3831 matches found
Moderate: exfatprogs security update
The exfatprogs package contains utilities for formatting and repairing exFAT filesystems. Security Fixes: exfatprogs: exfatprogs allows out-of-bounds memory access CVE-2023-45897 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...
Moderate: Red Hat Security Advisory: pcs security update
An update for pcs is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, and Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impa...
Hackers Linked to Russia’s Military Claim Credit for Sabotaging US Water Utilities
Cyber Army of Russia Reborn, a group with ties to the Kremlin’s Sandworm unit, is crossing lines even that notorious cyberwarfare unit wouldn’t dare to...
Malicious code in wt-fe-buz-utilities-collection (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da59ce3066bc4f743fd62c3c5db000f13a21c5167bf5987991697d4b631b6288 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in wt-fe-buz-utilities-collection
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2024-1266 Malicious code in wt-fe-buz-utilities-collection (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da59ce3066bc4f743fd62c3c5db000f13a21c5167bf5987991697d4b631b6288 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2024-19662
Name of the Vulnerable Software and Affected Versions Time4J Base version 5.9.3 Description A NullPointerException was discovered in Time4J Base via the component net.time4j.format.internal.FormatUtils::useDefaultWeekmodelLocale. However, the existence of this issue is disputed by multiple third...
ROS-20240409-17
Vulnerability of linebytessplit function src/split.c of GNU Core Utilities GNU Coreutils is related to a buffer overflow in dynamic memory. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
util-linux bug fix update
An update is available for util-linux. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The util-linux packages contain a large variety of low-level system...
Exploit for Embedded Malicious Code in Tukaani Xz
CVE-2024-3094 Checker The CVE-2024-3094 Checker is a powerful...
HashiCorp Response to XZ Utils Supply Chain Attack (CVE-2024-3094)
Summary HashiCorp products and services have no known exposure to the XZ Utils xz/liblzma supply chain attack and associated vulnerability, CVE-2024-3094, at this time. This bulletin will be updated if this situation changes. Background A supply chain attack that introduced malicious code into th...
Vulnerability fixed in liblzma (XZ Utils)
Malicious code has been found in liblzma XZ Utils software. XZ Utils is used for compression of data and may be present in Linux distributions. The vulnerability has been labeled CVE-2024-3094 and has been found in versions 5.6.0 and 5.6.1 of XZ Utils. A malicious party can exploit the...
CVE-2024-25395
A buffer overflow occurs in utilities/rt-link/src/rtlink.c in RT-Thread through 5.0.2...
CVE-2024-25395
A buffer overflow occurs in utilities/rt-link/src/rtlink.c in RT-Thread through 5.0.2...
CVE-2024-25394
A buffer overflow occurs in utilities/ymodem/rysy.c in RT-Thread through 5.0.2 because of an incorrect sprintf call or a missing '\0' character...
CVE-2024-25394: Buffer Copy without Checking Size of Input
A buffer overflow occurs in utilities/ymodem/rysy.c in RT-Thread through 5.0.2 because of an incorrect sprintf call or a missing '\0' character...
CVE-2024-25392
An out-of-bounds access occurs in utilities/varexport/varexport.c in RT-Thread through 5.0.2...
CVE-2024-25392: Out-of-bounds Read
An out-of-bounds access occurs in utilities/varexport/varexport.c in RT-Thread through 5.0.2...
CVE-2024-25392
An out-of-bounds access occurs in utilities/varexport/varexport.c in RT-Thread through 5.0.2...
CVE-2024-25392
An out-of-bounds access (specifically an out-of-bounds read ) exists in the utilities/var_export/var_export.c component of the RT-Thread RTOS. This vulnerability affects RT-Thread versions through 5.0.2 . While the technical root cause is identified as an out-of-bounds access, specific exploitati...