Lucene search
+L

1140 matches found

attackerkb
attackerkb
•added 2013/02/13 4:55 p.m.•15 views

CVE-2013-0208

The boot-from-volume feature in OpenStack Compute Nova Folsom and Essex, when using nova-volumes, allows remote authenticated users to boot from other users' volumes via a volume id in the blockdevicemapping parameter...

6.5CVSS5.6AI score0.02505EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
•added 2013/02/13 12:00 a.m.•3 views

PT-2013-2159

Name of the Vulnerable Software and Affected Versions OpenStack Compute Nova versions Folsom through Essex Description The boot-from-volume feature in OpenStack Compute Nova allows remote authenticated users to boot from other users' volumes via a volume id in the block device mapping parameter...

6.5CVSS0.02505EPSS
SaveExploits0References16
RedHat Linux
RedHat Linux
•added 2013/01/30 8:59 p.m.•18 views

openstack-nova: Boot from volume allows access to random volumes

The boot-from-volume feature in OpenStack Compute Nova Folsom and Essex, when using nova-volumes, allows remote authenticated users to boot from other users' volumes via a volume id in the blockdevicemapping parameter...

6.5CVSS5.3AI score0.02505EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2012/08/01 12:00 a.m.•83 views

Scientific Linux Security Update : kernel on SL5.x i386/x86_64 (20120110)

The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues : - A buffer overflow flaw was found in the way the Linux kernel's XFS file system implementation handled links with overly long path names. A local, unprivileged...

7.8CVSS6.6AI score0.03769EPSS
SaveExploits10References9
Tenable Nessus
Tenable Nessus
•added 2012/08/01 12:00 a.m.•68 views

Scientific Linux Security Update : kernel on SL5.x i386/x86_64

These new kernel packages contain fixes for the following security issues : A memory leak was found in the Red Hat Content Accelerator kernel patch. A local user could use this flaw to cause a denial of service memory exhaustion. CVE-2007-5494, Important A flaw was found in the handling of IEEE...

7.1CVSS5.3AI score0.0324EPSS
SaveExploits6References4
Tenable Nessus
Tenable Nessus
•added 2012/08/01 12:00 a.m.•33 views

Scientific Linux Security Update : udev on SL5.x i386/x86_64

It was discovered that udev did not properly check the origin of Netlink messages. A local attacker could use this flaw to gain root privileges via a crafted Netlink message sent to udev, causing it to create a world-writable block device file for an existing system block device for example, the...

7.2CVSS7.5AI score0.80416EPSS
SaveExploits14References2
OSV
OSV
•added 2012/07/03 4:40 p.m.•18 views

DEBIAN-CVE-2011-4127

The Linux kernel before 3.2.2 does not properly restrict SGIO ioctl calls, which allows local users to bypass intended restrictions on disk read and write operations by sending a SCSI command to 1 a partition block device or 2 an LVM volume...

4.6CVSS6.7AI score0.00566EPSS
SaveExploits2References1
Mend
Mend
•added 2012/07/03 4:00 p.m.•3 views

CVE-2011-4127

The Linux kernel before 3.2.2 does not properly restrict SGIO ioctl calls, which allows local users to bypass intended restrictions on disk read and write operations by sending a SCSI command to 1 a partition block device or 2 an LVM volume...

5.9CVSS0.00566EPSS
SaveExploits2References12
Cvelist
Cvelist
•added 2012/07/03 4:00 p.m.•43 views

CVE-2011-4127

The Linux kernel before 3.2.2 does not properly restrict SGIO ioctl calls, which allows local users to bypass intended restrictions on disk read and write operations by sending a SCSI command to 1 a partition block device or 2 an LVM volume...

