September 10, 2024—KB5043092 (Security-only update)

None None...

September 10, 2024—KB5043129 (Monthly Rollup)

None None...

CVE-2024-44989 bonding: fix xfrm real_dev null pointer dereference

In the Linux kernel, the following vulnerability has been resolved: bonding: fix xfrm realdev null pointer dereference We shouldn't set realdev to NULL because packets can be in transit and xfrm might call xdodevoffloadok in parallel. All callbacks assume realdev is set. Example trace: kernel: BU...

Malicious code in tpro_pc_yyb_open_platform (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d15d2ff8ee637d306770e71be2fd88a7a4120d1560980b598bc86166f56dd479 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-52906 net/sched: act_mpls: Fix warning during failed attribute validation

In the Linux kernel, the following vulnerability has been resolved: net/sched: actmpls: Fix warning during failed attribute validation The 'TCAMPLSLABEL' attribute is of 'NLAU32' type, but has a validation type of 'NLAVALIDATEFUNCTION'. This is an invalid combination according to the comment abov...

CVE-2024-43878

In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix input error path memory access When there is a misconfiguration of input state slow path KASAN report error. Fix this error. west login: 52.987278 eth1: renamed from veth11 53.078814 eth1: renamed from veth21 53.181355...

CVE-2024-43395

CraftOS-PC 2 is a rewrite of the desktop port of CraftOS from the popular Minecraft mod ComputerCraft using C++ and a modified version of PUC Lua, as well as SDL for drawing. Prior to version 2.8.3, users of CraftOS-PC 2 on Windows can escape the computer folder and access files anywhere without...

CVE-2024-43395

CraftOS-PC 2 on Windows is affected by a local filesystem escape vulnerability where an attacker can bypass the parent-directory check by obfuscating dots (..), allowing access to files outside the computer folder. This issue existed prior to version 2.8.3; a patch was released in 2.8.3. No explo...

CVE-2024-43395 CraftOS-PC 2's improperly sanitizied paths cause filesystem escape (Windows)

CraftOS-PC 2 is a rewrite of the desktop port of CraftOS from the popular Minecraft mod ComputerCraft using C++ and a modified version of PUC Lua, as well as SDL for drawing. Prior to version 2.8.3, users of CraftOS-PC 2 on Windows can escape the computer folder and access files anywhere without...

CVE-2024-43395 CraftOS-PC 2's improperly sanitizied paths cause filesystem escape (Windows)

CraftOS-PC 2 is a rewrite of the desktop port of CraftOS from the popular Minecraft mod ComputerCraft using C++ and a modified version of PUC Lua, as well as SDL for drawing. Prior to version 2.8.3, users of CraftOS-PC 2 on Windows can escape the computer folder and access files anywhere without...

CVE-2024-43395 CraftOS-PC 2's improperly sanitizied paths cause filesystem escape (Windows)

CraftOS-PC 2 is a rewrite of the desktop port of CraftOS from the popular Minecraft mod ComputerCraft using C++ and a modified version of PUC Lua, as well as SDL for drawing. Prior to version 2.8.3, users of CraftOS-PC 2 on Windows can escape the computer folder and access files anywhere without...

CVE-2024-43395

CraftOS-PC 2 is a rewrite of the desktop port of CraftOS from the popular Minecraft mod ComputerCraft using C++ and a modified version of PUC Lua, as well as SDL for drawing. Prior to version 2.8.3, users of CraftOS-PC 2 on Windows can escape the computer folder and access files anywhere without...

PT-2024-30555

Name of the Vulnerable Software and Affected Versions CraftOS-PC 2 versions prior to 2.8.3 Description The issue allows users of CraftOS-PC 2 on Windows to escape the computer folder and access files anywhere without permission or notice by obfuscating ..s to bypass the internal check preventing...

CVE-2024-43395: Improper Limitation of a Pathname to a Restricted Directory

CraftOS-PC 2 is a rewrite of the desktop port of CraftOS from the popular Minecraft mod ComputerCraft using C++ and a modified version of PUC Lua, as well as SDL for drawing. Prior to version 2.8.3, users of CraftOS-PC 2 on Windows can escape the computer folder and access files anywhere without...

CraftOS-PC 2 安全漏洞

CraftOS-PC 2 is a fast, modern, feature-rich ComputerCraft simulator written in C++ by the individual developer JackMacWindows. A security vulnerability exists in CraftOS-PC 2 versions prior to 2.8.3, which stems from the fact that a user can obfuscate ... bypassing an internal check that prevent...

CVE-2024-34163

Improper input validation in firmware for some IntelR NUC may allow a privileged user to potentially enableescalation of privilege via local access...

August 13, 2024—KB5041823 (Security-only update)

None None...

August 13, 2024—KB5041838 (Monthly Rollup)

None None...

July 9, 2024—KB5040497 (Monthly Rollup)

None None...

PT-2024-25725 · Intel · Intel Nuc

Name of the Vulnerable Software and Affected Versions: IntelR NUC affected versions not specified Description: The issue is related to improper input validation in the firmware of some IntelR NUC devices. This may allow a privileged user to potentially enable escalation of privilege via local...