3433 matches found
FreeBSD -- ktrace kernel memory disclosure
Problem Description: Due to an overlooked merge to -STABLE branches, the size for page fault kernel trace entries was set incorrectly. Impact: A user who can enable kernel process tracing could end up reading the contents of kernel memory. Such memory might contain sensitive information, such as...
CVE-2014-3272
The Agent in Cisco Tidal Enterprise Scheduler TES 6.1 and earlier allows local users to gain privileges via crafted Tidal Job Buffers TJB parameters, aka Bug ID CSCuo33074...
Design/Logic Flaw
The Agent in Cisco Tidal Enterprise Scheduler TES 6.1 and earlier allows local users to gain privileges via crafted Tidal Job Buffers TJB parameters, aka Bug ID CSCuo33074...
CVE-2014-3272
The Agent in Cisco Tidal Enterprise Scheduler TES 6.1 and earlier allows local users to gain privileges via crafted Tidal Job Buffers TJB parameters, aka Bug ID CSCuo33074...
Cisco Tidal Enterprise Scheduler Agent Privilege Escalation Vulnerability
A vulnerability in Cisco Tidal Enterprise Scheduler Agent could allow an authenticated, local attacker to execute arbitrary commands on the affected system with the privileges of the root user. The vulnerability is due to insufficient validation of the Tidal Job Buffers TJB parameters when the...
apache-commons-fileupload: denial of service due to too-small buffer size used by MultipartStream
A denial of service flaw was found in the way Apache Commons FileUpload, which is embedded in Tomcat and JBoss Web, handled small-sized buffers used by MultipartStream. A remote attacker could use this flaw to create a malformed Content-Type header for a multipart request, causing Tomcat to enter...
apache-commons-fileupload: denial of service due to too-small buffer size used by MultipartStream
A denial of service flaw was found in the way Apache Commons FileUpload, which is embedded in Tomcat and JBoss Web, handled small-sized buffers used by MultipartStream. A remote attacker could use this flaw to create a malformed Content-Type header for a multipart request, causing Tomcat to enter...
UBUNTU-CVE-2014-1746
The InMemoryUrlProtocol::Read function in media/filters/inmemoryurlprotocol.cc in Google Chrome before 35.0.1916.114 relies on an insufficiently large integer data type, which allows remote attackers to cause a denial of service out-of-bounds read via vectors that trigger use of a large buffer...
Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20140507)
A flaw was found in the way the Linux kernel's netfilter connection tracking implementation for Datagram Congestion Control Protocol DCCP packets used the skbheaderpointer function. A remote attacker could use this flaw to send a specially crafted DCCP packet to crash the system or, potentially,...
Important: Red Hat Security Advisory: kernel security and bug fix update
Updated kernel packages that fix three security issues and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severit...
kernel: vhost-net: insufficiency in handling of big packets in handle_rx()
drivers/vhost/net.c in the Linux kernel before 3.13.10, when mergeable buffers are disabled, does not properly validate packet lengths, which allows guest OS users to cause a denial of service memory corruption and host OS crash or possibly gain privileges on the host OS via crafted packets,...
UBUNTU-CVE-2014-0198
The dossl3write function in s3pkt.c in OpenSSL 1.x through 1.0.1g, when SSLMODERELEASEBUFFERS is enabled, does not properly manage a buffer pointer during certain recursive calls, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash via vectors...
Cisco IOS Server HTTP Interface Cross Site Scripting - Ver2 (CVE-2005-3921)
A cross-site scripting vulnerability has been reported in Cisco Ios. An attacker could exploit this vulnerability an HTTP interface to the contents of memory buffers. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...
DEBIAN-CVE-2014-0077
drivers/vhost/net.c in the Linux kernel before 3.13.10, when mergeable buffers are disabled, does not properly validate packet lengths, which allows guest OS users to cause a denial of service memory corruption and host OS crash or possibly gain privileges on the host OS via crafted packets,...
UBUNTU-CVE-2010-5298
Race condition in the ssl3readbytes function in s3pkt.c in OpenSSL through 1.0.1g, when SSLMODERELEASEBUFFERS is enabled, allows remote attackers to inject data across sessions or cause a denial of service use-after-free and parsing error via an SSL connection in a multithreaded environment...
UBUNTU-CVE-2014-0077
drivers/vhost/net.c in the Linux kernel before 3.13.10, when mergeable buffers are disabled, does not properly validate packet lengths, which allows guest OS users to cause a denial of service memory corruption and host OS crash or possibly gain privileges on the host OS via crafted packets,...
Vulnerability in core server (CVE-2014-0065)
Potential buffer overruns of fixed-size buffers...
EMC AlphaStor Library Manager 0x4f Command Remote Code Execution Vulnerability
This vulnerability potentially allows remote attackers to execute arbitrary code on vulnerable installations of EMC AlphaStor for EMC Networker. Authentication is not required to exploit this vulnerability. The specific flaw exists within Library Manager robotd.exe which listens by default on por...
ABB MicroSCADA Wserver Multiple Buffer Overflows
Multiple Buffer Overflow vulnerabilities have been reported in the Wserver component of ABB MicroSCADA. The vulnerabilities are due to the copying of user controlled data to stack-based buffers without size verification. A remote attacker can exploit this issue by sending a specially crafted...