2092 matches found
MAL-2022-5467 Malicious code in proc-title (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59afad326fc37fe3e90463876138d8a2d3f252f2c8c52ac57ac2de831674beea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EulerOS Virtualization 2.10.1 : util-linux (EulerOS-SA-2022-2069)
According to the versions of the util-linux package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an...
UBUNTU-CVE-2022-2320
A flaw was found in the Xorg-x11-server. The specific flaw exists within the handling of ProcXkbSetDeviceInfo requests. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an allocated buffer. This flaw allows an attacker...
PT-2022-1371 · Google +3 · Android Kernel +3
Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a race condition in the emulation proc handler function of armv8 deprecated.c, which could lead to memory corruption. This may result in local escalation of privilege without requiring...
CVE-2022-20198
In llcpdlcprocconnectpdu of llcpdlc.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure from the NFC stack with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...
GHSA-VFJC-2QCW-J95J Docker Moby /proc/scsi Path Exposure Allows Host Data Loss (SCSI MICDROP)
The DefaultLinuxSpec function in oci/defaults.go in Docker Moby through 17.03.2-ce does not block /proc/scsi pathnames, which allows attackers to trigger data loss when certain older Linux kernels are used by leveraging Docker container access to write a "scsi remove-single-device" line to...
GSD-2022-1001632 ALSA: pcm: Fix races among concurrent prealloc proc writes
ALSA: pcm: Fix races among concurrent prealloc proc writes This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.18 by commit...
CVE-2011-4917
In the Linux kernel through 3.1 there is an information disclosure issue via /proc/stat...
UBUNTU-CVE-2011-4917
In the Linux kernel through 3.1 there is an information disclosure issue via /proc/stat...
Information disclosure
In the Linux kernel through 3.1 there is an information disclosure issue via /proc/stat...
CVE-2011-4917
In the Linux kernel through 3.1 there is an information disclosure issue via /proc/stat...
CVE-2011-4917
In the Linux kernel through 3.1 there is an information disclosure issue via /proc/stat...
CVE-2011-4917
CVE-2011-4917 : Information disclosure in the Linux kernel up to 3.1 via /proc/stat. Local access required; low attack complexity with LOW privileges and partial confidentiality impact (CVSS v3.1 base score 5.5). Root cause: kernel information leakage through /proc/stat. Affected product: Linux k...
Linux kernel 安全漏洞
The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. The Linux kernel has a security vulnerability that can be exploited by an attacker via /proc/stat...
COMPIE CMS Leado Local File Include Vulnerability
Exploit Title: COMPIE CMS Leado Local File Include Google Dork: /index.php?pathAjax= Date: 3/30/2022 Exploit Author: iranhack Security Team Vendor Homepage: iranhack.com Software Link: http://www.compie.co.il/ Version: V.1.0 Tested on: KaliLinux,windows 10 Local File Include...
GSD-2022-1000526 fs/proc: task_mmu.c: don't read mapcount for migration entry
fs/proc: taskmmu.c: don't read mapcount for migration entry This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.10 by commit...
Updated util-linux packages fix security vulnerability
An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic...
GHSA-FGV8-VJ5C-2PPQ Incorrect Authorization in runc
runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction bypass because libcontainer/rootfslinux.go incorrectly checks mount targets, and thus a malicious Docker image can mount over a /proc directory...
GSD-2022-1000156 net: fix information leakage in /proc/net/ptype
net: fix information leakage in /proc/net/ptype This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.176 by commit...
GSD-2022-1000102 net: fix information leakage in /proc/net/ptype
net: fix information leakage in /proc/net/ptype This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.265 by commit...