398 matches found
GHSA-9328-GCFQ-P269 Tor Arti's STUB circuits incorrectly have a length of 2
In Tor Arti before 1.2.3, STUB circuits incorrectly have a length of 2 with lite vanguards, aka TROVE-2024-003...
Tor Arti's STUB circuits incorrectly have a length of 2
In Tor Arti before 1.2.3, STUB circuits incorrectly have a length of 2 with lite vanguards, aka TROVE-2024-003...
FreeBSD : Arti -- Security issues related to circuit construction (f393b5a7-1535-11ef-8064-c5610a6efffb)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the f393b5a7-1535-11ef-8064-c5610a6efffb advisory. - In Tor Arti before 1.2.3, STUB circuits incorrectly have a length of 2 with lite vanguards,...
CVE-2024-35312
In Tor Arti before 1.2.3, STUB circuits incorrectly have a length of 2 with lite vanguards, aka TROVE-2024-003...
CVE-2024-35312
In Tor Arti before 1.2.3, STUB circuits incorrectly have a length of 2 with lite vanguards, aka TROVE-2024-003...
CVE-2024-35312
CVE-2024-35312 covers Tor Arti prior to version 1.2.3, where STUB circuits sometimes have an incorrect length of 2 (with lite vanguards). This issue is documented as TROVE-2024-003/004 in related advisories (OSV/GHSA entries) and is confirmed by multiple connected sources noting the specific mis-...
CVE-2024-35312
In Tor Arti before 1.2.3, STUB circuits incorrectly have a length of 2 with lite vanguards, aka TROVE-2024-003...
CVE-2024-35803
CVE-2024-35803 affects the Linux kernel, specifically the x86 efistub in mixed-mode boot handling. The root cause is that EFI boot service calls were made using the decompressor’s 16k boot stack during 32‑bit firmware entry paths, while EFI boot services require a larger (128k) stack. This mismat...
kernel: drm/amdgpu: install stub fence into potential unused fence pointers
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: install stub fence into potential unused fence pointers When using cpu to update page tables, vm update fences are unused. Install stub fence into these fence pointers instead of NULL to avoid NULL dereference when...
[SECURITY] Fedora 40 Update: unbound-1.19.3-1.fc40
Unbound is a validating, recursive, and caching DNSSEC resolver. The C implementation of Unbound is developed and maintained by NLnet Labs. It is based on ideas and algorithms taken from a java prototype developed by Verisign labs, Nominet, Kirei and ep.net. Unbound is designed as a set of modula...
CVE-2023-29483
The dnspython stub resolver is vulnerable to a denial of service DoS risk if an attacker sends a malicious response forged with the correct address and port before a legitimate one arrives on the UDP port used by dnspython for the query. In such cases, dnspython could either switch to another...
Fedora: Security Advisory (FEDORA-2024-2e26eccfcb)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
BuildKit possible host system access from mount stub cleaner
...
GHSA-4V98-7QMW-RQR8 BuildKit vulnerable to possible host system access from mount stub cleaner
Impact A malicious BuildKit frontend or Dockerfile using RUN --mount could trick the feature that removes empty files created for the mountpoints into removing a file outside the container, from the host system. Patches The issue has been fixed in v0.12.5 Workarounds Avoid using BuildKit frontend...
BuildKit vulnerable to possible host system access from mount stub cleaner
Impact A malicious BuildKit frontend or Dockerfile using RUN --mount could trick the feature that removes empty files created for the mountpoints into removing a file outside the container, from the host system. Patches The issue has been fixed in v0.12.5 Workarounds Avoid using BuildKit frontend...
CVE-2024-23652 BuildKit possible host system access from mount stub cleaner
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit frontend or Dockerfile using RUN --mount could trick the feature that removes empty files created for the mountpoints into removing a file outside the...
CVE-2024-23652 BuildKit possible host system access from mount stub cleaner
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit frontend or Dockerfile using RUN --mount could trick the feature that removes empty files created for the mountpoints into removing a file outside the...
Bread - BIOS Reverse Engineering And Advanced Debugging
BREAD BIOS Reverse Engineering & Advanced Debugging is an 'injectable' real-mode x86 debugger that can debug arbitrary real-mode code on real HW from another PC via serial cable. Introduction BREAD emerged from many failed attempts to reverse engineer legacy BIOS. Given that the vast majority -- ...