RubyGems: Malware in `active-support` gem

This was sent to RubySec: The gem duplicates official activesupport no hyphen code, but adds a compiled extension. The extension attempts to resolve a base64 encoded domain 29faea63.planfhntage.de, downloads a payload, and executes...

BusyBox Integer Overflow Vulnerability

BusyBox is a set of applications containing several linux commands and tools maintained by Ukrainian software developer Denis Vlasenko. An integer overflow vulnerability exists in the DHCP client udhcpc in BusyBox versions prior to 1.25.0. A remote attacker can exploit this vulnerability to cause...

PT-2016-3346

Name of the Vulnerable Software and Affected Versions BusyBox versions prior to 1.25.0 Description The issue is related to an integer overflow in the DHCP client udhcpc of BusyBox, which allows remote attackers to cause a denial of service crash via a malformed RFC1035-encoded domain name. This...