USN-3935-1: BusyBox vulnerabilities

Tyler Hicks discovered that BusyBox incorrectly handled symlinks inside tar archives. If a user or automated system were tricked into processing a specially crafted tar archive, a remote attacker could overwrite arbitrary files outside of the current directory. This issue only affected Ubuntu 14....

USN-3935-1 busybox vulnerabilities

Tyler Hicks discovered that BusyBox incorrectly handled symlinks inside tar archives. If a user or automated system were tricked into processing a specially crafted tar archive, a remote attacker could overwrite arbitrary files outside of the current directory. This issue only affected Ubuntu 14....

Microsoft Windows DHCP Client Memory Corruption Vulnerability (CNVD-2020-31120)

Microsoft Windows is a set of operating systems for personal devices from Microsoft.Windows DHCP Client is a Dynamic Host IP Configuration Protocol client. A memory corruption vulnerability exists in the Microsoft Windows DHCP Client. An attacker could exploit this vulnerability by sending a...

Microsoft Windows DHCP Client Memory Corruption Vulnerability (CNVD-2020-31121)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, U.S.A. Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows DHCP Client is one of the Dynamic Host IP Configuration Protocol clients. ...

Microsoft Patches Two Win32k Bugs Under Active Attack

Microsoft released patches for two Win32k bugs actively under attack, along with fixes for four additional bugs that are publicly known, as part of its March Patch Tuesday security bulletin. The Win32k bugs are both elevation of privilege vulnerabilities, rated important, and tied to the way...

March 2019 Patch Tuesday – 65 Vulns, 18 Critical, RCEs in DHCP Client, Adobe Vulns

This month's Patch Tuesday addresses 65 vulnerabilities, with 18 of them labeled as Critical. Thirteen of the Critical vulns are for scripting engines and browser components, impacting Microsoft browsers and Office. Three remote code execution RCE vulnerabilities are patched in the Windows DHCP...

Windows DHCP Client Remote Code Execution Vulnerability

A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client. An attacker who successfully exploited the vulnerability could run arbitrary code on the client machine. To exploit the vulnerability, an attacker could send...

Windows DHCP Client Remote Code Execution Vulnerability

A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client. An attacker who successfully exploited the vulnerability could run arbitrary code on the client machine. To exploit the vulnerability, an attacker could send...

Microsoft Windows DHCP Client Integer Underflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DHCP Client service. A crafted DHCP packet can trigger an integer...

KLA11438 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, gain privileges, execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in...

Microsoft Windows DHCP Client CVE-2019-0698 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. Successfully exploiting this issue may result in the execution of arbitrary code in the context of the affected system. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affecte...

The vulnerability of the DHCP Client component of the Oracle Solaris operating system allows a hacker to gain full control over the application.

The vulnerability of the DHCP Client component of the Oracle Solaris operating system is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to gain full control over the application using the DHCP protocol...

CVE-2019-2541

Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite subcomponent: DHCP Client. The supported version that is affected is 10. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware...

CVE-2019-2541

Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite subcomponent: DHCP Client. The supported version that is affected is 10. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware...

Design/Logic Flaw

Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite subcomponent: DHCP Client. The supported version that is affected is 10. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware...

CVE-2019-2541

Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite subcomponent: DHCP Client. The supported version that is affected is 10. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware...

CVE-2019-2541

Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite subcomponent: DHCP Client. The supported version that is affected is 10. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware...

Unspecified Vulnerability in Oracle Solaris (CNVD-2019-28425)

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation, of which Solaris is one of the computer operating system components. A security vulnerability exists in the DHCP Client subcomponent of the Solaris component version 10 of the Oracle Sun Systems Products...

Arbitrary Code Execution

bash is vulnerable to arbitrary code execution. A flaw was found in the way bash processed the hostname value. A malicious DHCP server could use this flaw to execute arbitrary commands on the DHCP client machines running bash under specific circumstances...

Solaris 10 (x86) : 148310-10

Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite subcomponent: DHCP Client. The supported version that is affected is 10. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware...