MAL-2022-3844 Malicious code in init-epic-link-multiselect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3034c2a4a413d05090716b1944806f291ac0dc48a86d8650c67cf39f882b37a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dwux-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea06200de20a84bdc45f7e30e9871492ee0e01d0ccacc205059caed1c6976c74 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2630 Malicious code in dwux-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea06200de20a84bdc45f7e30e9871492ee0e01d0ccacc205059caed1c6976c74 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-34000

libjxl 0.6.1 has an assertion failure in LowMemoryRenderPipeline::Init in renderpipeline/lowmemoryrenderpipeline.cc...

CVE-2022-34000

CVE-2022-34000 affects the JPEG XL reference implementation libjxl 0.6.1, with an assertion failure in LowMemoryRenderPipeline::Init() located in render_pipeline/low_memory_render_pipeline.cc. The issue is described as a potential denial of service against the libjxl process when processing craft...

CVE-2022-34000

libjxl 0.6.1 has an assertion failure in LowMemoryRenderPipeline::Init in renderpipeline/lowmemoryrenderpipeline.cc...

usrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.

...

UBUNTU-CVE-2022-2085

A NULL pointer dereference vulnerability was found in Ghostscript, which occurs when it tries to render a large number of bits in memory. When allocating a buffer device, it relies on an initdeviceprocs defined for the device that uses it as a prototype that depends upon the number of bits per...

CVE-2022-1975

There is a sleep-in-atomic bug in /net/nfc/netlink.c that allows an attacker to crash the Linux kernel by simulating a nfc device from user-space...

Schneider Electric C-Bus Automation Controller (5500SHAC) 1.10 - Remote Code Execution (RCE)

Exploit Title: Schneider Electric C-Bus Automation Controller 5500SHAC 1.10 - Remote Code Execution RCE Exploit Author: LiquidWorm !/usr/bin/env python3 -- coding: utf-8 -- Schneider Electric C-Bus Automation Controller 5500SHAC 1.10 Remote Root Exploit Vendor: Schneider Electric SE Product web...

kernel: security regression for CVE-2018-13405

A vulnerability was found in the fs/inode.c:inodeinitowner function logic of the LInux kernel that allows local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set, in a scenario where a directory is SGID and belon...

EulerOS 2.0 SP3 : cloud-init (EulerOS-SA-2022-1709)

According to the versions of the cloud-init package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The default cloud-init configuration, in cloud-init 0.6.2 and newer, included 'sshdeletekeys: 0', disabling cloud-init's deletion of ssh host...

AZL-43648 CVE-2022-31651 affecting package sox 14.4.2.0-34

In SoX 14.4.2, there is an assertion failure in rateinit in rate.c in libsox.a...

Huawei EulerOS: Security Advisory for cloud-init (EulerOS-SA-2022-1709)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SoX 输入验证错误漏洞

SoX is a set of audio processing tools. SoX version 14.4.2 contains a denial of service vulnerability that results from an assertion failure in rateinit in rate.c in libsox.a. The vulnerability can be exploited to cause a denial of service. An attacker could exploit this vulnerability to cause a...

cloud-init bug fix update

An update is available for cloud-init. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The cloud-init packages provide a set of init scripts for cloud instances...

ALBA-2022:4697 cloud-init bug fix update

The cloud-init packages provide a set of init scripts for cloud instances. Cloud instances need special scripts to run during initialization to retrieve and install SSH keys, and to let the user run various scripts. Bug Fix: Previously, cloud-init incorrectly handled SSH keys containing \r\n...

cloud-init bug fix update

The cloud-init packages provide a set of init scripts for cloud instances. Cloud instances need special scripts to run during initialization to retrieve and install SSH keys, and to let the user run various scripts. Bug Fix: Previously, cloud-init incorrectly handled SSH keys containing \r\n...

SUSE-SU-2022:1771-1 Security update for openldap2

This update for openldap2 fixes the following issues: - CVE-2022-29155: Fixed SQL injection in back-sql bsc1199240. - Fixed issue with SASL init that crashed slapd at startup under certain conditions bsc1198383...

OESA-2022-1655 freetype security update

FreeType is written in C, designed to be small,efficient, highly customizable, and portable while capable of producing high-quality output glyph images of most vector and bitmap font formats Security Fixes: FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap...