Safety CI > MobSF/Mobile-Security-Framework-MobSF

pyup-scheduled-update-2023-04-03

2 years, 5 months ago

ad6b69b8

Update frida from 15.2.2 to 16.0.11

lief 0.12.3 has known security vulnerabilities.

Package	Installed	Affected	Info
lief	0.12.3	<0.15.0	show Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.
lief	0.12.3	<0.13.0	show LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp. https://github.com/lief-project/LIEF/issues/765 https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

Package

Installed

Affected

Info

lief

0.12.3

<0.15.0

show

Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.

lief

0.12.3

<0.13.0

show

LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp.
https://github.com/lief-project/LIEF/issues/765
https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

master

2 years, 5 months ago

93432c96

Merge branch 'master' of github.com:MobSF/Mobile-Security-Framework-MobSF

lief 0.12.3 has known security vulnerabilities.

Package	Installed	Affected	Info
lief	0.12.3	<0.15.0	show Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.
lief	0.12.3	<0.13.0	show LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp. https://github.com/lief-project/LIEF/issues/765 https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

Package

Installed

Affected

Info

lief

0.12.3

<0.15.0

show

Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.

lief

0.12.3

<0.13.0

show

LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp.
https://github.com/lief-project/LIEF/issues/765
https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

master

2 years, 5 months ago

be23758b

[HOTFIX] Add support for environment variable for MobSF config (#2150) * add support for environmen

lief 0.12.3 has known security vulnerabilities.

Package	Installed	Affected	Info
lief	0.12.3	<0.15.0	show Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.
lief	0.12.3	<0.13.0	show LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp. https://github.com/lief-project/LIEF/issues/765 https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

Package

Installed

Affected

Info

lief

0.12.3

<0.15.0

show

Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.

lief

0.12.3

<0.13.0

show

LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp.
https://github.com/lief-project/LIEF/issues/765
https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

env

2 years, 5 months ago

f1409c50

update lief

lief 0.12.3 has known security vulnerabilities.

Package	Installed	Affected	Info
lief	0.12.3	<0.15.0	show Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.
lief	0.12.3	<0.13.0	show LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp. https://github.com/lief-project/LIEF/issues/765 https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

Package

Installed

Affected

Info

lief

0.12.3

<0.15.0

show

Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.

lief

0.12.3

<0.13.0

show

LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp.
https://github.com/lief-project/LIEF/issues/765
https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

env

2 years, 5 months ago

5c361310

Fixes #2109

lief 0.12.3 has known security vulnerabilities.

Package	Installed	Affected	Info
lief	0.12.3	<0.15.0	show Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.
lief	0.12.3	<0.13.0	show LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp. https://github.com/lief-project/LIEF/issues/765 https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

Package

Installed

Affected

Info

lief

0.12.3

<0.15.0

show

Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.

lief

0.12.3

<0.13.0

show

LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp.
https://github.com/lief-project/LIEF/issues/765
https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

env

2 years, 5 months ago

c117ec4a

add support for environment variable config

lief 0.12.3 has known security vulnerabilities.

Package	Installed	Affected	Info
lief	0.12.3	<0.15.0	show Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.
lief	0.12.3	<0.13.0	show LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp. https://github.com/lief-project/LIEF/issues/765 https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

Package

Installed

Affected

Info

lief

0.12.3

<0.15.0

show

Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.

lief

0.12.3

<0.13.0

show

LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp.
https://github.com/lief-project/LIEF/issues/765
https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

master

2 years, 5 months ago

6bc64281

HOTIX: Update Dockerfile to install jq (#2149) * Update Dockerfile * Update tox.ini