66 matches found
CVE-2018-6441
CVE-2018-6441 involves a local bypass in the Secure Shell implementation of Brocade Fabric OS. Affected: Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d. Root cause: ability for a local attacker to provide arbitrary environment variables, bypassing the restricted configuration shell. Impa...
openSUSE Security Update : php7 (openSUSE-2017-790)
This update for php7 fixes the following security issues : - CVE-2017-9224: stack out-of-bounds read occurs in matchat could lead to Denial of service bsc1040891 - CVE-2017-9226: heap out-of-bounds write orread occurs in nextstateval could lead to Denial of servicebsc1040889 - CVE-2017-9227: stac...
CVE-2015-6441
This CVE entry is rejected/not used per the description; no vulnerability association.
CVE-2017-6441
The zvalgetlongfuncex in Zend/zendoperators.c in PHP 7.1.2 allows attackers to cause a denial of service NULL pointer dereference and application crash via crafted use of "declareticks=" in a PHP script. NOTE: the vendor disputes the classification of this as a vulnerability, stating "Please do n...
BELL-CVE-2017-6441 CVE-2017-6441 does not affect BellSoft software
Bulletin has no description...
CVE-2017-6441
CVE-2017-6441 affects PHP 7.1.2 where the function _zval_get_long_func_ex in Zend/zend_operators.c can trigger a denial of service via crafted use of declare(ticks=). The vulnerability leads to a NULL pointer dereference and application crash. Connected documents reference PHP 7.1.2 and describe ...
Debian DLA-442-1 : lxc security update
Brief introduction CVE-2013-6441 The template script lxc-sshd used to mount itself as /sbin/init in the container using a writable bind-mount. This update resolved the above issue by using a read-only bind-mount instead preventing any form of potentially accidental damage. CVE-2015-1335 On...
[SECURITY] [DLA 442-1] lxc security update
Package : lxc Version : 0.7.2-1+deb6u1 CVE ID : CVE-2013-6441 CVE-2015-1335 Debian Bug : 800471 Brief introduction CVE-2013-6441 The template script lxc-sshd used to mount itself as /sbin/init in the container using a writable bind-mount. This update resolved the above issue by using a read-only...
DLA-442-1 lxc - security update
Bulletin has no description...
SuSE 11.3 Security Update : lxc (SAT Patch Number 9084)
The container framework LXC has been updated to fix various bugs and a security issue : - The sshd template allowed privilege escalation on the host. CVE-2013-6441 - SLES container time not aligned with host time. bnc839653 - SLES container boot takes ages. bnc839663 - lxc mounts /dev/pts with...
[USN-2104-1] LXC vulnerability
========================================================================== Ubuntu Security Notice USN-2104-1 February 12, 2014 lxc vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubun...
SUSE-RU-2015:0992-1 Security update for lxc
The container framework LXC has been updated to fix various bugs and a security issue: CVE-2013-6441: The sshd template allowed privilege escalation on the host. SLES container time not aligned with host time bnc839653 SLES container boot takes ages bnc839663 lxc mounts /dev/pts with wrong option...
Updated lxc packages fix security vulnerability
Florian Sagar discovered that the LXC sshd template set incorrect mount permissions. An attacker could possibly use this flaw to cause privilege escalation on the host CVE-2013-6441...
CVE-2013-6441
The lxc-sshd template templates/lxc-sshd.in in LXC before 1.0.0.beta2 uses read-write permissions when mounting /sbin/init, which allows local users to gain privileges by modifying the init file...
CVE-2013-6441
CVE-2013-6441 affects the LXC template lxc-sshd (templates/lxc-sshd.in) in LXC prior to 1.0.0.beta2, where /sbin/init was mounted with writable permissions. This allowed local users to modify the init file and gain privileges. The issue is rooted in a writable bind-mount of /sbin/init inside the ...
CVE-2013-6441
The lxc-sshd template templates/lxc-sshd.in in LXC before 1.0.0.beta2 uses read-write permissions when mounting /sbin/init, which allows local users to gain privileges by modifying the init file...
CVE-2012-6441
CVE-2012-6441 is an information-exposure vulnerability affecting Rockwell Automation EtherNet/IP products, including 1756-ENBT/1768-ENBT/1768-EWEB modules, CompactLogix/L18-L19 controllers, GuardLogix, SoftLogix, MicroLogix 1100/1400, and associated NICs and adapters. The issue arises when the de...
CentOS 4 / 5 : wireshark (CESA-2008:0058)
Updated wireshark packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Wireshark is a program for monitoring network traffic. Wireshark was previously...
CVE-2008-6441
CVE-2008-6441 describes a format-string vulnerability in the Epic Games Unreal engine client used by multiple games, allowing remote servers to execute arbitrary code via (1) the CLASS parameter in a DLMGR command, (2) a malformed PKG, and possibly (3) the LEVEL parameter in a WELCOME command. Af...