Lucene search
K

15 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 5:38 a.m.1 views

SUSE CVE-2013-2207

ptchown in GNU C Library aka glibc or libc6 before 2.18 does not properly check permissions for tty files, which allows local users to change the permission on the files and obtain access to arbitrary pseudo-terminals by leveraging a FUSE file system...

2.6CVSS6.6AI score0.00071EPSS
Exploits0References7
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/18 1:30 a.m.38 views

Security Bulletin: Vulnerabilities in the GNU C Libraries (glibc) affect IBM Flex System Manager(FSM) (CVE-2013-2207, CVE-2014-8121, CVE-2015-1781)

Summary Multiple security vulnerabilities have been discovered in the GNU C Library glibc that is embedded in the IBM FSM. These vulnerabilities are addressed in this bulletin. Vulnerability Details CVEID: CVE-2013-2207 DESCRIPTION: The GNU C Library glibc could allow a local attacker to bypass...

6.8CVSS1AI score0.04751EPSS
Exploits1Affected Software1
Cloud Foundry
Cloud Foundry
added 2016/06/13 12:0 a.m.104 views

USN-2985-2 GNU C Library regression | Cloud Foundry

USN-2985-2 GNU C Library regression Medium Vendor GNU C, Canonical Ubuntu Versions Affected Ubuntu 14.04 LTS Description USN-2985-1 fixed vulnerabilities in the GNU C Library. The fix for CVE-2014-9761 introduced a regression which affected applications that use the libm library but were not full...

9.8CVSS9.5AI score0.12185EPSS
Exploits6
OpenVAS
OpenVAS
added 2016/05/27 12:0 a.m.42 views

Ubuntu: Security Advisory (USN-2985-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.4AI score0.04751EPSS
Exploits6References3
Tenable Nessus
Tenable Nessus
added 2016/05/27 12:0 a.m.38 views

Ubuntu 14.04 LTS : GNU C Library regression (USN-2985-2)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2985-2 advisory. USN-2985-1 fixed vulnerabilities in the GNU C Library. The fix for CVE-2014-9761 introduced a regression which affected applications that use the libm library but...

9.8CVSS7.8AI score0.01513EPSS
Exploits2References1
OpenVAS
OpenVAS
added 2016/05/26 12:0 a.m.36 views

Ubuntu: Security Advisory (USN-2985-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.4AI score0.12185EPSS
Exploits6References2
Tenable Nessus
Tenable Nessus
added 2015/08/25 12:0 a.m.48 views

SUSE SLED11 / SLES11 Security Update : glibc (SUSE-SU-2015:1424-1)

This update for glibc provides fixes for security and non-security issues. These security issues have been fixed : - CVE-2015-1781: Buffer length after padding in resolv/nssdns/dns-host.c. bsc927080 - CVE-2013-2207: ptchown did not properly check permissions for tty files, which allowed local use...

6.8CVSS7.6AI score0.04751EPSS
Exploits1References17
OpenVAS
OpenVAS
added 2014/10/20 12:0 a.m.45 views

Fedora Update for glibc FEDORA-2014-9830

Check the version of glibc SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868418";...

7.5CVSS9.1AI score0.21511EPSS
Exploits12References2
Tenable Nessus
Tenable Nessus
added 2013/11/26 12:0 a.m.52 views

Mandriva Linux Security Advisory : glibc (MDVSA-2013:283)

Updated glibc packages fixes the following security issues : Integer overflow in string/strcolll.c in the GNU C Library aka glibc or libc6 2.17 and earlier allows context-dependent attackers to cause a denial of service crash or possibly execute arbitrary code via a long string, which triggers a...

7.5CVSS8.2AI score0.18703EPSS
Exploits9References8
OSV
OSV
added 2013/10/09 10:55 p.m.3 views

CVE-2013-2207

ptchown in GNU C Library aka glibc or libc6 before 2.18 does not properly check permissions for tty files, which allows local users to change the permission on the files and obtain access to arbitrary pseudo-terminals by leveraging a FUSE file system...

8.8AI score
Exploits0References10
CVE
CVE
added 2013/10/09 10:0 p.m.101 views

CVE-2013-2207

CVE-2013-2207: In the GNU C Library (glibc), pt_chown() can bypass security restrictions due to improper permission checks, allowing a local attacker to access other users’ pseudoterminals. The vulnerability affects glibc versions before 2.18. IBM advisories (FSM, IMM2, AMM) reference CVE-2013-22...

2.6CVSS8AI score0.00071EPSS
Exploits0References10Affected Software1
OpenVAS
OpenVAS
added 2013/10/03 12:0 a.m.34 views

Fedora Update for glibc FEDORA-2013-17475

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS9AI score0.18703EPSS
Exploits8References2
Tenable Nessus
Tenable Nessus
added 2013/09/05 12:0 a.m.43 views

Fedora 18 : glibc-2.16-34.fc18 (2013-15072)

glibc security update : CVE-2013-2207 glibc ptchown: Improper pseudotty ownership and permissions changes when granting access to the slave pseudoterminal The fix may break chroots if their devpts was not mounted correctly. Fix is to mount the devpts correctly with gid=5. Note that Tenable Networ...

2.6CVSS7.9AI score0.00071EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2013/09/02 12:0 a.m.27 views

Fedora Update for glibc FEDORA-2013-15316

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS9AI score0.03104EPSS
Exploits2References2
OpenVAS
OpenVAS
added 2013/08/23 12:0 a.m.28 views

Fedora Update for glibc FEDORA-2013-15053

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS9AI score0.18703EPSS
Exploits5References2
Rows per page
Query Builder