March 22, 2024
Severity High Analysis Summary Ducktail Malware is a malicious program designed by hackers to infiltrate computers and networks globally. Ducktail malware is typically delivered through a […]
Rewterz Threat Alert – IPStorm Introduces a Malware Variant for Linux
October 2, 2020
Rewterz Threat Advisory – CVE-2020-25641 – Linux Kernel biovec usage denial of service
October 5, 2020
Rewterz Threat Alert – IPStorm Introduces a Malware Variant for Linux
October 2, 2020
Rewterz Threat Advisory – CVE-2020-25641 – Linux Kernel biovec usage denial of service
October 5, 2020
Severity
High
Analysis summary
Node.js loadyaml module could allow a remote attacker to bypass security restrictions, caused by containing malicious code as a preinstall script. By persuading a victim to install a specially-crafted application, an attacker could exploit this vulnerability to writes a public comment, including IP and IP-based geolocation, home directory name, and local username on GitHub.
Impact
Security bypass
Affected Vendors
NodeJs
Affected Products
Node.js loadyaml
Remediation
Refer to vendor advisory for the complete list of affected products and respective patches.