CVE-2024-56433

CVE-2024-56433 affects shadow-utils (shadow) 4.4–4.17.0, which uses a default /etc/subuid range (e.g., UID 100000–165535) that can clash with locally defined UIDs. The documented impact is potential account takeover via newuidmap access to local or same-host resources (e.g., NFS home directories)...

CVE-2024-56433

shadow-utils aka shadow 4.4 through 4.17.0 establishes a default /etc/subuid behavior e.g., uid 100000 through 165535 for the first user account that can realistically conflict with the uids of users defined on locally administered networks, potentially leading to account takeover, e.g., by...

CVE-2024-56433

shadow-utils aka shadow 4.4 through 4.17.0 establishes a default /etc/subuid behavior e.g., uid 100000 through 165535 for the first user account that can realistically conflict with the uids of users defined on locally administered networks, potentially leading to account takeover, e.g., by...

CVE-2024-56433

shadow-utils aka shadow 4.4 through 4.17.0 establishes a default /etc/subuid behavior e.g., uid 100000 through 165535 for the first user account that can realistically conflict with the uids of users defined on locally administered networks, potentially leading to account takeover, e.g., by...

@volpe/astro-utils (>=0.0.1 <=0.0.20), astro-npm-loader (>=0.0.1 <=0.1.2) potentially affected by CVE-2024-56159 via astro (=5.0.0-beta.5)

astro NPM version =5.0.0-beta.5 is affected by a known vulnerability. The following packages have a transitive dependency on astro and may be impacted: - @volpe/astro-utils =0.0.1, =0.0.1, =0.1.2 Source cves: CVE-2024-56159 Source advisory: OSV:GHSA-49W6-73CW-CHJR...

MAL-2024-11982 Malicious code in gft-model-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b553d507e20e5d98f5bb1934bad6b5d49d32085028d96603c5eceb371c3851e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gft-model-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b553d507e20e5d98f5bb1934bad6b5d49d32085028d96603c5eceb371c3851e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12053 Malicious code in uflexreward-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7379f8591040c92a4329b5312d80e8291304a7106cac2b41cb406b21a9e6b4d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in uflexreward-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7379f8591040c92a4329b5312d80e8291304a7106cac2b41cb406b21a9e6b4d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11763 Malicious code in keypair-layout-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14dcde51dd210ea29065e53961174252e1e089b897e7470b76239c5b45799eff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in keypair-layout-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14dcde51dd210ea29065e53961174252e1e089b897e7470b76239c5b45799eff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in i18-utils (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11367 Malicious code in i18-utils (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11298 Malicious code in apc-admin-utils (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in apc-admin-utils (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11202 Malicious code in buoyant-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a848aad4ed9b021dd1c4df3717c23fc8ef9578378c9bb92abe8f921a77ea100c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in buoyant-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a848aad4ed9b021dd1c4df3717c23fc8ef9578378c9bb92abe8f921a77ea100c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in crypto-layout-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1fb00ef7ee21b6fc04fbef059a71415a1b6af8daf224b5e56df77ba85fa99351 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11207 Malicious code in crypto-layout-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1fb00ef7ee21b6fc04fbef059a71415a1b6af8daf224b5e56df77ba85fa99351 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11084 Malicious code in secure-fetch-utils-stable (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3b042899a3895febb34f95a4fe1c7825c2e278bb7f8625b82b7d220e66c7b5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...