SA-2023-052 - SLP DoS Attack (CVE-2023-29552)
Summary The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use spoofed UDP traffic to conduct a d...
Blog Articles
SA-2023-051 - vm2 sandbox bypass (CVE-2023-29017)
Summary vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. vm2 does not properly handle host objects passed to `Error.prepareStackTrace` in case of unhandled async ...
SA-2023-050 - FRRouting BGP out-of-bounds read (CVE-2022-43681)
Summary An out-of-bounds read exists in the BGP daemon of FRRouting FRR. When sending a malformed BGP OPEN message that ends with the option length octet (or the option length word, in case of an exte...
