1039 matches found
CVE-2025-69217 Coturn has unsafe nonce and relay port randomization due to weak random number generation.
coturn is a free open source implementation of TURN and STUN Server. Versions 4.6.2r5 through 4.7.0-r4 have a bad random number generator for nonces and port randomization after refactoring. Additionally, random numbers aren't generated with openssl's RANDbytes but libc's random if it's not runni...
CVE-2025-69217
CVE-2025-69217 pertains to coturn (TURN/STUN server). Affected releases: 4.6.2r5–4.7.0-r4 have a weak RNG for nonces and port randomization due to a refactor, using libc random() instead of OpenSSL RAND_bytes (non-Windows). Attacking with ~50 consecutive unauthenticated nonce requests can reconst...
PT-2025-51134
It was discovered that c-ares incorrectly handled terminating certain queries after a maximum number of attempts. An attacker could possibly use this issue to cause c-ares to crash, resulting in a denial of service. Update Instructions: Run sudo pro fix USN-7925-1 to fix the vulnerability. The...
Malicious code in libc-ubg-aga (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba2220998ace09a52355c3bfe6a1070cbc6c6d580c59ac7b198767e37075aee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-183339 Malicious code in libc-ug-atag (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e45fe92289839e2b295d452a65ae4208dd084b33743c0b7ef06b4b8b9c087240 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Buffer Overflow
Overview Affected versions of this package are vulnerable to Buffer Overflow in the DMS::InternalDecode function. An attacker can hijack the program's control flow by overwriting a return address to point to a libc function ret2libc and execute arbitrary code or cause a crash by providing special...
CLSA-2025-1760542306 glibc: Fix of CVE-2025-0395
CVE-2025-0395: fix buffer underallocation in assert and libcfatal mmap handling...
CLSA-2025-1760460711 glibc: Fix of CVE-2025-0395
CVE-2025-0395: fix buffer underallocation in assert and libcfatal mmap handling...
EUVD-2012-2656
Malware in sbrugna...
EUVD-2011-2160
Malware in sbrugna...
EUVD-2017-7101
Malware in sbrugna...
EUVD-2019-9139
Malware in sbrugna...
EUVD-2019-5988
Malware in sbrugna...
EUVD-2019-5987
Malware in sbrugna...
EUVD-2019-5990
Malware in sbrugna...
EUVD-2019-5992
Malware in sbrugna...
EUVD-2019-5993
Malware in sbrugna...
EUVD-2019-5847
Malware in sbrugna...
EUVD-2002-1982
Malware in sbrugna...
EUVD-2020-21316
Malware in sbrugna...