CVE-2017-3881-Cisco

CVE-2017-3881 Cisco Catalyst RCE Proof-Of-Concept Apr 10, 2017 Do you still have telnet enabled on your Catalyst switches? Think twice, here’s a proof-of-concept remote code execution exploit for Catalyst 2960 switch with latest suggested firmware. Check out the exploit code here. What follows is...

security-interview-questions

来源 测验：https://quizlet.com/231268221/general-information-security-questions-flash-cards/ SANS 速查表：https://www.sans.org/blog/the-ultimate-list-of-sans-cheat-sheets/ Offensive Security（OSCP）：https://411hall.github.io/OSCP-Preparation/ https://medium.com/@falconspy/oscp-exam-attempt-1-1893df5a0a00...

hive

De WikiLeaks: Hoy, 9 de noviembre de 2017, WikiLeaks publica el código fuente y los registros de desarrollo de Hive, un componente principal de la infraestructura de la CIA para controlar su malware. Hive resuelve un problema crítico para los operadores de malware de la CIA. Incluso el implante d...

The vulnerability of the vmci_transport_recv_listen() function in the net/vmw_vsock/vmci_transport.c module, which is part of the networking functions of the Linux kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the vmcitransportrecvlisten function in the net/vmwvsock/vmcitransport.c module, which is part of the networking functions of the Linux kernel, is related to resource management errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the vti6_tnl_lookup() function in the net/ipv6/ip6_vti.c module of the IPv6 protocol implementation in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the vti6tnllookup function in the net/ipv6/ip6vti.c module of the IPv6 protocol implementation in the Linux operating system is related to incorrect checking of the unsafe equivalence of input data. Exploiting this vulnerability may allow an attacker, acting remotely, to...

The vulnerability of the vfiopci_core_close_device() function in the drivers/vfio/pci/vfiopci_core.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the vfiopcicoreclosedevice function in the drivers/vfio/pci/vfiopcicore.c module of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the crush_decode() function in the net/ceph/osdmap.c kernel of the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the crushdecode function in the net/ceph/osdmap.c module of the Linux kernel is related to incorrect assumptions regarding the organization of data or memory. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and...

The vulnerability of the nft_exthdr_init() function in the net/netfilter/nft_exthdr.c module of the netfilter component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the nftexthdrinit function in the net/netfilter/nftexthdr.c module of the netfilter component of the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...

The vulnerability of the `scpsys_get_bus_protection_legacy()` function in the drivers/pmdomain/mediatek/mtk-pm-domains.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the scpsysgetbusprotectionlegacy function in the drivers/pmdomain/mediatek/mtk-pm-domains.c module of the Linux kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity,...

The vulnerability of the check_scalar_ids() function in the kernel/bpf/verifier.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the checkscalarids function in the kernel/bpf/verifier.c module of the Linux operating system is related to state management errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the `ivpu_ipc_receive()` function in the drivers/accel/ivpu/ivpu_ipc.c kernel module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ivpuipcreceive function in the drivers/accel/ivpu/ivpuipc.c module of the Linux kernel is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerabilities of the functions bpf_iter_task_vma_new() and bpf_iter_task_vmaDestroy() in the kernel module bpf/task_iter.c of the Linux operating system allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerabilities of the functions bpfitertaskvmanew and bpfitertaskvmaDestroy in the kernel module bpf/taskiter.c of the Linux operating system are related to the reutilization of previously released memory. Exploiting these vulnerabilities could allow an attacker to compromise the...

The vulnerability of the vmBindJobLockObjects() function in the drivers/gpu/drm/msm/msm_gem_vma.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the vmBindJobLockObjects function in the drivers/gpu/drm/msm/msmgemvma.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to improper locking of resources. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the isert_login_recvdone() function in the drivers/infiniband/ulp/isert/ib_isert.c module of the Linux operating system’s InfiniBand driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the isertloginrecvdone function in the drivers/infiniband/ulp/isert/ibisert.c driver of the Linux operating system’s InfiniBand module is related to incorrect assumptions regarding the organization of data or memory. Exploiting this vulnerability could allow a remote attacker...

The vulnerability of the tipc_bufAppend() function in the net/tipc/msg.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tipcbufAppend function in the net/tipc/msg.c module of the Linux operating system is related to the repeated release of previously released memory. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the xfrm_policy_fini() function in the net/xfrm/xfrm_policy.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the xfrmpolicyfini function in the net/xfrm/xfrmpolicy.c module of the Linux kernel is related to situations where there is a competition for context switching. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibili...

The vulnerability in the `init_kfd_vm()` function of the drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c driver, a component of the AMD GPU kernel for Linux operating systems, allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the initkfdvm function in the drivers/gpu/drm/amd/amdgpu/amdgpuamdkfdgpuvm.c driver for AMD GPU cores in Linux operating systems is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality,...

The vulnerability of the `__acquires()` function in the drivers/usb/chipidea/udc.c module of the Linux operating system’s USB device driver framework allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the acquires function in the drivers/usb/chipidea/udc.c module of the Linux device driver framework is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, a...

The vulnerability of the mlx5e_skb_from_cqe_mpwrq_nonlinear() function in the drivers/net/ethernet/mellanox/mlx5/core/en_rx.c driver of the Mellanox Ethernet network adapter for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the mlx5eskbfromcqempwrqnonlinear function in the drivers/net/ethernet/mellanox/mlx5/core/enrx.c file of the Ethernet Mellanox network adapter driver in the Linux operating system is related to errors in resource counters. Exploiting this vulnerability could allow an attacker...

The vulnerability of the i2c_imx_master_isr() function in the drivers/i2c/busses/i2c-imx.c module of the I2C driver for the Linux operating system’s hardware bus allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the i2cimxmasterisr function in the drivers/i2c/busses/i2c-imx.c module of the I2C driver for the Linux operating system is related to the use of a pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility o...