13918 matches found
Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information
The multiple vulnerabilities in the krb5-ftpd package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
The vulnerability of Samba software allows a malicious individual to compromise the accessibility of protected information.
The vulnerability in the pushascii function of Samba’s smbd allows remote users who have completed authentication to trigger a service failure—a memory-related error and an unexpected termination of the daemon—by attempting to read the path name in Unicode format without using Unicode. This leads...
The vulnerability of the BIND Server software allows a malicious attacker to compromise the accessibility of protected information.
The vulnerability exists in libdns within ISC BIND due to incorrect processing of EDNS parameters. Exploiting this vulnerability allows malicious actors operating remotely to trigger a service failure a REQUIRE validation error and termination of the daemon using a specially crafted package...
Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the libgtop-daemon package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
The vulnerability of the Apache HTTP Server software allows a malicious attacker to compromise the accessibility of protected information.
A vulnerability exists in the cacheinvalidate function in the modules/cache/cachestorage.c module of the modcache module in the Apache HTTP Server. When the caching proxy server is enabled, this vulnerability allows remote HTTP servers to cause a service failure by reassigning the null pointer an...
Vulnerability of Cisco Nexus 7000 software, allowing attackers to access confidential information
The GNU Bash command shell, as of version 4.3 bash43-025 and later, incorrectly handles lines that follow the declaration of a specially crafted function, which is exported as a variable. This allows a malicious actor to read and write arbitrary files, as well as perform other undefined actions...
CVE-2016-4957
ntpd in NTP before 4.2.8p8 allows remote attackers to cause a denial of service daemon crash via a crypto-NAK packet. NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-1547...
DEBIAN-CVE-2016-4953
ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service ephemeral-association demobilization by sending a spoofed crypto-NAK packet with incorrect authentication data at a certain time...
CVE-2016-4957
ntpd (NTP) before version 4.2.8p8 is vulnerable to a remote DoS via specially crafted crypto-NAK packets, causing ntpd to crash. This issue stems from an incorrect fix applied after CVE-2016-1547 and affects ntpd’s handling of CRYPTO-NAK. Public references indicate an impact to the daemon’s avail...
The vulnerability of the Cisco IOS operating system, which allows a malicious individual to execute arbitrary code or cause a service failure.
A vulnerability exists in the Line Printer Daemon LPD of the Cisco IOS operating system, which allows a remote attacker to trigger a service failure on the device by sending a long name of a node, or execute arbitrary code on it...
Exim 4 (Debian 8 Ubuntu 16.04) - Spool Privilege Escalation
Exim 4 Debian 8 Ubuntu 16.04 - Spool Privilege Escalation / -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hello List, This is just a minor issue in Exim, no replies so far, so publication should be OK. Introduction: ============ Exim4 in some variants is started as root but switches to uid/gid...
DEBIAN-CVE-2016-2074
Buffer overflow in lib/flow.c in ovs-vswitchd in Open vSwitch 2.2.x and 2.3.x before 2.3.3 and 2.4.x before 2.4.1 allows remote attackers to execute arbitrary code via crafted MPLS packets, as demonstrated by a long string in an ovs-appctl command...
[SECURITY] Fedora 23 Update: ntp-4.2.6p5-41.fc23
The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package includes ntpd a daemon which continuously adjusts system time and utilities used to query and configure the ntpd daemon. Perl scripts ntp-wait and ntptrace are in the ntp-perl...
[SECURITY] Fedora 22 Update: ntp-4.2.6p5-41.fc22
The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package includes ntpd a daemon which continuously adjusts system time and utilities used to query and configure the ntpd daemon. Perl scripts ntp-wait and ntptrace are in the ntp-perl...
Linux kernel nfsd Privilege Acquisition Vulnerability
Linux kernel is the kernel used by Linux, the operating system released by the Linux Foundation in the United States. nfsd is a daemon in the NFS Network File System server. A security vulnerability exists in the Linux kernel's nfsd. An attacker can exploit this vulnerability to set access contro...
Docker Daemon Privilege Escalation
This module obtains root privileges from any host account with access to the Docker daemon. Usually this includes accounts in the docker group. Module Options msf use exploit/linux/local/docker/daemonprivilegeescalation msf undefineddaemonprivilegeescalation show actions ...actions... msf...
[SECURITY] Fedora 22 Update: xen-4.5.3-8.fc22
This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...
[SECURITY] Fedora 24 Update: ntp-4.2.6p5-41.fc24
The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package includes ntpd a daemon which continuously adjusts system time and utilities used to query and configure the ntpd daemon. Perl scripts ntp-wait and ntptrace are in the ntp-perl...