CBL Mariner 2.0 Security Update: kernel (CVE-2024-42070)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42070 advisory. - In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: fully validate...

BIT-MINIO-2024-36107 Information disclosure in minio

MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. If-Modified-Since and If-Unmodified-Since headers when used with anonymous requests by sending a random object name requests can be used to determine if an object exists or not on the server on a...

KEY INVARIANT RELATED TO THE FIXED_FEE AMOUNT CAN BE BROKEN

Lines of code Vulnerability details Impact The EvolvingProteus.applyFeeByRounding function is used to charge fees by rounding values in directions that are beneficial to the pool. Within this function there is a if condition which verifies that the calculated final amount is not less than the...

Vulnerability in swapGivenInputAmount Function that could Leads to Unintended Token Draining

Lines of code Vulnerability details Impact The vulnerability discovered in the swapGivenInputAmount function has the potential to cause unintended token draining in the smart contract. Due to an incorrect check for a negative result in the code requireresult 0;, the function may allow swaps to...

Intel SGX SDK 安全漏洞

Intel SGX SDK is a set of software development kits based on SGX Intel Software Security Extensions technology from Intel Corporation USA. A security vulnerability exists in Intel SGX SDK versions prior to 2.16.100.1, which stems from an improper conditional checking in the software, and can be...

Privilege Escalation

github.com/hashicorp/vault is vulnerable to privilege escalation. The vulnerability exists due to improper conditional check in handleAliasUpdate function in identitystorealiases.go allowing an authenticated attacker with specific write permissions to gain elevated privileges to perform...

Intel Thunderbolt controller 代码问题漏洞

Intel Thunderbolt controller is a connector standard published by Intel, an American company, that supports both copper and fiber optic media and is intended to be used as a common bus between computers and other devices. A code issue vulnerability exists in the IntelR ThunderboltTM controller,...

libseccomp security, bug fix, and enhancement update

2.4.1-1 - rebase to 2.4.1 2.3.3-4 - spec: make the check phase conditional...