4124 matches found
PT-2025-38328
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null dereference issue was resolved in the Linux kernel related to the /proc/pid/smaps rollup functionality. The issue was introduced by commit 258f669e7e88, which converted the...
SUSE CVE-2023-53333
In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one Eric Dumazet says: nfconntrackdccppacket has an unique: dh = skbheaderpointerskb, dataoff, sizeofdh, &dh; And nothing more is 'pulled' from the...
CVE-2023-53333
In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one Eric Dumazet says: nfconntrackdccppacket has an unique: dh = skbheaderpointerskb, dataoff, sizeofdh, &dh; And nothing more is 'pulled' from the...
CVE-2023-53333
In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one Eric Dumazet says: nfconntrackdccppacket has an unique: dh = skbheaderpointerskb, dataoff, sizeofdh, &dh; And nothing more is 'pulled' from the...
UBUNTU-CVE-2023-53333
In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one Eric Dumazet says: nfconntrackdccppacket has an unique: dh = skbheaderpointerskb, dataoff, sizeofdh, &dh; And nothing more is 'pulled' from the...
CVE-2023-53333 netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one Eric Dumazet says: nfconntrackdccppacket has an unique: dh = skbheaderpointerskb, dataoff, sizeofdh, &dh; And nothing more is 'pulled' from the...
CVE-2023-53333 netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one Eric Dumazet says: nfconntrackdccppacket has an unique: dh = skbheaderpointerskb, dataoff, sizeofdh, &dh; And nothing more is 'pulled' from the...
Malicious code in @teselagen/sequence-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a11d947c98673c88f928f02f1c998436f5b00cafcbb36643500a2d0858b8aba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in @teselagen/sequence-utils
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2025-47279 Malicious code in @teselagen/sequence-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a11d947c98673c88f928f02f1c998436f5b00cafcbb36643500a2d0858b8aba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
@teselagen/bio-parsers (0.4.29-beta.1), @teselagen/ove (>=0.7.30-beta.1, <=0.7.30-beta.2) +1 more potentially affected by unknown CVE via @teselagen/range-utils (>=0.3.14-beta.1, <=0.3.14-beta.3)
@teselagen/range-utils NPM version =0.3.14-beta.1, =0.7.30-beta.1, =0.3.32-beta.2, =0.3.38-beta.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-47276...
EulerOS Virtualization 2.13.1 : nss (EulerOS-SA-2025-2176)
According to the versions of the nss packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : After accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the certificate data could have lead to a crash...
EulerOS 2.0 SP13 : kernel (EulerOS-SA-2025-2144)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : x86/fpu: KVM: Set the base guest FPU uABI size to sizeofstruct kvmxsave.CVE-2022-49557 A cross-privilege Spectre v2 vulnerability allows attackers...
DEBIAN-CVE-2023-53167
In the Linux kernel, the following vulnerability has been resolved: tracing: Fix null pointer dereference in tracingerrlogopen Fix an issue in function 'tracingerrlogopen'. The function doesn't call 'seqopen' if the file is opened only with write permissions, which results in 'file-privatedata'...
CVE-2023-53167
CVE-2023-53167: In the Linux kernel, tracing_err_log_open() can dereference file->private_data if opened with write permissions and then lseek is used, causing a kernel panic via mutex_lock -> seq_lseek. A fix was applied to tracing: Fix null pointer dereference in tracing_err_log_open() fo...
UBUNTU-CVE-2025-39801
In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: Remove WARNON for device endpoint command timeouts This commit addresses a rarely observed endpoint command timeout which causes kernel panic due to warn when 'paniconwarn' is enabled and unnecessary call trace prints...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...
A Practical Adversarial Attack against Sequence-Based Deep Learning Malware Classifiers
Sequence-based deep learning models e.g., RNNs, can detect malware by analyzing its behavioral sequences. Meanwhile, these models are susceptible to adversarial attacks. Attackers can create adversarial samples that alter the sequence characteristics of behavior sequences to deceive malware...
[SECURITY] Fedora 43 Update: bustle-0.12.0-3.fc43
Bustle draws sequence diagrams of D-Bus activity, showing signal emissions, method calls and their corresponding returns, with timestamps for each individual event and the duration of each method call. This can help you check for unwanted D-Bus traffic, and pinpoint why your D-Bus-based applicati...