Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ate_checks(struct __sk_buff *sk) { int *p = (void *)(long)sk->data; if ((void *)(p + 1) > (void *)(long)sk->data_end) return TCX_DROP; skb_pull_data(sk, 0); *p = 42; return TCX_PASS; } After a call to bpf_skb_pull_data() the pointer 'p' can't be used safely. See function filter.c:bpf_helper_changes_pkt_data() for a list of such helpers. At the moment verifier invalidates packet pointers when processing helper function calls, and does not traverse global sub-programs when processing calls to global sub-programs. This means that calls to helpers done from global sub-programs do not invalidate pointers in the caller state. E.g. the program above is unsafe, but is not rejected by verifier. This
do not invalidate pointers in the caller state. E.g. the program above is unsafe, but is not rejected by verifier. This commit fixes the omission by computing field bpf_subprog_info->changes_pkt_data for each sub-program before main verification pass. changes_pkt_data should be set if: - subprogram calls helper for which bpf_helper_changes_pkt_data returns true; - subprogram calls a global function, for which bpf_subprog_info->changes_pkt_data should be set. The verifier.c:check_cfg() pass is modified to compute this information. The commit relies on depth first instruction traversal done by check_cfg() and absence of recursive function calls: - check_cfg() would eventually visit every call
traversal done by check_cfg() and absence of recursive function calls: - check_cfg() would eventually visit every call to subprogram S in a state when S is fully explored; - when S is fully explored: - every direct helper call within S is explored (and thus changes_pkt_data is set if needed); - every call to subprogram S1 called by S was visited with S1 fully explored (and thus S inherits changes_pkt_data from S1). The downside of such approach is that dead code elimination is not taken into account: if a helper call inside global function is dead because of current configuration, verifier would conservatively assume that the call occurs for the purpose of the changes_pkt_data computation.
uration, verifier would conservatively assume that the call occurs for the purpose of the changes_pkt_data computation. References: - https://git.kernel.org/stable/c/79751e9227a5910c0e5a2c7186877d91821d957d - https://git.kernel.org/stable/c/1d572c60488b52882b719ed273767ee3b280413d - https://git.kernel.org/stable/c/51081a3f25c742da5a659d7fc6fd77ebfdd555be
CVE ID: CVE-2024-58099 State: PUBLISHED Published: 2025-04-29T11:45:30.997Z Last Updated: 2025-10-01T16:12:26.226Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame Andrew and Nikolay reported connectivity issues with Cilium's service load-balancing in case of vmxnet3. If a BPF program for native XDP adds an encapsulation header such as IPIP and transmits the packet out the same interface, then in case of vmxnet3 a corrupted packet is being sent and subsequently dropped on the path. vmxnet3_xdp_xmit_frame() which is called e.g. via vmxnet3_run_xdp() through vmxnet3_xdp_xmit_
ently dropped on the path. vmxnet3_xdp_xmit_frame() which is called e.g. via vmxnet3_run_xdp() through vmxnet3_xdp_xmit_back() calculates an incorrect DMA address: page = virt_to_page(xdpf->data); tbi->dma_addr = page_pool_get_dma_addr(page) + VMXNET3_XDP_HEADROOM; dma_sync_single_for_device(&adapter->pdev->dev, tbi->dma_addr, buf_size, DMA_TO_DEVICE); The above assumes a fixed offset (VMXNET3_XDP_HEADROOM), but the XDP BPF program could have moved xdp->data. While the passed buf_size is correct (xdpf->len), the dma_addr needs to have a dynamic offset which can be calculated as xdpf->data - (void *)xdpf, that is, xdp->data - xdp->data_hard_start. Additional Analyst Notes: - CISA ADP Vulnrich
d as xdpf->data - (void *)xdpf, that is, xdp->data - xdp->data_hard_start. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/59ba6cdadb9c26b606a365eb9c9b25eb2052622d - https://git.kernel.org/stable/c/f82eb34fb59a8fb96c19f4f492c20eb774140bb5 - https://git.kernel.org/stable/c/4678adf94da4a9e9683817b246b58ce15fb81782
CVE ID: CVE-2024-58100 State: PUBLISHED Published: 2025-05-05T14:53:33.445Z Last Updated: 2025-05-09T08:06:09.147Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: bpf: check changes_pkt_data property for extension programs When processing calls to global sub-programs, verifier decides whether to invalidate all packet pointers in current state depending on the changes_pkt_data property of the global sub-program. Because of this, an extension program replacing a global sub-program must be compatible with changes_pkt_data property of the sub-program being replaced. This commit: - adds changes_pkt_data flag to struct bpf_prog_aux: -
