117 matches found
EulerOS Virtualization 3.0.2.6 : libsepol (EulerOS-SA-2023-1065)
According to the versions of the libsepol packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The CIL compiler in SELinux 3.2 has a use-after-free in cilverifyclassperms called from cilverifyclasspermission and...
Malicious code in webpack-cil (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a60f6914f58bbdb3feffdb94d542f84c310b43a5ad07f7b980f8c3d0a1b47288 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
animation-directive (>=1.0.0 <=1.1.1), lrc-common (=1.1.1) +1 more potentially affected by unknown CVE via webpack-cil (=0.0.1-security)
webpack-cil NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on webpack-cil and may be impacted: - animation-directive =1.0.0, =1.0.0, =1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2022-7100...
MAL-2022-7100 Malicious code in webpack-cil (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a60f6914f58bbdb3feffdb94d542f84c310b43a5ad07f7b980f8c3d0a1b47288 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Huawei EulerOS: Security Advisory for libsepol (EulerOS-SA-2022-1672)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS Virtualization 3.0.2.0 : libsepol (EulerOS-SA-2022-1672)
According to the versions of the libsepol packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The CIL compiler in SELinux 3.2 has a use-after-free in cilverifyclassperms called from cilverifyclasspermission and...
Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : libsepol vulnerabilities (USN-5391-1)
The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5391-1 advisory. Nicolas Iooss discovered that libsepol incorrectly handled memory when handling policies. An attacker could possibly use this iss...
EulerOS Virtualization 2.10.1 : libsepol (EulerOS-SA-2022-1379)
According to the versions of the libsepol package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The CIL compiler in SELinux 3.2 has a use-after-free in cilverifyclassperms called from cilverifyclasspermission and...
EulerOS 2.0 SP9 : libsepol (EulerOS-SA-2022-1309)
According to the versions of the libsepol package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The CIL compiler in SELinux 3.2 has a use-after-free in cilverifyclassperms called from cilverifyclasspermission and cilpreverifyhelper...
Huawei EulerOS: Security Advisory for libsepol (EulerOS-SA-2022-1273)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP5 : libsepol (EulerOS-SA-2022-1273)
According to the versions of the libsepol packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The CIL compiler in SELinux 3.2 has a use-after-free in cilverifyclassperms called from cilverifyclasspermission and cilpreverifyhelper...
EulerOS 2.0 SP10 : libsepol (EulerOS-SA-2022-1245)
According to the versions of the libsepol package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The CIL compiler in SELinux 3.2 has a use-after-free in cilverifyclassperms called from cilverifyclasspermission and cilpreverifyhelper...
EulerOS 2.0 SP10 : libsepol (EulerOS-SA-2022-1257)
According to the versions of the libsepol package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The CIL compiler in SELinux 3.2 has a use-after-free in cilverifyclassperms called from cilverifyclasspermission and cilpreverifyhelper...
Huawei EulerOS: Security Advisory for libsepol (EulerOS-SA-2022-1174)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP3 : libsepol (EulerOS-SA-2022-1174)
According to the versions of the libsepol packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The CIL compiler in SELinux 3.2 has a use-after-free in cilverifyclassperms called from cilverifyclasspermission and cilpreverifyhelper...
Denial Of Service (DoS)
libsepol is vulnerable to denial of service. The CIL compiler in SELinux has a heap-based buffer over-read in ebitmapmatchany called indirectly from cilcheckneverallow. This occurs because there is sometimes a lack of checks for invalid statements in an optional block...
Denial Of Service (DoS)
libsepol is vulnerable to denial of service. The CIL compiler in SELinux 3.2 has a use-after-free in cilverifyclassperms called from verifymappermclassperms and hashtabmap...
libsepol security update
2.9-3 - cil: Fix out-of-bound read of file context pattern ending with '' - cil: Destroy classperms list when resetting classpermission 1983517 - cil: Destroy classperm list when resetting map perms 1983521 - cil: cilresetclasspermsset should not reset classpermission 1983525 - cil: Set class...
