1764 matches found
GLSA-201706-05 : D-Bus: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201706-05 D-Bus: Multiple vulnerabilities Multiple vulnerabilities have been discovered in D-Bus. Please review the original report referenced below for details. Impact : An attacker could possibly overwrite arbitrary files named...
D-Bus: Multiple vulnerabilities
Background D-Bus is a message bus system which processes can use to talk to each other. Description Multiple vulnerabilities have been discovered in D-Bus. Please review the original report referenced below for details. Impact An attacker could possibly overwrite arbitrary files named “once” with...
CentOS 7 : kdelibs (CESA-2017:1264)
An update for kdelibs is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
RHEL 7 : kdelibs (RHSA-2017:1264)
An update for kdelibs is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
Scientific Linux Security Update : kdelibs on SL7.x x86_64 (20170522)
Security Fixes : - A privilege escalation flaw was found in the way kdelibs handled D-Bus messages. A local user could potentially use this flaw to gain root privileges by spoofing a callerID and leveraging a privileged helper application. CVE-2017-8422 %NASLMINLEVEL 70300 C Tenable Network...
kdelibs security update
CentOS Errata and Security Advisory CESA-2017:1264 An update for kdelibs is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
Important: Red Hat Security Advisory: kdelibs security update
An update for kdelibs is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
KDE kauth and kdelibs Logic Flaw Lets Local Users Obtain Root Privileges(CVE-2017-8422)
This document describes a generic root exploit against kde. The exploit is achieved by abusing a logic flaw within the KAuth framework which is present in kde4 org.kde.auth and kde5 org.kde.kf5auth. It is possible to spoof what KAuth calls callerID's which are indeed D-Bus unique names of the...
USN-3286-1: KDE-Libs vulnerability
Sebastian Krahmer discovered that the KDE-Libs Kauth component incorrectly checked services invoking D-Bus. A local attacker could use this issue to gain root privileges...
Ubuntu: Security Advisory (USN-3286-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2017-8422
A privilege escalation flaw was found in the way kdelibs handled D-Bus messages. A local user could potentially use this flaw to gain root privileges by spoofing a callerID and leveraging a privileged helper application...
EulerOS 2.0 SP1 : dbus (EulerOS-SA-2016-1037)
According to the versions of the dbus packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - D-BUS is a system for sending messages between applications. It is used both for the system-wide message bus service, and as a...
Authentication flaw
firewalld.py in firewalld before 0.4.3.3 allows local users to bypass authentication and modify firewall configurations via the 1 addPassthrough, 2 removePassthrough, 3 addEntry, 4 removeEntry, or 5 setEntries D-Bus API method...
CVE-2016-5410
firewalld.py in firewalld before 0.4.3.3 allows local users to bypass authentication and modify firewall configurations via the 1 addPassthrough, 2 removePassthrough, 3 addEntry, 4 removeEntry, or 5 setEntries D-Bus API method...
CVE-2016-5410
firewalld.py in firewalld before 0.4.3.3 allows local users to bypass authentication and modify firewall configurations via the 1 addPassthrough, 2 removePassthrough, 3 addEntry, 4 removeEntry, or 5 setEntries D-Bus API method...
CVE-2016-5410
CVE-2016-5410 affects firewalld before 0.4.3.3. The vulnerability, described in multiple sources, allows local users to bypass authentication and modify firewall configurations via D‑Bus API methods (addPassthrough, removePassthrough, addEntry, removeEntry, setEntries). This is due to improper ac...
CVE-2016-5410
firewalld.py in firewalld before 0.4.3.3 allows local users to bypass authentication and modify firewall configurations via the 1 addPassthrough, 2 removePassthrough, 3 addEntry, 4 removeEntry, or 5 setEntries D-Bus API method...
CVE-2017-7622
dde-daemon, the daemon process of DDE Deepin Desktop Environment 15.0 through 15.3, runs with root privileges and hardly does anything to identify the user who calls the function through D-Bus. Anybody can change the grub config, even to append some arguments to make a backdoor or privilege...
CVE-2017-7622
The CVE-2017-7622 issue affects DDE’s dde-daemon (Deepin Desktop Environment) versions 15.0–15.3, where the daemon runs with root privileges and does not properly identify the caller over D-Bus. An attacker can exploit DoWriteGrubSettings() to alter GRUB configuration, enabling a backdoor or priv...
GLSA-201701-20 : D-Bus: Format string vulnerability
The remote host is affected by the vulnerability described in GLSA-201701-20 D-Bus: Format string vulnerability It was discovered that D-Bus incorrectly handles certain format strings. The impact of this new vulnerability is believed to not be exploitable if D-Bus is patched against CVE-2015-0245...