4391 matches found
Local privilege escalation due to unrestricted loading of unsigned libraries
...
kernel: arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
An integer overflow exists in the linux kernel such that the value returned from acpifindlastcachelevel is then assigned to unsigned fwlevel, which will result in the number of cache leaves calculated incorrectly, resulting in damage to the confidentiality, integrity, and availability of the syst...
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : protobuf-c (SUSE-SU-2023:2143-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2143-1 advisory. - CVE-2022-48468: Fixed an unsigned integer overflow. bsc1210323 Tenable has extracted the preceding...
SUSE: Security Advisory (SUSE-SU-2023:2143-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE-SU-2023:2143-1 Security update for protobuf-c
This update for protobuf-c fixes the following issues: - CVE-2022-48468: Fixed an unsigned integer overflow. bsc1210323...
kernel: firmware: arm_scmi: Fix list protocols enumeration in the base protocol
In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Fix list protocols enumeration in the base protocol While enumerating protocols implemented by the SCMI platform using BASEDISCOVERLISTPROTOCOLS, the number of returned protocols is currently validated in an...
kernel: arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
An integer overflow exists in the linux kernel such that the value returned from acpifindlastcachelevel is then assigned to unsigned fwlevel, which will result in the number of cache leaves calculated incorrectly, resulting in damage to the confidentiality, integrity, and availability of the syst...
Fedora 36 : libsignal-protocol-c (2023-8b0938312e)
The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-8b0938312e advisory. Backport a fix for CVE-2022-48468 for protobuf-c, which is bundled in libsignal-protocol-c...
Fedora 38 : libsignal-protocol-c (2023-4e094d5297)
The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-4e094d5297 advisory. Backport a fix for CVE-2022-48468 for protobuf-c, which is bundled in libsignal-protocol-c...
Fedora 37 : libsignal-protocol-c (2023-6cfe134db6)
The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-6cfe134db6 advisory. Backport a fix for CVE-2022-48468 for protobuf-c, which is bundled in libsignal-protocol-c...
New Atomic macOS Malware Steals Keychain Passwords and Crypto Wallets
Threat actors are advertising a new information stealer for the Apple macOS operating system called Atomic macOS Stealer or AMOS on Telegram for $1,000 per month, joining the likes of MacStealer. "The Atomic macOS Stealer can steal various types of information from the victim's machine, including...
New Atomic macOS Malware Steals Keychain Passwords and Crypto Wallets
Threat actors are advertising a new information stealer for the Apple macOS operating system called Atomic macOS Stealer or AMOS on Telegram for $1,000 per month, joining the likes of MacStealer. "The Atomic macOS Stealer can steal various types of information from the victim's machine, including...
OESA-2023-1255 protobuf-c security update
This is protobuf-c, a C implementation of the Google Protocol Buffers data serialization format. Security Fixes: protobuf-c before 1.4.1 has an unsigned integer overflow in parserequiredmember.CVE-2022-48468...
SUSE: Security Advisory (SUSE-SU-2023:1979-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLES15 Security Update : protobuf-c (SUSE-SU-2023:1979-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:1979-1 advisory. - CVE-2022-48468: Fixed an unsigned integer overflow. bsc1210323 Tenable has extracted the preceding description block directly from the SUS...
SUSE-SU-2023:1979-1 Security update for protobuf-c
This update for protobuf-c fixes the following issues: - CVE-2022-48468: Fixed an unsigned integer overflow. bsc1210323...
LockBit Ransomware Now Targeting Apple macOS Devices
Threat actors behind the LockBit ransomware operation have developed new artifacts that can encrypt files on devices running Apple's macOS operating system. The development, which was reported by the MalwareHunterTeam over the weekend, appears to be the first time a big-game ransomware crew has...
protobuf-c before 1.4.1 has an unsigned integer overflow in parse_required_member.
...
Mozilla Firefox 安全漏洞
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox versions prior to 112, which stems from a Mozilla Maintenance Service write-lock bypass, where a local attacker can trick the Mozilla Maintenance...
