subscription-manager bug fix and enhancement update

An update is available for subscription-manager. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The subscription-manager packages provide programs and libraries...

Malicious code in pancake-info-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0443a608b4568e8dc8b0e39a3b58804dac2a63c570a30f7752c5ca6ba41ce8d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5202 Malicious code in pancake-info-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0443a608b4568e8dc8b0e39a3b58804dac2a63c570a30f7752c5ca6ba41ce8d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2022-4340 · Microsoft · Visual Studio Code

Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: The issue is related to insufficient input validation in the Visual Studio Code editor. This can be exploited by a remote attacker to execute arbitrary code. Recommendations: At...

RHEL 8 : kernel-rt (RHSA-2022:5934)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:5934 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Securi...

CVE-2022-33733

Sensitive information exposure in onCharacteristicRead in Charm by Samsung prior to version 1.2.3 allows attacker to get bluetooth connection information without permission...

xorg-x11-server: out-of-bounds access in ProcXkbSetDeviceInfo request handler of the Xkb extension

A flaw was found in the Xorg-x11-server. The specific flaw exists within the handling of ProcXkbSetDeviceInfo requests. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an allocated buffer. This flaw allows an attacker...

CVE-2022-31612

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape, where a local user with basic capabilities can cause an out-of-bounds read, which may lead to a system crash or a leak of internal kernel information...

AMD CPU Information Disclosure Vulnerability (AMD-SB-1038, Hertzbleed)

The AMD CPU on the remote host might be prone to an information disclosure vulnerability dubbed Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

fmpl.catalog.aspencat.info Cross Site Scripting vulnerability OBB-2823492

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2022-32521

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.8 Description A bug in the virtio net module related to xdp rxq info after suspend/resume has been identified. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-32727

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.51 Description The issue is related to a bug in the virtio net module, specifically with xdp rxq info after suspend/resume. The actual impact and attack plausibility have not yet been proven. Recommendation...

PT-2022-33090

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.250 Description A bug in the virtio net component related to xdp rxq info after suspend/resume has been identified. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-32674

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.12 through v5.15.55 Description A potential issue exists in the btrfs zoned code, specifically related to a leaked bioc in read zone info. The actual impact and attack plausibility have not yet been proven...

PT-2022-33004

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.16 through 5.4.201 Description A bug in the virtio net module related to xdp rxq info after suspend/resume has been identified. The actual impact and attack plausibility have not yet been proven. Recommendations For Lin...

PT-2022-32889

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.127 Description The issue is related to a bug in the virtio net component, specifically with xdp rxq info after suspend/resume. The actual impact and attack plausibility have not yet been proven...

Messaging Apps Tapped as Platform for Cybercriminal Activity

Cybercriminals are tapping the built-in services of popular messaging apps like Telegram and Discord as ready-made platforms to help them perform their nefarious activity in persistent campaigns that threaten users, researchers have found. Threat actors are tapping the multi-feature nature of...

CVE-2022-36910

Jenkins Lucene-Search Plugin 370.v62a5f618cd3a and earlier does not perform a permission check in several HTTP endpoints, allowing attackers with Overall/Read permission to reindex the database and to obtain information about jobs otherwise inaccessible to them...

AZL-10400 CVE-2022-1671 affecting package kernel for versions less than 5.15.67.1-4

A NULL pointer dereference flaw was found in rxrpcpreparses in net/rxrpc/serverkey.c in the Linux kernel. This flaw allows a local attacker to crash the system or leak internal kernel information...

DEBIAN-CVE-2022-1671

A NULL pointer dereference flaw was found in rxrpcpreparses in net/rxrpc/serverkey.c in the Linux kernel. This flaw allows a local attacker to crash the system or leak internal kernel information...