AZL-29945 CVE-2022-3563 affecting package bluez for versions less than 5.63-4

A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read50controllercapcomplete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument caplen leads to null pointer dereference. It is recommended to apply a patch to f...

UBUNTU-CVE-2022-3563

A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read50controllercapcomplete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument caplen leads to null pointer dereference. It is recommended to apply a patch to f...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a null pointer dereference due to incorrect manipulation of the parameter caplen...

AZL-41786 CVE-2022-2879 affecting package libcontainers-common for versions less than 20240213-2

Reader.Read does not set a limit on the maximum size of file headers. A maliciously crafted archive could cause Read to allocate unbounded amounts of memory, potentially causing resource exhaustion or panics. After fix, Reader.Read limits the maximum size of header blocks to 1 MiB...

CVE-2022-2785 Arbitrary Memory read in BPF Linux Kernel

There exists an arbitrary memory read within the Linux Kernel BPF - Constants provided to fill pointers in structs passed in to bpfsysbpf are not verified and can point anywhere, including memory not owned by BPF. An attacker with CAPBPF can arbitrarily read memory from anywhere on the system. We...

DEBIAN-CVE-2022-36083

JOSE is "JSON Web Almost Everything" - JWA, JWS, JWE, JWT, JWK, JWKS with no dependencies using runtime's native crypto in Node.js, Browser, Cloudflare Workers, Electron, and Deno. The PBKDF2-based JWE key management algorithms expect a JOSE Header Parameter named p2c PBES2 Count, which determine...

CVE-2022-25309

A heap-based buffer overflow flaw was found in the Fribidi package and affects the fribidicaprtltounicode function of the fribidi-char-sets-cap-rtl.c file. This flaw allows an attacker to pass a specially crafted file to the Fribidi application with the '--caprtl' option, leading to a crash and...

Malicious code in eslint-config-cap-it-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61ca18ac9151018c2825df547bec5cd5b5e89b8fa04a66c3df553d1192ed5719 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2792 Malicious code in eslint-config-cap-it-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61ca18ac9151018c2825df547bec5cd5b5e89b8fa04a66c3df553d1192ed5719 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

cap-maquettes.com Cross Site Scripting vulnerability OBB-2793555

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious Package

Overview eslint-config-cap-it-ui is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Malicious Package

Overview cap-products is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Malicious Package

Overview cap-common-pages is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...

Malicious code in cap-brand (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e88b067d0ed133c0bb5bf3dba3b86572c029943abf4988eda35a3cd06c940f22 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1822 Malicious code in cap-brand (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e88b067d0ed133c0bb5bf3dba3b86572c029943abf4988eda35a3cd06c940f22 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

UBUNTU-CVE-2022-1974

A use-after-free flaw was found in the Linux kernel's NFC core functionality due to a race condition between kobject creation and delete. This vulnerability allows a local attacker with CAPNETADMIN privilege to leak kernel information...

new packages: perl-Term-Cap

An update is available for perl-Term-Cap. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

GHSA-479J-JF2P-38PG OpenStack Glance improper validation of the image_size_cap configuration option

OpenStack Image Registry and Delivery Service Glance before 2013.2.4, 2014.x before 2014.1.3, and Juno before Juno-3, when using the V2 API, does not properly enforce the imagesizecap configuration option, which allows remote authenticated users to cause a denial of service disk consumption by...

MAL-2022-1824 Malicious code in cap-products (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6668a5db157ab80fd832c57ce2d16ac376f579efa41da56fc5c07b89ef822cb2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1823 Malicious code in cap-common-pages (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 954caac36d992b5cdce1a85a0430ce34d611445215299bec5e095248a1797338 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...