pkt_data property of the sub-program being replaced. This commit: - adds changes_pkt_data flag to struct bpf_prog_aux: - this flag is set in check_cfg() for main sub-program; - in jit_subprogs() for other sub-programs; - modifies bpf_check_attach_btf_id() to check changes_pkt_data flag; - moves call to check_attach_btf_id() after the call to check_cfg(), because it needs changes_pkt_data flag to be set: bpf_check: ... ... - check_attach_btf_id resolve_pseudo_ldimm64 resolve_pseudo_ldimm64 --> bpf_prog_is_offloaded bpf_prog_is_offloaded check_cfg check_cfg + check_attach_btf_id ... ... The following fields are set by check_attach_btf_id(): - env->ops - prog->aux->attach_btf_trace - prog->aux-
_id ... ... The following fields are set by check_attach_btf_id(): - env->ops - prog->aux->attach_btf_trace - prog->aux->attach_func_name - prog->aux->attach_func_proto - prog->aux->dst_trampoline - prog->aux->mod - prog->aux->saved_dst_attach_type - prog->aux->saved_dst_prog_type - prog->expected_attach_type Neither of these fields are used by resolve_pseudo_ldimm64() or bpf_prog_offload_verifier_prep() (for netronome and netdevsim drivers), so the reordering is safe. References: - https://git.kernel.org/stable/c/7197fc4acdf238ec8ad06de5a8235df0c1f9c7d7 - https://git.kernel.org/stable/c/3846e2bea565ee1c5195dcc625fda9868fb0e3b3 - https://git.kernel.org/stable/c/81f6d0530ba031b5f038a091619bf2
l.org/stable/c/3846e2bea565ee1c5195dcc625fda9868fb0e3b3 - https://git.kernel.org/stable/c/81f6d0530ba031b5f038a091619bf2ff29568852
CVE ID: CVE-2024-58101 State: PUBLISHED Published: 2025-05-14T00:00:00.000Z Last Updated: 2025-05-15T14:07:24.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: Samsung Galaxy Buds and Galaxy Buds 2 audio devices are Bluetooth pairable by default without user input nor a way to stop this mode. As a consequence, audio playback takeover or even microphone recording without user consent or notification is achieved. Note: This is considered a low severity vulnerability by the vendor. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.tarlogic.com/blog/cve-2024-58101
CVE ID: CVE-2024-58102 State: PUBLISHED Published: 2025-03-11T00:00:00.000Z Last Updated: 2025-03-11T13:24:30.067Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H/E:F/RL:O/RC:C) Vendors: Datalust Products: Seq Problem Types: CWE-674 Description: An issue was discovered in Datalust Seq before 2024.3.13545. An insecure default parsing depth limit allows stack consumption when parsing user-supplied queries containing deeply nested expressions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/datalust/seq-tickets/issues/2367 - https://github.com/datalust/seq-tickets/issues/2086 - https://datalust.co/seq
CVE ID: CVE-2024-58103 State: PUBLISHED Published: 2025-03-16T00:00:00.000Z Last Updated: 2025-03-17T15:50:25.364Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L) Vendors: Square Products: Wire Problem Types: CWE-674 Description: Square Wire before 5.2.0 does not enforce a recursion limit on nested groups in ByteArrayProtoReader32.kt and ProtoReader.kt. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/square/wire/commit/b90e60c09befaff836a2fc2ee4d678451b2ec75d - https://github.com/square/wire/compare/5.1.0...5.2.0
CVE ID: CVE-2024-58104 State: PUBLISHED Published: 2025-03-25T17:37:28.783Z Last Updated: 2025-03-26T03:55:25.056Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Trend Micro, Inc. Products: Trend Micro Apex One, Trend Micro Apex One as a Service Description: A vulnerability in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a local attacker to bypass existing security and execute arbitrary code on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: Reference
n the target system in order to exploit this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/en-US/solution/KA-0018217
CVE ID: CVE-2024-58105 State: PUBLISHED Published: 2025-03-25T17:37:39.464Z Last Updated: 2025-03-26T03:55:23.754Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Trend Micro, Inc. Products: Trend Micro Apex One, Trend Micro Apex One as a Service Description: A vulnerability in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a local attacker to bypass existing security and execute arbitrary code on affected installations. This CVE address an addtional bypass not covered in CVE-2024-58104. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnera
