What is a vulnerability and what is not?

🗓️ 28 Jan 2019 09:41:51Reported by Alexander LeonovType

avleonov🔗 feedproxy.google.com👁 168 Views

The definition of a vulnerability can be complex due to various formal definitions, but it's essentially a flaw or weakness in a system, device, or service that can lead to security issues. It's important to treat vulnerabilities as bugs and errors, as they can impact confidentiality, integrity, and availability. Some cases may be clear-cut, while in others, determining if a bug is a vulnerability depends on its impact. For example, a bug in Telegram Messenger led to unencrypted message storage, with debate over whether this constituted a vulnerability. Another case involved an exploit allowing unprivileged Linux users to change the root password, and the debate there revolved around whether it was a vulnerability or a default misconfiguration

Reporter	Title	Published	Views	Family All 130
zdt	xorg-x11-server 1.20.3 - Local Privilege Escalation Exploit	26 Oct 201800:00	–	zdt
zdt	xorg-x11-server 1.20.3 - Local Privilege Escalation Exploit (2)	26 Oct 201800:00	–	zdt
zdt	xorg #x11 #server 1.20.3 - Privilege Escalation Exploit (3)	30 Oct 201800:00	–	zdt
zdt	xorg-x11-server < 1.20.1 - Local Privilege Escalation Exploit	13 Nov 201800:00	–	zdt
zdt	Xorg X11 Server SUID Privilege Escalation Exploit	26 Nov 201800:00	–	zdt
zdt	xorg-x11-server < 1.20.3 - modulepath Local Privilege Escalation Exploit	1 Dec 201800:00	–	zdt
zdt	Xorg X11 Server (AIX) - Local Privilege Escalation Exploit	4 Dec 201800:00	–	zdt
zdt	xorg-x11-server < 1.20.3 - Local Privilege Escalation (Solaris 11 inittab) Exploit	14 Jan 201900:00	–	zdt
zdt	Xorg X11 Server SUID modulepath Privilege Escalation Exploit	22 Oct 201900:00	–	zdt
zdt	Xorg X11 Server Local Privilege Escalation Exploit	13 Nov 201900:00	–	zdt

28 Jan 2019 09:41Current

7.8High risk

Vulners AI Score7.8

EPSS0.2704