UBUNTU-CVE-2024-45004

In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: dcp: fix leak of blob encryption key Trusted keys unseal the key blob on load, but keep the sealed payload in the blob field so that every subsequent read export will simply convert this field to hex and send it to...

CVE-2024-45004

CVE-2024-45004 affects the Linux kernel KEYS: trusted: dcp path. The bug leaks the blob encryption key (BEK) plaintext on export because BEK decryption occurs in-place in the key blob; subsequent reads output the BEK in plain text. The issue arises when importing a DCP-based trusted key and expor...

CVE-2024-45004 KEYS: trusted: dcp: fix leak of blob encryption key

In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: dcp: fix leak of blob encryption key Trusted keys unseal the key blob on load, but keep the sealed payload in the blob field so that every subsequent read export will simply convert this field to hex and send it to...

CVE-2024-45004 KEYS: trusted: dcp: fix leak of blob encryption key

In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: dcp: fix leak of blob encryption key Trusted keys unseal the key blob on load, but keep the sealed payload in the blob field so that every subsequent read export will simply convert this field to hex and send it to...

CVE-2024-45004 KEYS: trusted: dcp: fix leak of blob encryption key

In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: dcp: fix leak of blob encryption key Trusted keys unseal the key blob on load, but keep the sealed payload in the blob field so that every subsequent read export will simply convert this field to hex and send it to...

CVE-2024-45004

In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: dcp: fix leak of blob encryption key Trusted keys unseal the key blob on load, but keep the sealed payload in the blob field so that every subsequent read export will simply convert this field to hex and send it to...

MAL-2024-8809 Malicious code in walletv5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cff4fcd790dbc7787f055e2be040f8484d848c82fd64688f5b2aa4edf6e2b932 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8813 Malicious code in xwuirit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df36d2af53be006f85a47e0a26683a059038c7f0135c497743b6b0c318d7f1b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8768 Malicious code in gswoer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4711da48a5a6e6e6b240bb1221fc83b074973438dcb6d27b5a6d172b8829f5d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8739 Malicious code in anieort (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 027ffa5fb3a536a81f1f8adeda002c165d045deb310cae9a4b9cf590b7603107 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8808 Malicious code in vueoriu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e37d072267b4336c865f9892dd40672ccdaf4f2f336fc2fd304bd97f8eaed7c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8811 Malicious code in xiwoeir (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb1d94db067f6098d6410e1d2a798f278db411f0c831d1a43a6fe74c8bc922df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8781 Malicious code in lioejre (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2210c252fdd314dcf9fb63873b09b4cb94666ac597611b36276f4b2f8d5fb1cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8793 Malicious code in owpirre (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9004cdaff2d36176f75aba90f4b13449b5582bd4ae4eda6a3af3ed375bea236 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8818 Malicious code in zuwortr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9a6fc476831f5d1665908a5e68c190efe201ca54e85255b4572f2fd10ca6c59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8740 Malicious code in asowieo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b2426aa5e61b730fccaddcc53a450fcfb8f7e1ca4dfb450b6bf5848cccef12a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8816 Malicious code in ywpeirt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7bb3df4329eb6ef5da8694013edde70bd0e1a2aaba9c23e5b1cd487f7995899 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8778 Malicious code in jsowuer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 111fb7600e81b5a50f008078826db3ae508544bb41cb3afcc72c3266cb08eab9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8786 Malicious code in msldowr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1deb49453f6e6cb108bcccf73c381e5b3769656cbed465b1353f2759312937ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8817 Malicious code in zuwoirt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70e5c0bb7c2073b9aad16bf6ef85ed41176cc6c85197a2797fa6bb29ff439d8c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...