acker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/en-US/solution/KA-0018217
CVE ID: CVE-2024-58106 State: PUBLISHED Published: 2025-04-07T03:31:45.797Z Last Updated: 2025-04-07T14:12:39.922Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-120 Description: Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/4/
CVE ID: CVE-2024-58107 State: PUBLISHED Published: 2025-04-07T03:33:15.998Z Last Updated: 2025-04-07T14:11:22.444Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-680 Description: Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/4/
CVE ID: CVE-2024-58108 State: PUBLISHED Published: 2025-04-07T03:34:16.940Z Last Updated: 2025-04-07T14:02:20.045Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-120 Description: Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/4/
CVE ID: CVE-2024-58109 State: PUBLISHED Published: 2025-04-07T03:35:12.667Z Last Updated: 2025-04-07T13:31:34.489Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-120 Description: Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/4/
CVE ID: CVE-2024-58110 State: PUBLISHED Published: 2025-04-07T03:36:06.556Z Last Updated: 2025-04-07T13:31:05.161Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-120 Description: Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/4/
CVE ID: CVE-2024-58111 State: PUBLISHED Published: 2025-04-07T03:37:11.430Z Last Updated: 2025-04-07T13:30:34.139Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-248 Description: Exception capture failure vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/4/
CVE ID: CVE-2024-58112 State: PUBLISHED Published: 2025-04-07T03:37:59.179Z Last Updated: 2025-04-07T13:29:33.947Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-248 Description: Exception capture failure vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/4/
CVE ID: CVE-2024-58113 State: PUBLISHED Published: 2025-04-07T03:38:56.455Z Last Updated: 2025-04-07T13:29:08.332Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-399 Description: Vulnerability of improper resource management in the memory management module Impact: Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/4/
CVE ID: CVE-2024-58114 State: PUBLISHED Published: 2025-06-06T06:42:00.360Z Last Updated: 2025-06-06T15:54:44.486Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-770 Description: Resource allocation control failure vulnerability in the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/6/
CVE ID: CVE-2024-58115 State: PUBLISHED Published: 2025-04-07T03:40:13.360Z Last Updated: 2025-04-07T13:28:35.116Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-121 Description: Buffer overflow vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/4/
CVE ID: CVE-2024-58116 State: PUBLISHED Published: 2025-04-07T03:40:56.025Z Last Updated: 2025-04-07T13:28:06.261Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-121 Description: Buffer overflow vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/4/
CVE ID: CVE-2024-58117 State: PUBLISHED Published: 2025-07-07T02:01:10.961Z Last Updated: 2025-07-07T15:37:43.181Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-121 Description: Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/7/
CVE ID: CVE-2024-58124 State: PUBLISHED Published: 2025-04-07T03:41:56.127Z Last Updated: 2025-04-07T14:10:38.230Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-290 Description: Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/4/
CVE ID: CVE-2024-58125 State: PUBLISHED Published: 2025-04-07T03:43:00.444Z Last Updated: 2025-04-07T14:10:29.880Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-290 Description: Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/4/
CVE ID: CVE-2024-58126 State: PUBLISHED Published: 2025-04-07T03:47:39.337Z Last Updated: 2025-04-07T14:10:21.859Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-290 Description: Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/4/
CVE ID: CVE-2024-58127 State: PUBLISHED Published: 2025-04-07T03:48:36.633Z Last Updated: 2025-04-07T14:10:13.844Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-290 Description: Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2025/4/
CVE ID: CVE-2024-58128 State: PUBLISHED Published: 2025-03-28T00:00:00.000Z Last Updated: 2025-03-31T16:44:25.819Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: MISP Products: MISP Problem Types: CWE-79 Description: In MISP before 2.4.193, menu_custom_right_link parameters can be set via the UI (i.e., without using the CLI) and thus attackers with admin privileges can conduct XSS attacks via a global menu link. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/MISP/MISP/commit/33a1eb66408e16a7535b2bae48303efd9501a26a - https://github.com/MISP/MISP/releases/tag/v2.4.193
