120 matches found
CVE-2018-4170
CVE-2018-4170 affects macOS High Sierra prior to 10.13.4 (Admin Framework). A local attacker could disclose passwords by listing the sysadminctl process and its command-line arguments, which included the password parameter. Apple mitigated this in macOS 10.13.4 Security Update 2018-002 (and relat...
CVE-2017-4170
CVE-2017-4170 is rejected; this CVE ID is not used and does not represent an active vulnerability entry.
CVE-2016-4170
CVE-2016-4170 is an XSS vulnerability in Adobe Experience Manager affecting versions 5.6.1, 6.0, 6.1, and 6.2. The connected documents confirm the flaw is a cross‑site scripting issue exploited via unspecified vectors, with impact described as injection of arbitrary web script or HTML. The Threat...
RHEL 7 : kernel (RHSA-2016:1395)
Updated kernel packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 7 Extended Update Support. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detail...
CVE-2015-4170
Race condition in the ldsemcmpxchg function in drivers/tty/ttyldsem.c in the Linux kernel before 3.13-rc4-next-20131218 allows local users to cause a denial of service ldsemdownread and ldsemdownwrite deadlock by establishing a new tty thread during shutdown of a previous tty thread...
CVE-2015-4170
Race condition in the ldsemcmpxchg function in drivers/tty/ttyldsem.c in the Linux kernel before 3.13-rc4-next-20131218 allows local users to cause a denial of service ldsemdownread and ldsemdownwrite deadlock by establishing a new tty thread during shutdown of a previous tty thread...
CVE-2015-4170
CVE-2015-4170 describes a race condition in the Linux kernel’s tty shutdown path: in ldsem_cmpxchg() within drivers/tty/tty_ldsem.c, allowing a local user to trigger a deadlock (ldsem_down_read/ldsem_down_write) by starting a new tty thread during shutdown of a previous one. The affected codebase...
SOL12903841 - Linux kernel vulnerabilities CVE-2015-4170, CVE-2015-6526, and CVE-2015-7837
Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...
Scientific Linux Security Update : kernel on SL7.x x86_64 (20151119)
A flaw was found in the way the Linux kernel's file system implementation handled rename operations in which the source was inside and the destination was outside of a bind mount. A privileged user inside a container could use this flaw to escape the bind mount and, potentially, escalate their...
kernel, perf, python security update
CentOS Errata and Security Advisory CESA-2015:2152 Updated kernel packages that fix multiple security issues, address several hundred bugs, and add numerous enhancements are now available as part of the ongoing support and maintenance of Red Hat Enterprise Linux version 7. This is the second...
RedHat Update for kernel RHSA-2015:2152-02
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Important: Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update
Updated kernel-rt packages that fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, whic...
Oracle: Security Advisory (ELSA-2010-0894)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Improper Access Control in ArticleFR
Advisory ID: HTB23219 Product: ArticleFR Vendor: Free Reprintables Vulnerable Versions: 11.06.2014 and probably prior Tested Version: 11.06.2014 Advisory Publication: June 11, 2014 without technical details Vendor Notification: June 11, 2014 Public Disclosure: July 30, 2014 Vulnerability Type:...
ArticleFR 11.06.2014 (data.php) - Privilege Escalation
No description provided by source. Advisory ID: HTB23219 Product: ArticleFR Vendor: Free Reprintables Vulnerable Versions: 11.06.2014 and probably prior Tested Version: 11.06.2014 Advisory Publication: June 11, 2014 without technical details Vendor Notification: June 11, 2014 Public Disclosure:...
ArticleFR 11.06.2014 - data.php Privilege Escalation
ArticleFR 11.06.2014 - data.php Privilege Escalation Advisory ID: HTB23219 Product: ArticleFR Vendor: Free Reprintables Vulnerable Versions: 11.06.2014 and probably prior Tested Version: 11.06.2014 Advisory Publication: June 11, 2014 without technical details Vendor Notification: June 11, 2014...
ArticleFR 11.06.2014 - 'data.php' Privilege Escalation
Advisory ID: HTB23219 Product: ArticleFR Vendor: Free Reprintables Vulnerable Versions: 11.06.2014 and probably prior Tested Version: 11.06.2014 Advisory Publication: June 11, 2014 without technical details Vendor Notification: June 11, 2014 Public Disclosure: July 30, 2014 Vulnerability Type:...
Free Reprintables ArticleFR 11.06.2014 Improper Access Control
Advisory ID: HTB23219 Product: ArticleFR Vendor: Free Reprintables Vulnerable Versions: 11.06.2014 and probably prior Tested Version: 11.06.2014 Advisory Publication: June 11, 2014 without technical details Vendor Notification: June 11, 2014 Public Disclosure: July 30, 2014 Vulnerability Type:...
systemtap - Local Root Privilege Escalation Vulnerability
No description provided by source. CVE-2010-4170 printf install uprobes /bin/sh exploit.conf; MODPROBEOPTIONS=-C exploit.conf staprun -u whatever RHEL Advisory: https://rhn.redhat.com/errata/RHSA-2010-0894.html...