PT-2022-35130 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: A potential memory leak was identified in the ext4 fc record regions function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

Remote Code Execution (RCE)

Overview GitPython is a python library used to interact with Git repositories Affected versions of this package are vulnerable to Remote Code Execution RCE due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting...

DEBIAN-CVE-2022-3970

A vulnerability was found in LibTIFF. It has been classified as critical. This affects the function TIFFReadRGBATileExt of the file libtiff/tifgetimage.c. The manipulation leads to integer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and m...

Remote Code Execution (RCE)

Overview simple-git is a light weight interface for running git commands in any node.js application. Affected versions of this package are vulnerable to Remote Code Execution RCE when enabling the ext transport protocol, which makes it exploitable via clone method. This vulnerability exists due t...

DEBIAN-CVE-2022-36191

A heap-buffer-overflow had occurred in function gfisomdoviconfigget of isomedia/avcext.c:2490, as demonstrated by MP4Box. This vulnerability was fixed in commit fef6242...

UBUNTU-CVE-2022-36191

A heap-buffer-overflow had occurred in function gfisomdoviconfigget of isomedia/avcext.c:2490, as demonstrated by MP4Box. This vulnerability was fixed in commit fef6242...

GPAC 缓冲区错误漏洞

GPAC is an open source multimedia framework. A security vulnerability exists in GPAC mp4box 2.1-DEV-revUNKNOWN-master, which stems from a heap buffer overflow in the gfisomdoviconfigget function in its isomedia/avcext.c:2490 component...

Malicious code in bfx-ext-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7cee42d2102a5c9632227caed184c8ba5ceea65b52d16e1aa97946f3eb2120a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1513 Malicious code in bfx-ext-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7cee42d2102a5c9632227caed184c8ba5ceea65b52d16e1aa97946f3eb2120a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ext-simplexml (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58542cc810bb96b49484d8217777c642feb4bc4333a4a74ac00bd27b1c2f142c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2936 Malicious code in ext-simplexml (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58542cc810bb96b49484d8217777c642feb4bc4333a4a74ac00bd27b1c2f142c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ext-iconv-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b63dde7a4e97e11bb43a289c4d48ca88faad03ce74893426b52faf2019aabb50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ext-iconv-test-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca41764ebc9b23bb68e27f052f70923177485babd831d5ea16ba901143a16926 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ext-iconv-test1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97a9b9fa77d6e5d0e247b49cdc5c3f1285d8e834909891a98d1c123d28b1817f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2933 Malicious code in ext-iconv-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b63dde7a4e97e11bb43a289c4d48ca88faad03ce74893426b52faf2019aabb50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2935 Malicious code in ext-iconv-test1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97a9b9fa77d6e5d0e247b49cdc5c3f1285d8e834909891a98d1c123d28b1817f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2934 Malicious code in ext-iconv-test-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca41764ebc9b23bb68e27f052f70923177485babd831d5ea16ba901143a16926 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

@luminati-io/luminati-proxy (>=1.161.831, <=1.172.46), posix-ext (>=0.0.0-development, <=0.4.0) +1 more potentially affected by CVE-2022-21211 via posix (>=4.1.1, <=4.1.2)

posix NPM version =4.1.1, =1.161.831, =0.0.0-development, =0.0.20, =0.0.21 Source cves: CVE-2022-21211 Source advisory: OSV:GHSA-27MX-GCHC-6XJP...

GHSA-CHM8-WP3H-F4M3 Jenkins jira-ext Plugin stores credentials unencrypted

Jenkins jira-ext Plugin 0.8 and earlier stored credentials unencrypted in its global configuration file hudson.plugins.jira.JiraProjectProperty.xml on the Jenkins master. These credentials could be viewed by users with access to the Jenkins master file system. jira-ext Plugin version 0.9 stores...

Jenkins jira-ext Plugin stores credentials unencrypted

Jenkins jira-ext Plugin 0.8 and earlier stored credentials unencrypted in its global configuration file hudson.plugins.jira.JiraProjectProperty.xml on the Jenkins master. These credentials could be viewed by users with access to the Jenkins master file system. jira-ext Plugin version 0.9 stores...