MAL-2024-6382 Malicious code in action-pubsub (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Security Bulletin: IBM App Connect Enterprise Certified Container IntegrationServer and IntegrationRuntime operands that use Google PubSub nodes are vulnerable to arbitrary code execution due to [CVE-2023-36665]

Summary Node.js module protobuf.js is used by IBM App Connect Enterprise Certified Container by the Google PubSub node. IBM App Connect Enterprise Certified Container IntegrationServer and IntegrationRuntime operands that use the Google PubSub node are vulnerable to arbitrary code execution. This...

SUSE CVE-2018-7284

A Buffer Overflow issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Certified Asterisk through 13.18-cert2. When processing a SUBSCRIBE request, the respjsippubsub module stores the accepted formats present in the Accept headers of the request. Th...

CVE-2022-44018

In Softing uaToolkit Embedded before 1.40.1, a malformed PubSub discovery announcement message can cause a NULL pointer dereference or out-of-bounds memory access in the subscriber application...

CVE-2022-44018

In Softing uaToolkit Embedded before 1.40.1, a malformed PubSub discovery announcement message can cause a NULL pointer dereference or out-of-bounds memory access in the subscriber application...

Null pointer dereference

In Softing uaToolkit Embedded before 1.40.1, a malformed PubSub discovery announcement message can cause a NULL pointer dereference or out-of-bounds memory access in the subscriber application...

Softing uaToolkit Embedded 代码问题漏洞

Softing UaToolkit Embedded is used to support the development of embedded Opc Ua applications via client/server and publisher/subscriber communications from Softing Germany. A security vulnerability exists in Softing uaToolkit Embedded prior to version 1.40.1, which stems from an incorrectly...

CVE-2022-44018

CVE-2022-44018 affects Softing uaToolkit Embedded prior to 1.40.1. A malformed PubSub discovery announcement message can trigger a NULL pointer dereference or out-of-bounds memory access in the subscriber application, potentially causing a crash or instability. Affected component is the PubSub di...

CVE-2022-44018

In Softing uaToolkit Embedded before 1.40.1, a malformed PubSub discovery announcement message can cause a NULL pointer dereference or out-of-bounds memory access in the subscriber application...

PT-2023-14423 · Softing · Uatoolkit Embedded

Name of the Vulnerable Software and Affected Versions: Softing uaToolkit Embedded versions prior to 1.40.1 Description: A malformed PubSub discovery announcement message can cause a NULL pointer dereference or out-of-bounds memory access in the subscriber application. Recommendations: For version...

DEBIAN-CVE-2022-42705

A use-after-free in respjsippubsub.c in Sangoma Asterisk 16.28, 18.14, 19.6, and certified/18.9-cert2 may allow a remote authenticated attacker to crash Asterisk denial of service by performing activity on a subscription via a reliable transport at the same time that Asterisk is also performing...

UBUNTU-CVE-2022-42705

A use-after-free in respjsippubsub.c in Sangoma Asterisk 16.28, 18.14, 19.6, and certified/18.9-cert2 may allow a remote authenticated attacker to crash Asterisk denial of service by performing activity on a subscription via a reliable transport at the same time that Asterisk is also performing...

Malicious code in azure-web-pubsub-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 766daa3f07414b1bad6a9340c3da5588cf93101c538a644c3ed06da3c3b978d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1392 Malicious code in azure-web-pubsub-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 766daa3f07414b1bad6a9340c3da5588cf93101c538a644c3ed06da3c3b978d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-web-pubsub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75f389760a7d878693671186ab62e973c2092862d31ba75a2868b1ed1de45dcc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1391 Malicious code in azure-web-pubsub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75f389760a7d878693671186ab62e973c2092862d31ba75a2868b1ed1de45dcc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web-pubsub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a6924666cc2bdffe8b8ff6df8368455e16d1d15b041b35df6f79a32c85cb36f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web-pubsub-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f4cd4429db38d0aa96596eaac3f98571babd0b4832bd1654628befa40955680 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7074 Malicious code in web-pubsub-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f4cd4429db38d0aa96596eaac3f98571babd0b4832bd1654628befa40955680 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7073 Malicious code in web-pubsub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a6924666cc2bdffe8b8ff6df8368455e16d1d15b041b35df6f79a32c85cb36f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...