in libexpat before 2.6.3.xmlparse.c does not reject a negative length for XMLParseBuffer.CVE-2024-45490 An issue was...

CVE-2024-50150 usb: typec: altmode should keep reference to parent

In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmode should keep reference to parent The altmode device release refers to its parent device, but without keeping a reference to it. When registering the altmode, get a reference to the parent and put it in the...

Neuron 安全漏洞

Neuron is an Industrial Internet of Things IIoT connectivity server open-sourced by EMQ. Used for modern Big Data and AI/ML technologies to harness the power of Industry 4.0. A security vulnerability exists in Neuron version 2.10.0 and prior versions, which stems from a buffer overflow issue...