CVE ID: CVE-2024-58129 State: PUBLISHED Published: 2025-03-28T00:00:00.000Z Last Updated: 2025-03-31T16:43:48.257Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: MISP Products: MISP Problem Types: CWE-79 Description: In MISP before 2.4.193, menu_custom_right_link_html parameters can be set via the UI (i.e., without using the CLI) and thus attackers with admin privileges can conduct XSS attacks against every page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/MISP/MISP/releases/tag/v2.4.193 - https://github.com/MISP/MISP/commit/09a43870e733f79ffa33753ddc7bce3cbb5a5647
CVE ID: CVE-2024-58130 State: PUBLISHED Published: 2025-03-28T00:00:00.000Z Last Updated: 2025-03-31T16:43:01.320Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: MISP Products: MISP Problem Types: CWE-79 Description: In app/Controller/Component/RestResponseComponent.php in MISP before 2.4.193, REST endpoints have a lack of sanitization for non-JSON responses. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/MISP/MISP/releases/tag/v2.4.193 - https://github.com/MISP/MISP/commit/f08a2eaec25f0212c22b225c0b654bd60d089ef9
CVE ID: CVE-2024-58131 State: PUBLISHED Published: 2025-04-06T00:00:00.000Z Last Updated: 2025-04-07T14:11:17.211Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L) Vendors: FISCO-BCOS Products: FISCO-BCOS Problem Types: CWE-821 Description: FISCO BCOS 3.11.0 has an issue with synchronization of the transaction pool that can, for example, be observed when a malicious node (that has modified the codebase to allow a large min_seal_time value) joins a blockchain network. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/FISCO-BCOS/FISCO-BCOS/issues/4656
CVE ID: CVE-2024-58132 State: PUBLISHED Published: 2025-04-06T00:00:00.000Z Last Updated: 2025-04-07T14:11:04.837Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L) Vendors: ChainMaker Products: chainmaker-go Problem Types: CWE-821 Description: In chainmaker-go (aka ChainMaker) before 2.3.6, multiple updates to a single node's configuration can cause other normal nodes to perform concurrent read and write operations on a map, leading to a panic. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.chainmaker.org.cn/chainmaker/issue/-/issues/1202
CVE ID: CVE-2024-58133 State: PUBLISHED Published: 2025-04-06T00:00:00.000Z Last Updated: 2025-04-07T16:24:00.157Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L) Vendors: ChainMaker Products: chainmaker-go Problem Types: CWE-821 Description: In chainmaker-go (aka ChainMaker) before 2.4.0, when making frequent updates to a node's configuration file and restarting this node, concurrent writes by logger.go to a map are mishandled. Creating other logs simultaneously can lead to a read-write conflict and panic. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.chainmaker.org.cn/chainmaker/issue/-/issues/1228
CVE ID: CVE-2024-58134 State: PUBLISHED Published: 2025-05-03T16:08:55.042Z Last Updated: 2025-10-20T20:09:00.882Z Vendors: SRI Products: Mojolicious Problem Types: CWE-321, CWE-331 Description: Mojolicious versions from 0.999922 for Perl uses a hard coded string, or the application's class name, as an HMAC session cookie secret by default. These predictable default secrets can be exploited by an attacker to forge session cookies. An attacker who knows or guesses the secret could compute valid HMAC signatures for the session cookie, allowing them to tamper with or hijack another user’s session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/mojolicious/mo
other user’s session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/mojolicious/mojo/pull/1791 - https://github.com/mojolicious/mojo/pull/2200 - https://www.synacktiv.com/publications/baking-mojolicious-cookies - https://medium.com/securing/baking-mojolicious-cookies-revisited-a-case-study-of-solving-security-problems-through-security-by-13da7c225802 - https://metacpan.org/release/SRI/Mojolicious-9.39/source/lib/Mojolicious.pm#L51 - https://github.com/hashcat/hashcat/pull/4090 - https://lists.debian.org/debian-perl/2025/05/msg00016.html - https://lists.debian.org/debian-perl/2025/05/msg00017.html - https://lists.debian.org/debian-perl/2025/05/msg00018.ht
- https://lists.debian.org/debian-perl/2025/05/msg00017.html - https://lists.debian.org/debian-perl/2025/05/msg00018.html - https://github.com/mojolicious/mojo/pull/2252 - https://docs.mojolicious.org/Mojolicious/Guides/FAQ#What-does-Your-secret-passphrase-needs-to-be-changed-mean