6.4AI score0.00566EPSS
SaveExploits2References10
Tenable Nessus
Tenable Nessus
•added 2012/03/27 12:00 a.m.•60 views

Ubuntu 11.10 : linux vulnerabilities (USN-1405-1)

Paolo Bonzini discovered a flaw in Linux's handling of the SGIO ioctl command. A local user, or user in a VM could exploit this flaw to bypass restrictions and gain read/write access to all data on the affected block device. CVE-2011-4127 A flaw was found in the Linux kernel's ext4 file system wh...

7.8CVSS6.2AI score0.02701EPSS
SaveExploits8References9
Amazon
Amazon
•added 2012/03/16 12:00 a.m.•95 views

Medium: kernel

Issue Overview: A buffer overflow flaw was found in the way the Linux kernel's XFS file system implementation handled links with overly long path names. A local, unprivileged user could use this flaw to cause a denial of service or escalate their privileges by mounting a specially-crafted disk...

7.8CVSS6.7AI score0.20276EPSS
SaveExploits15References1
OpenVAS
OpenVAS
•added 2012/03/16 12:00 a.m.•74 views

Ubuntu: Security Advisory (USN-1330-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.4AI score0.00534EPSS
SaveExploits7References2
OpenVAS
OpenVAS
•added 2012/03/16 12:00 a.m.•41 views

Ubuntu Update for linux-ti-omap4 USN-1330-1

Ubuntu Update for Linux kernel vulnerabilities USN-1330-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN13301.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for linux-ti-omap4 USN-1330-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.n...

7.2CVSS7.6AI score0.00534EPSS
SaveExploits7References2
OpenVAS
OpenVAS
•added 2012/03/16 12:00 a.m.•77 views

Ubuntu: Security Advisory (USN-1336-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.6AI score0.10753EPSS
SaveExploits18References2
RedHat Linux
RedHat Linux
•added 2012/03/06 5:37 p.m.•18 views

kernel: possible privilege escalation via SG_IO ioctl

The Linux kernel before 3.2.2 does not properly restrict SGIO ioctl calls, which allows local users to bypass intended restrictions on disk read and write operations by sending a SCSI command to 1 a partition block device or 2 an LVM volume...

4.6CVSS6.2AI score0.00566EPSS
SaveExploits2References4
RedHat Linux
RedHat Linux
•added 2012/02/23 8:18 p.m.•16 views

kernel: jbd/jbd2: invalid value of first log block leads to oops

The cleanupjournaltail function in the Journaling Block Device JBD functionality in the Linux kernel 2.6 allows local users to cause a denial of service assertion error and kernel oops via an ext3 or ext4 image with an "invalid log first block value."...

2.1CVSS7.7AI score0.00468EPSS
SaveExploits2References4
NVD
NVD
•added 2012/01/27 3:55 p.m.•28 views

CVE-2011-4132

The cleanupjournaltail function in the Journaling Block Device JBD functionality in the Linux kernel 2.6 allows local users to cause a denial of service assertion error and kernel oops via an ext3 or ext4 image with an "invalid log first block value."...

2.1CVSS6AI score0.00468EPSS
SaveExploits2References10
Prion
Prion
•added 2012/01/27 3:55 p.m.•32 views

Code injection

The cleanupjournaltail function in the Journaling Block Device JBD functionality in the Linux kernel 2.6 allows local users to cause a denial of service assertion error and kernel oops via an ext3 or ext4 image with an "invalid log first block value."...

2.1CVSS6.6AI score0.00468EPSS
SaveExploits2References10Affected Software2
OpenVAS
OpenVAS
•added 2012/01/25 12:00 a.m.•292 views

Ubuntu Update for linux-lts-backport-oneiric USN-1340-1

Ubuntu Update for Linux kernel vulnerabilities USN-1340-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN13401.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for linux-lts-backport-oneiric USN-1340-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH,...

7.2CVSS7.3AI score0.00534EPSS
SaveExploits7References2
OpenVAS
OpenVAS
•added 2012/01/25 12:00 a.m.•68 views

Ubuntu: Security Advisory (USN-1340-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.4AI score0.00534EPSS
SaveExploits7References2
Rows per page
Query Builder