107 matches found
CLEANSTART-2026-SJ60946 DMA reentrancy issue was found in the Tulip device emulation in QEMU
Security vulnerability affects the qemu package. A DMA reentrancy issue was found in the Tulip device emulation in QEMU...
Astra Linux – vulnerability in linux, linux-5.10
In the Linux kernel, the following vulnerability has been resolved: net: tulip: de4x5: fix the problem that the array 'lp-phy8' may be out of bounds At line 5001, if all elements in the array 'lp-phy8' are not 0, at the end of the 'for' loop, 'k' becomes 8. At this point, the array 'lp-phy8' may ...
Malicious code in kelp-tulip-bif360-project (npm)
The package kelp-tulip-bif360-project was found to contain malicious code. --- Credit: OpenSSF source...
Astra Linux – Vulnerability in Qemu
A reentrancy issue with DMA was discovered in the Tulip device emulation in QEMU. When Tulip reads from or writes to the rx/tx descriptor, or copies the rx/tx frame, it does not check whether the destination address is its own MMIO address. This can cause the device to trigger MMIO handlers...
Malicious code in honeycomb-tulip-zie836-project (npm)
The package honeycomb-tulip-zie836-project was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in dragon-tulip-ulh458-project (npm)
The package dragon-tulip-ulh458-project was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in cloud-tulip-ivv088-project (npm)
The package cloud-tulip-ivv088-project was found to contain malicious code. --- Credit: OpenSSF source...
WS-2021-0561
net: tulip: de4x5: fix the problem that the array 'lp-phy8' may be out of bound This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.7 by commi...
@inkeep/agents-manage-ui (>=0.0.0-dev-20251211233416, <=0.38.0), @react-email/preview-server (5.0.8) +1 more potentially affected by CVE-2025-55184 +1 more via next (16.0.9)
next NPM version 16.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on next and may be impacted: - @inkeep/agents-manage-ui =0.0.0-dev-20251211233416, =0.38.0 - @react-email/preview-server 5.0.8 - @tulip-systems/core 0.4.1 Source cves: CVE-2025-55184,...
@inkeep/agents-manage-ui (>=0.0.0-dev-20251211233416, <=0.38.0), @react-email/preview-server (5.0.8) +1 more potentially affected by CVE-2025-55183 +2 more via next (16.0.9)
next NPM version 16.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on next and may be impacted: - @inkeep/agents-manage-ui =0.0.0-dev-20251211233416, =0.38.0 - @react-email/preview-server 5.0.8 - @tulip-systems/core 0.4.1 Source cves: CVE-2025-55183,...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989731)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989731 advisory. In the Linux kernel, the following vulnerability has been resolved: net: tulip: de4x5: fix the problem that the array 'lp-phy8' may be out of bound In line 5001, if...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987098)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987098 advisory. In the Linux kernel, the following vulnerability has been resolved: net: tulip: de4x5: fix the problem that the array 'lp-phy8' may be out of bound In line 5001, if...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986425)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986425 advisory. In the Linux kernel, the following vulnerability has been resolved: net: tulip: de4x5: fix the problem that the array 'lp-phy8' may be out of bound In line 5001, if...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986339)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986339 advisory. In the Linux kernel, the following vulnerability has been resolved: net: tulip: de4x5: fix the problem that the array 'lp-phy8' may be out of bound In line 5001, if...
EUVD-2022-35183
Malicious code in bioql PyPI...
Malicious code in kelp-tulip-bif360-project (npm)
The package kelp-tulip-bif360-project was found to contain malicious code...
MAL-2025-44849 Malicious code in kelp-tulip-bif360-project (npm)
The package kelp-tulip-bif360-project was found to contain malicious code...
MAL-2025-18750 Malicious code in dragon-tulip-ulh458-project (npm)
The package dragon-tulip-ulh458-project was found to contain malicious code...