Ubuntu: Security Advisory (USN-2443-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2022-31962

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.198 Description The issue is related to the f2fs file system, specifically with the dec valid node count function, which could potentially lead to a security vulnerability. The actual impact and attack...

PT-2022-30896

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue is related to the f2fs file system, specifically with the dec valid node count function, which could potentially lead to a security vulnerability. The actual impact and attack...

PT-2022-31517

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description The issue is related to the f2fs file system, specifically with the dec valid node count function, which could potentially lead to a security vulnerability. The actual impact and attack...

PT-2022-31769

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description The issue is related to the f2fs file system, specifically with the dec valid node count function. It may potentially lead to a security vulnerability, although the actual impact and attack...

PT-2022-31222

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description The issue is related to the f2fs file system, specifically in the dec valid node count function, where a bug could be triggered, potentially leading to security vulnerabilities. The actual...

Malicious code in free-fortnite-skins-dec (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad6b7072a59818a84fd0ffc2db81828c56bcf20e392ed3b5a31d4432c0da1597 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3152 Malicious code in free-fortnite-skins-dec (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad6b7072a59818a84fd0ffc2db81828c56bcf20e392ed3b5a31d4432c0da1597 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-8314

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.17 Description A flaw in the F2FS file system support within the Linux kernel can lead to a denial of service. The issue occurs in the dec valid node count function located in fs/f2fs/f2fs.h. The root cause is...

libsixel resource management error vulnerability (CNVD-2022-31765)

libsixel is a package that provides encoding/decoding implementations for DEC SIXEL graphics and other converter programs. A resource management error vulnerability exists in libsixel version 1.10.0, which stems from the presence of post-release reuse in libsixel/src/dither.c:379. An attacker cou...

libsixel resource management error vulnerability (CNVD-2022-31766)

libsixel is a package that provides encoding/decoding implementations for DEC SIXEL graphics and other converter programs. A resource management error vulnerability exists in libsixel version 1.8.6, which stems from the presence of heap-based post-release reuse in libsixel/src/dither.c:388. An...

libsixel buffer overflow vulnerability (CNVD-2022-31763)

libsixel is a package that provides encoding/decoding implementations for DEC SIXEL graphics and other converter programs. A buffer overflow vulnerability exists in versions of libsixel prior to 1.10, which stems from a buffer overflow in libsixel/src/quant.c:867. A remote attacker could exploit...

Windows/x86 - XOR/DEC/NOT/ROR encrypted / encoded + null free reverse tcp Shellcode (840 bytes)

Windows/x86 - XOR/DEC/NOT/ROR XDNR encrypted / encoded + null free reverse tcp 192.168.201.11:4444 Shellcode 840 bytes / \ / /\ \ \ \ \ \ / | | \ / | | / / \ | / | \ | \ //\ / /| /| / / / / / X0R Cryptor with DEC/N0T/R0R encoder plus random byte insertion Author: @xen0vas / include...

编号撤回

libsixel is a package that provides an encoding/decoding implementation for DEC SIXEL graphics and other converter programs. libsixel v1.8.6 contains a security vulnerability that stems from a double release via the component Sixelchunkdestroy in /root/libsixel/src/chunk.c. No detailed...

vlc:vlc-demux-dec-libfuzzer: Crash in unsigned long fuzzer::ForEachNonZeroByte<unsigned long fuzzer::TracePC::CollectF

Detailed Report: https://oss-fuzz.com/testcase?key=5519051781177344 Project: vlc Fuzzing Engine: libFuzzer Fuzz Target: vlc-demux-dec-libfuzzer Job Type: libfuzzerubsanvlc Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x001d00188018 Crash State: unsigned long...

[SECURITY] Fedora 34 Update: xterm-370-3.fc34

The xterm program is a terminal emulator for the X Window System. It provides DEC VT102 and Tektronix 4014 compatible terminals for programs that can't use the window system directly...

GHSA-7F33-F4F5-XWGW In-band key negotiation issue in AWS S3 Crypto SDK for golang

Summary The golang AWS S3 Crypto SDK is impacted by an issue that can result in loss of confidentiality and message forgery. The attack requires write access to the bucket in question, and that the attacker has access to an endpoint that reveals decryption failures without revealing the plaintext...

Solaris 10 (sparc) : 152643-12

SunOS 5.10: Apache 2.4 Patch. Date this patch was last updated by Sun : Dec/15/21 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include"compat.inc"; if description...

Solaris 10 (x86) : 152644-12

SunOS 5.10x86: Apache 2.4 Patch. Date this patch was last updated by Sun : Dec/15/21 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include"compat.inc"; if description...

vlc:vlc-demux-dec-libfuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5453819813691392 Project: vlc Fuzzing Engine: libFuzzer Fuzz Target: vlc-demux-dec-libfuzzer Job Type: libfuzzerubsanvlc Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x02e1ffa00020 Crash State: NULL Sanitizer: undefined UBSAN...