FreeBSD-SA-19:02.fd - Privilege Escalation

FreeBSD-SA-19:02.fd - Privilege Escalation Exploit: FreeBSD-SA-19:02.fd - Privilege Escalation Date: 2019-12-30 Author: Karsten König of Secfault Security Twitter: @gr4yf0x Kudos: Maik, greg and Dirk for discussion and inspiration CVE: CVE-2019-5596 libmap.conf primitive inspired by kcope's 2005...

FreeBSD-SA-19:02.fd - Privilege Escalation

Exploit: FreeBSD-SA-19:02.fd - Privilege Escalation Date: 2019-12-30 Author: Karsten König of Secfault Security Twitter: @gr4yf0x Kudos: Maik, greg and Dirk for discussion and inspiration CVE: CVE-2019-5596 libmap.conf primitive inspired by kcope's 2005 exploit for Qpopper !/bin/sh echo "+ Root...

FreeBSD fd Privilege Escalation

Exploit: FreeBSD-SA-19:02.fd - Privilege Escalation Date: 2019-12-30 Author: Karsten König of Secfault Security Twitter: @gr4yf0x Kudos: Maik, greg and Dirk for discussion and inspiration CVE: CVE-2019-5596 libmap.conf primitive inspired by kcope's 2005 exploit for Qpopper !/bin/sh echo "+ Root...

CVE-2019-5596

creationtimestamp| type| source ---|---|--- 2019-12-30 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47829 2026-07-29 12:00:44+00:00| seen| https://t.me/CVEhub/9395 2026-07-30 00:01:14+00:00| seen| https://t.me/CVEhub/9395 2026-07-31 11:00:04+00:00| published-proof-of-concept|...

CVE-2019-5596

Removed by vendor...

CVE-2019-5596

CVE-2019-5596 affects FreeBSD 11.2-STABLE after r338618 and before r343786, and 12.0-STABLE before r343781 and 12.0-RELEASE before 12.0-RELEASE-p3. Description: a bug in the reference count handling for UNIX-domain sockets can cause the kernel to incorrectly release a file structure, enabling a l...

FreeBSD-SA-19:02.fd

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-19:02.fd Security Advisory The FreeBSD Project Topic: File description reference count leak Category: core Module: unix Announced: 2019-02-05 Credits: Peter Hol...

SUSE SLED12 / SLES12 Security Update : wireshark (SUSE-SU-2017:1442-1)

Wireshark was updated to version 2.2.6, which brings several new features, enhancements and bug fixes. Thses security issues were fixed : - CVE-2017-7700: In Wireshark the NetScaler file parser could go into an infinite loop, triggered by a malformed capture file. This was addressed in...

[SECURITY] [DSA 3811-1] wireshark security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3811-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 18, 2017 https://www.debian.org/security/faq -...

Fedora Update for wireshark FEDORA-2017-541aea2890

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-5596

Wireshark CVE-2017-5596 affects the ASTERIX dissector in Wireshark 2.2.0–2.2.3 and 2.0.0–2.0.9. The vulnerability stems from an integer overflow in the dissector code (epan/dissectors/packet-asterix.c) that could trigger an infinite loop when processing crafted or malformed packets. The issue was...

CVE-2016-5596

Technical details about CVE-2016-5596 are not publicly provided in the supplied documents; no affected product/version, vulnerability type, or remediation is specified. Monitor Oracle CPU advisories and vendor updates for disclosure.

SUSE SLED11 / SLES11 Security Update : wireshark (SUSE-SU-2013:0238-1)

This update to 1.8.4 fixes the following issues : - Wireshark could leak potentially sensitive host name resolution information when working with multiple pcap-ng files. wnpa-sec-2012-30, CVE-2012-5592 - The USB dissector could go into an infinite loop. wnpa-sec-2012-31, CVE-2012-5593 - The sFlow...

CVE-2014-5596

The Homerun Battle 2 aka com.com2us.homerunbattle2.normal.freefull.google.global.android.common application 1.2.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5596

CVE-2014-5596 affects the Android app Homerun Battle 2 (com.com2us.homerunbattle2.normal.freefull.google.global.android.common) version 1.2.2.0. The vulnerability is that the app does not verify X.509 certificates when connecting to SSL servers, which can allow a man-in-the-middle attacker to spo...

openSUSE Security Update : seamonkey (openSUSE-SU-2013:1644-1)

update to SeaMonkey 2.22 bnc847708 - rebased patches - requires NSS 3.15.2 or higher - MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592 Miscellaneous memory safety hazards - MFSA 2013-94/CVE-2013-5593 bmo868327 Spoofing addressbar through SELECT element - MFSA 2013-95/CVE-2013-5604...

openSUSE Security Update : seamonkey (openSUSE-SU-2013:1788-1)

update to SeaMonkey 2.22 bnc847708 - rebased patches - requires NSS 3.15.2 or higher - MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592 Miscellaneous memory safety hazards - MFSA 2013-94/CVE-2013-5593 bmo868327 Spoofing addressbar through SELECT element - MFSA 2013-95/CVE-2013-5604...

openSUSE: Security Advisory for Mozilla (openSUSE-SU-2013:1634-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE Update for Mozilla Suite openSUSE-SU-2013:1633-1 (Mozilla Suite)

Check for the Version of Mozilla Suite OpenVAS Vulnerability Test $Id: gbsuse201316331.nasl 8045 2017-12-08 08:39:37Z santu $ SuSE Update for Mozilla Suite openSUSE-SU-2013:1633-1 Mozilla Suite Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH,...

Mozilla Suite: Update to October 2013 release (important)

MozillaFirefox was updated to Firefox 25.0. MozillaThunderbird was updated to Thunderbird 24.1.0. Mozilla XULRunner was updated to 17.0.10esr. Mozilla NSPR was updated to 4.10.1. Changes in MozillaFirefox: requires NSS 3.15.2 or above MFSA 2013-93/CVE-2013-5590/CVE-2013-5591/CVE-2013-5592...