2721 matches found
CVE-2014-0484
The CVE-2014-0484 entry concerns the Debian acpi-support package prior to 0.140-5+deb7u3, which allows local users to gain privileges via vectors related to the user's environment. The issue is a local privilege escalation (no remote vector reported) affecting Debian releases using these package ...
CVE-2014-0484
The Debian acpi-support package before 0.140-5+deb7u3 allows local users to gain privileges via vectors related to the "user's environment."...
CVE-2014-0484
The Debian acpi-support package before 0.140-5+deb7u3 allows local users to gain privileges via vectors related to the "user's environment."...
[SECURITY] [DLA 49-1] acpi-support security update
Package : acpi-support Version : 0.137-5+deb6u2 CVE ID : CVE-2014-0484 During a review for EDF, Raphael Geissert discovered that the acpi-support package did not properly handle data obtained from a users environment...
DLA-49-1 acpi-support - security update
Bulletin has no description...
[SECURITY] [DSA 3020-1] acpi-support security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3020-1 [email protected] http://www.debian.org/security/ Raphael Geissert September 10, 2014 http://www.debian.org/security/faq -...
acpi-support privilege escalation
Race conditions, memory corruption...
Debian DSA-3020-1 : acpi-support - security update
During a review for EDF, Raphael Geissert discovered that the acpi-support package did not properly handle data obtained from a user's environment. This could lead to program malfunction or allow a local user to escalate privileges to the root user due to a programming error. %NASLMINLEVEL 70300 ...
[SECURITY] [DSA 3020-1] acpi-support security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3020-1 [email protected] http://www.debian.org/security/ Raphael Geissert September 10, 2014 http://www.debian.org/security/faq -...
DSA-3020-1 acpi-support - security update
Bulletin has no description...
Debian Security Advisory DSA 3020-1 (acpi-support - security update)
During a review for EDF, Raphael Geissert discovered that the acpi-support package did not properly handle data obtained from a user OpenVAS Vulnerability Test $Id: deb3020.nasl 6735 2017-07-17 09:56:49Z teissa $ Auto-generated from advisory DSA 3020-1 using nvtgen 1.0 Script version: 1.0 Author:...
Debian: Security Advisory (DSA-3020-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2014-6445 · Qemu +3 · Qemu +3
Name of the Vulnerable Software and Affected Versions: QEMU affected versions not specified Description: The issue is related to an off-by-one error in the pci read function within the ACPI PCI hotplug interface. This error can be triggered by a crafted PCI device, leading to memory corruption. A...
UBUNTU-CVE-2014-5388
Off-by-one error in the pciread function in the ACPI PCI hotplug interface hw/acpi/pcihp.c in QEMU allows local guest users to obtain sensitive information and have other unspecified impact related to a crafted PCI device that triggers memory corruption...
CVE-2014-5388
Off-by-one error in the pciread function in the ACPI PCI hotplug interface hw/acpi/pcihp.c in QEMU allows local guest users to obtain sensitive information and have other unspecified impact related to a crafted PCI device that triggers memory corruption...
[SECURITY] [DSA 2984-2] acpi-support regression update
------------------------------------------------------------------------- Debian Security Advisory DSA-2984-2 [email protected] http://www.debian.org/security/ Raphael Geissert August 11, 2014 http://www.debian.org/security/faq -...
DSA-2984-2 acpi-support - regression update
Bulletin has no description...
[DLA 30-1] acpi-support security update
Package : acpi-support Version : 0.137-5+deb6u1 CVE ID : CVE-2014-1419 CESG discovered a race condition in acpi-support which may allow an unprivileged user to execute arbitrary code as a different user, including root...
DLA-30-1 acpi-support - security update
Bulletin has no description...
[USN-2297-1] acpi-support vulnerability
========================================================================== Ubuntu Security Notice USN-2297-1 July 22, 2014 acpi-support vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...