316 matches found
Linux Kernel IRET Instruction #SS Fault Handling - Crash PoC
Exploit for linux platform in category dos / poc / ---------------------------------------------------------------------------------------------------- cve-2014-9322poc.c arch/x86/kernel/entry64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack Segment ...
Linux Kernel 3.17.5 - IRET Instruction #SS Fault Handling Crash (PoC)
/ ---------------------------------------------------------------------------------------------------- cve-2014-9322poc.c arch/x86/kernel/entry64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack Segment SS segment register, which allows local users to...
Updated kernel-linus packages fix security vulnerabilities
This kernel-linus update is based on upstream -longterm 3.14.32 and fixes the following security issues: The microcode on AMD 16h 00h through 0Fh processors does not properly handle the interaction between locked instructions and write-combined memory types, which allows local users to cause a...
USN-2447-2: Linux kernel (Utopic HWE) regression
USN-2447-1 fixed vulnerabilities in the Linux kernel. Due to an unrelated regression TCP Throughput drops to zero for several drivers after upgrading. This update fixes the problem. We apologize for the inconvenience. Original advisory details: An information leak in the Linux kernel was discover...
USN-2448-2: Linux kernel regression
USN-2448-1 fixed vulnerabilities in the Linux kernel. Due to an unrelated regression TCP Throughput drops to zero for several drivers after upgrading. This update fixes the problem. We apologize for the inconvenience. Original advisory details: An information leak in the Linux kernel was discover...
Oracle Linux 7 : kernel (ELSA-2014-2010)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-2010 advisory. 3.10.0-123.13.2 - Oracle Linux certificates Alexey Petrenko 3.10.0-123.13.2 - x86 traps: stop using IST for SS Petr Matousek 1172812 1172813 CVE-2014-9322 Tenab...
Unbreakable Enterprise kernel security update
kernel-uek 3.8.13-55.1.2.el6uek - isofs: Fix unbounded recursion when processing relocated directories Jan Kara Orabug: 20224059 CVE-2014-5471 CVE-2014-5472 - x8664, traps: Stop using IST for SS Andy Lutomirski Orabug: 20224027 CVE-2014-9090 CVE-2014-9322...
CVE-2014-9322
arch/x86/kernel/entry64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack Segment SS segment register, which allows local users to gain privileges by triggering an IRET instruction that leads to access to a GS Base address from the wrong space...
CVE-2014-9322
arch/x86/kernel/entry64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack Segment SS segment register, which allows local users to gain privileges by triggering an IRET instruction that leads to access to a GS Base address from the wrong space...
Debian Security Advisory DSA 3093-1 (linux - security update)
Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or privilege escalation: CVE-2014-7841 Liu Wei of Red Hat discovered that a SCTP server doing ASCONF will panic on malformed INIT chunks by triggering a NULL pointer dereference. CVE-2014-8369 A...
CVE-2014-9090
CVE-2014-9090 affects the Linux kernel up to 3.17.4, where do_double_fault in arch/x86/kernel/traps.c mishandles SS fault conditions, allowing local users to cause a denial of service (panic) via modify_ldt (demonstrated by sigreturn_32 in linux-clock-tests). The issue was addressed by a patch li...
CVE-2014-9090: Undefined Security Weakness
The dodoublefault function in arch/x86/kernel/traps.c in the Linux kernel through 3.17.4 does not properly handle faults associated with the Stack Segment SS segment register, which allows local users to cause a denial of service panic via a modifyldt system call, as demonstrated by sigreturn32 i...
CVE-2014-9090
The dodoublefault function in arch/x86/kernel/traps.c in the Linux kernel through 3.17.4 does not properly handle faults associated with the Stack Segment SS segment register, which allows local users to cause a denial of service panic via a modifyldt system call, as demonstrated by sigreturn32 i...
PT-2014-8489
Name of the Vulnerable Software and Affected Versions WordPress Spreadsheet wpSS plugin version 0.62 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the ss id parameter in the ss handler.php file. Recommendations For...
PT-2014-8488
Name of the Vulnerable Software and Affected Versions WordPress Spreadsheet wpSS plugin version 0.62 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the ss id parameter in the ss handler.php file. Recommendations For WordPress Spreadsheet wpSS...
PT-2014-6487
Name of the Vulnerable Software and Affected Versions QNAP TS-469U version 4.0.7 Build 20140410 QNAP TS-459U affected versions not specified QNAP TS-EC1679U-RP affected versions not specified QNAP SS-839 affected versions not specified Description The issue allows local users to obtain usernames...
SS Downloads 1.4.4.1 - templates/emailform.php Multiple Parameter Reflected XSS
The SS Downloads WordPress plugin was affected by a templates/emailform.php Multiple Parameter Reflected XSS security vulnerability...
SS Downloads 1.4.4.1 - templates/emailsent.php Multiple Parameter Reflected XSS
The SS Downloads WordPress plugin was affected by a templates/emailsent.php Multiple Parameter Reflected XSS security vulnerability...
SS Downloads 1.4.4.1 - templates/email&nameform.php Multiple Parameter Reflected XSS
The SS Downloads WordPress plugin was affected by a templates/email&nameform.php; Multiple Parameter Reflected XSS security vulnerability...