161 matches found
CVE-2019-0038
The CVE-2019-0038 entry concerns Juniper SRX340/SRX345 devices running Junos OS. Affected component: management interface (fxp0). Root cause: crafted packets destined to fxp0 can exhaust buffer space, causing a denial of service (DoS) and service unresponsiveness. Impact is DoS affecting only SRX...
SUSE SLES12 Security Update : kernel (SUSE-SU-2017:3249-1) (Dirty COW)
The SUSE Linux Enterprise 12 kernel was updated to 3.12.61 to receive various security and bugfixes. The following security bugs were fixed : - CVE-2017-16939: The XFRM dump policy implementation in net/xfrm/xfrmuser.c in the Linux kernel allowed local users to gain privileges or cause a denial o...
SUSE SLES12 Security Update : kernel (SUSE-SU-2017:3210-1) (Dirty COW)
The SUSE Linux Enterprise 12 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2017-16939: The XFRM dump policy implementation in net/xfrm/xfrmuser.c in the Linux kernel allowed local users to gain privileges or cause a denial of servi...
SUSE-SU-2017:3210-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-16939: The XFRM dump policy implementation in net/xfrm/xfrmuser.c in the Linux kernel allowed local users to gain privileges or cause a denial of servic...
CVE-2013-0038
CVE-2013-0038 is rejected and not an active vulnerability entry.
Important Photon OS Security Update - PHSA-2017-0038
Updates of 'linux', 'linux-esx' packages of Photon OS have been released...
Windows gdi32.dll heap-based out-of-bounds reads / memory disclosure (CVE-2017-0038)
In issue 757, I described multiple bugs related to the handling of DIBs Device Independent Bitmaps embedded in EMF records, as implemented in the user-mode Windows GDI library gdi32.dll. As a quick reminder, the DIB-embedding records follow a common scheme: they include four fields, spots denotin...
Google Discloses Unpatched Microsoft Vulnerability
Google’s security researchers disclosed details of an unpatched Microsoft vulnerability in Windows’ GDI library that allows attackers to steal sensitive data from program memory. The flaw was first addressed by Microsoft last June, but Google said the patch was incomplete. As part of its 90-day...
CVE-2017-0038
The connected material describes a Windows IO Manager bug class (two-step: kernel-mode Initiator sets INPC and IFAC without OFAC; Receiver uses RequestorMode) that can bypass security checks and enable privilege escalation. It clarifies that INPC disables MemAC and SecAC, while OFAC can re-enable...
Microsoft Windows Graphics Component Information Disclosure (MS17-013: CVE-2017-0038)
An information disclosure vulnerability has been reported in Microsoft Windows. The vulnerability is due to the way the Windows GDI component improperly discloses the contents of its memory. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...
CVE-2017-0038
creationtimestamp| type| source ---|---|--- 2017-02-15 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41363 2017-03-03 21:33:33+00:00| published-proof-of-concept| https://t.me/canyoupwnme/880 2017-03-03 21:55:35+00:00| published-proof-of-concept| https://t.me/HackerOne/564...
Virtuozzo Linux Errata and Bugfix Advisory 2017:0038
Upstream security update. Follow RHBA-2017-0038 for details...
Linux Kernel 3.13.1 - 'Recvmmsg' Privilege Escalation (Metasploit)
Exploit for linux platform in category local exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require "msf/core" class MetasploitModule 'Linux Kernel 3.13.1 Recvmmsg Privilege Escalation', 'Description' = %q Th...
Linux Kernel 3.13.1 - 'Recvmmsg' Local Privilege Escalation (Metasploit)
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require "msf/core" class MetasploitModule 'Linux Kernel 3.13.1 Recvmmsg Privilege Escalation', 'Description' = %q This module attempts to exploit CVE-2014-0038, by sendin...
Linux Kernel 3.13.1 Recvmmsg Privilege Escalation
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require "msf/core" class MetasploitModule 'Linux Kernel 3.13.1 Recvmmsg Privilege Escalation', 'Description' = %q This module attempts to exploit CVE-2014-0038, by sendin...
CVE-2016-0038
CVE-2016-0038 affects Windows Journal across multiple Windows releases (Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, 8.1, Server 2012/2012 R2, Windows 10/1511). The vulnerability stems from improper handling/parsing of Journal files, enabling remote code execution when a user opens a crafted...
MS16-013: Security Update for Windows Journal to Address Remote Code Execution (3134811)
The remote Windows host is affected by a remote code execution vulnerability in Windows Journal due to improper parsing of Journal files. An unauthenticated, remote attacker can exploit this by convincing a user to open a specially crafted Journal file, resulting in the execution of arbitrary cod...
Microsoft Windows Journal CVE-2016-0038 Memory Corruption Vulnerability
Description Microsoft Windows is prone to a remote memory-corruption vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected...
Microsoft Windows Journal File Parsing Invalid Reference (MS16-013: CVE-2016-0038)
A remote code execution vulnerability has been reported in Microsoft Windows Journal. The vulnerability is due to the way Windows Journal resets a previously released object. Successful exploitation of this problem could allow malicious users to send a specially crafted .jnt file to a victim to...