9417 matches found
Fedora: Security Advisory for rust-vm-memory (FEDORA-2024-f2305d485f)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 38 : firecracker / libkrun / rust-event-manager / rust-kvm-bindings / etc (2024-f2305d485f)
The remote Fedora 38 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-f2305d485f advisory. Update rust-vmm components and their consumers to address CVE-2023-50711 Tenable has extracted the preceding description block directly from the Fedora...
GHSA-747X-5M58-MQ97 svix vulnerable to Authentication Bypass
Versions of the package svix before 1.17.0 are vulnerable to Authentication Bypass due to an issue in the verify function where signatures of different lengths are incorrectly compared. An attacker can bypass signature verification by providing a shorter signature that matches the beginning of th...
svix vulnerable to Authentication Bypass
Versions of the package svix before 1.17.0 are vulnerable to Authentication Bypass due to an issue in the verify function where signatures of different lengths are incorrectly compared. An attacker can bypass signature verification by providing a shorter signature that matches the beginning of th...
CVE-2024-21491
Versions of the package svix before 1.17.0 are vulnerable to Authentication Bypass due to an issue in the verify function where signatures of different lengths are incorrectly compared. An attacker can bypass signature verification by providing a shorter signature that matches the beginning of th...
Authentication flaw
Versions of the package svix before 1.17.0 are vulnerable to Authentication Bypass due to an issue in the verify function where signatures of different lengths are incorrectly compared. An attacker can bypass signature verification by providing a shorter signature that matches the beginning of th...
CVE-2024-21491
Versions of the package svix before 1.17.0 are vulnerable to Authentication Bypass due to an issue in the verify function where signatures of different lengths are incorrectly compared. An attacker can bypass signature verification by providing a shorter signature that matches the beginning of th...
CVE-2024-21491
SVIX before version 1.17.0 is affected by an authentication bypass vulnerability in the Webhook verification logic. The root cause is an incorrect comparison of signatures of different lengths in the verify function, allowing an attacker to bypass signature verification by supplying a shorter sig...
CVE-2024-21491
Versions of the package svix before 1.17.0 are vulnerable to Authentication Bypass due to an issue in the verify function where signatures of different lengths are incorrectly compared. An attacker can bypass signature verification by providing a shorter signature that matches the beginning of th...
Albabat Ransomware Infiltrates via Counter-Strike Cheat Utility
Summary: Albabat ransomware, made its debut in November 2023, emerging as a financially motivated threat crafted in Rust. This ransomware has targeted both corporate entities and individual consumers across diverse geographical regions. Threat Level - Red | Attack Report For a detailed threat...
[SECURITY] Fedora 39 Update: rust-vm-memory-0.14.0-1.fc39
Safe abstractions for accessing the VM physical memory...
[SECURITY] Fedora 39 Update: virtiofsd-1.10.1-1.fc39
Virtio-fs vhost-user device daemon Rust version...
[SECURITY] Fedora 39 Update: rust-virtio-queue-0.11.0-1.fc39
Virtio queue implementation...
[SECURITY] Fedora 39 Update: rust-vhost-0.10.0-2.fc39
A pure rust library for vdpa, vhost and vhost-user...
[SECURITY] Fedora 39 Update: rust-vmm-sys-util-0.12.1-2.fc39
A system utility set...
[SECURITY] Fedora 39 Update: rust-linux-loader-0.11.0-1.fc39
A Linux kernel image loading crate...
[SECURITY] Fedora 39 Update: rust-event-manager-0.4.0-2.fc39
Abstractions for implementing event based systems...
[SECURITY] Fedora 39 Update: rust-versionize-0.2.0-2.fc39
A version tolerant serialization/deserialization framework...