MAL-2024-7349 Malicious code in @zitterorg/quibusdam-sit-qui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24c9105ca92309394e1d573bd34b0377041f5a93b37a4ca6d91a988c6c9c4f1e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/sit-vel-delectus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54bfa38d2b63aa8984c09de50f43e8a7e6edd21efa7ea6ba17bc4f63a7b4ab69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/inventore-at-sit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3d807c96dc4c91b01a46510b06d4f6a1a6a28ac0147f7c820316ea8e8902517 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2021-47588

In the Linux kernel, the following vulnerability has been resolved: sit: do not call ipip6devfree from sitinitnet ipip6devfree is sit dev-privdestructor, already called by registernetdevice if something goes wrong. Alternative would be to make ipip6devfree robust against multiple invocations, but...

CVE-2021-47588

In the Linux kernel, the following vulnerability has been resolved: sit: do not call ipip6devfree from sitinitnet ipip6devfree is sit dev-privdestructor, already called by registernetdevice if something goes wrong. Alternative would be to make ipip6devfree robust against multiple invocations, but...

CVE-2021-47588

In the Linux kernel, the following vulnerability has been resolved: sit: do not call ipip6devfree from sitinitnet ipip6devfree is sit dev-privdestructor, already called by registernetdevice if something goes wrong. Alternative would be to make ipip6devfree robust against multiple invocations, but...

CVE-2021-47588

In the Linux kernel, the following vulnerability has been resolved: sit: do not call ipip6devfree from sitinitnet ipip6devfree is sit dev-privdestructor, already called by registernetdevice if something goes wrong. Alternative would be to make ipip6devfree robust against multiple invocations, but...

DEBIAN-CVE-2021-47588

In the Linux kernel, the following vulnerability has been resolved: sit: do not call ipip6devfree from sitinitnet ipip6devfree is sit dev-privdestructor, already called by registernetdevice if something goes wrong. Alternative would be to make ipip6devfree robust against multiple invocations, but...

CVE-2021-47588

In the Linux kernel, the following vulnerability has been resolved: sit: do not call ipip6devfree from sitinitnet ipip6devfree is sit dev-privdestructor, already called by registernetdevice if something goes wrong. Alternative would be to make ipip6devfree robust against multiple invocations, but...

UBUNTU-CVE-2021-47588

In the Linux kernel, the following vulnerability has been resolved: sit: do not call ipip6devfree from sitinitnet ipip6devfree is sit dev-privdestructor, already called by registernetdevice if something goes wrong. Alternative would be to make ipip6devfree robust against multiple invocations, but...

CVE-2021-47588

CVE-2021-47588 affects the Linux kernel SIT (IPv6 over SIT) functionality. The vulnerability stems from calling ipip6_dev_free() from sit_init_net(), where ipip6_dev_free is a dev->priv_destructor that has already been invoked by register_netdevice() if an error occurs. The issue arises becaus...

MAL-2024-1497 Malicious code in @juiggitea/vel-et-repudiandae-sit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6e68320d142fd1a5b023696ebcf04d935dc6a848bc7f9e35b996e72b9c4216c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

sit-immobilier.com Cross Site Scripting vulnerability OBB-3856258

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SUSE CVE-2008-2136

Memory leak in the ipip6rcv function in net/ipv6/sit.c in the Linux kernel 2.4 before 2.4.36.5 and 2.6 before 2.6.25.3 allows remote attackers to cause a denial of service memory consumption via network traffic to a Simple Internet Transition SIT tunnel interface, related to the pskbmaypull and...

GSD-2023-1001001 ipv6/sit: use DEV_STATS_INC() to avoid data-races

ipv6/sit: use DEVSTATSINC to avoid data-races This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1000567 ipv6/sit: use DEV_STATS_INC() to avoid data-races

ipv6/sit: use DEVSTATSINC to avoid data-races This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

PT-2023-33644 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue is related to a potential data-race in the ipv6/sit module. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

CVE-2022-3616

Affected software/area: OctoRPKI (github.com/cloudflare/cfrpki) in the octorpki command. Root cause / vulnerability detail: Attackers can construct long chains of Certificate Authorities (CAs) that exhaust the max iterations limit, causing OctoRPKI to crash and fail validation, resulting in a den...

sit-sc.com Cross Site Scripting vulnerability OBB-2637059

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Security Advisory 2021-08-01-1 - XSS via missing input validation of host names displayed (CVE-2021-32019)

DESCRIPTION Missing input validation of host names displayed in OpenWrt LuCI web-interface leads to Cross-site scripting, which can be used to gain full control over the affected system. REQUIREMENTS Users need to visit the LuCI “Connection status” page of the router and activate the host name...