Lucene search
+L

654 matches found

OSV
OSV
added 2013/04/24 7:55 p.m.6 views

CVE-2013-1958

The scmcheckcreds function in net/core/scm.c in the Linux kernel before 3.8.6 does not properly enforce capability requirements for controlling the PID value associated with a UNIX domain socket, which allows local users to bypass intended access restrictions by leveraging the time interval durin...

6AI score
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2013/04/24 7:55 p.m.25 views

CVE-2013-1958

The scmcheckcreds function in net/core/scm.c in the Linux kernel before 3.8.6 does not properly enforce capability requirements for controlling the PID value associated with a UNIX domain socket, which allows local users to bypass intended access restrictions by leveraging the time interval durin...

1.9CVSS5.8AI score0.0034EPSS
SaveExploits1References2
Prion
Prion
added 2013/04/24 7:55 p.m.22 views

Design/Logic Flaw

The scmcheckcreds function in net/core/scm.c in the Linux kernel before 3.8.6 does not properly enforce capability requirements for controlling the PID value associated with a UNIX domain socket, which allows local users to bypass intended access restrictions by leveraging the time interval durin...

1.9CVSS6.7AI score0.0034EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2013/04/24 7:0 p.m.36 views

CVE-2013-1958

The scmcheckcreds function in net/core/scm.c in the Linux kernel before 3.8.6 does not properly enforce capability requirements for controlling the PID value associated with a UNIX domain socket, which allows local users to bypass intended access restrictions by leveraging the time interval durin...

6AI score0.0034EPSS
SaveExploits1References4
CVE
CVE
added 2013/04/24 7:0 p.m.81 views

CVE-2013-1958

CVE-2013-1958 affects Linux kernels before 3.8.6 where scm_check_creds in net/core/scm.c fails to enforce capabilities for the PID value tied to a UNIX domain socket, allowing local users to bypass access controls during a window when a user namespace exists but a PID namespace is not yet created...

1.9CVSS6.2AI score0.0034EPSS
SaveExploits1References4Affected Software1
Debian CVE
Debian CVE
added 2013/04/24 7:0 p.m.54 views

CVE-2013-1958

The scmcheckcreds function in net/core/scm.c in the Linux kernel before 3.8.6 does not properly enforce capability requirements for controlling the PID value associated with a UNIX domain socket, which allows local users to bypass intended access restrictions by leveraging the time interval durin...

1.9CVSS6AI score0.0034EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2013/02/26 12:0 a.m.55 views

SuSE 11.2 Security Update : Linux kernel (SAT Patch Numbers 7370 / 7373 / 7374)

The SUSE Linux Enterprise 11 SP2 kernel has been updated to fix two issues : One severe security issue : - A race condition in ptrace2 could be used by local attackers to crash the kernel and/or execute code in kernel context. One severe regression issue:. CVE-2013-0871 - A regression in UNIX...

6.9CVSS6.8AI score0.01434EPSS
SaveExploits2References5
Tenable Nessus
Tenable Nessus
added 2012/09/06 12:0 a.m.16 views

Mandrake Linux Security Advisory : esound (MDKSA-2000:051)

A problem exists with the esound daemon, which is used in GNOME and responsible for multiplexing access to audio devices. Versions of esound prior to and including 0.2.19 create a world-writable directory in /tmp called .esd which is owned by the user running esound. This directory is used to sto...

6.2CVSS5.7AI score0.00694EPSS
SaveExploits2References1
Tenable Nessus
Tenable Nessus
added 2012/08/01 12:0 a.m.269 views

Scientific Linux Security Update : kernel on SL4.x i386/x86_64

This update fixes the following security issues : - a flaw was found in the Realtek r8169 Ethernet driver in the Linux kernel. pciunmapsingle presented a memory leak that could lead to IOMMU space exhaustion and a system crash. An attacker on the local network could trigger this flaw by using jum...

7.8CVSS6.3AI score0.12461EPSS
SaveExploits5References15
Tenable Nessus
Tenable Nessus
added 2012/08/01 12:0 a.m.29 views

Scientific Linux Security Update : gdm on SL5.x i386/x86_64

A flaw was found in the way Gdm listens on its unix domain socket. A local user could crash a running X session by writing malicious data to Gdm's unix domain socket. CVE-2007-3381 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux...

1.5CVSS5.2AI score0.00327EPSS
SaveExploits1References2
OSV
OSV
added 2011/10/23 12:0 a.m.13 views

DSA-2325-1 kfreebsd-8 - privilege escalation/denial of service

Bulletin has no description...

7.2CVSS6.7AI score0.0093EPSS
SaveExploits2
securityvulns
securityvulns
added 2011/10/02 12:0 a.m.19 views

FreeBSD domain socket name buffer overflow

bind buffer overflow on local domain sockets...

3.7AI score
SaveExploits0References1
OpenVAS
OpenVAS
added 2011/08/09 12:0 a.m.62 views

CentOS Update for kernel CESA-2009:1671 centos4 i386

Check for the Version of kernel OpenVAS Vulnerability Test CentOS Update for kernel CESA-2009:1671 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

7.8CVSS0.8AI score0.12461EPSS
SaveExploits5References2
OpenVAS
OpenVAS
added 2011/08/09 12:0 a.m.64 views

CentOS Update for kernel CESA-2009:1671 centos4 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

7.8CVSS6.2AI score0.12461EPSS
SaveExploits5References2
OpenVAS
OpenVAS
added 2011/08/09 12:0 a.m.43 views

CentOS Update for kernel CESA-2009:1670 centos5 i386

Check for the Version of kernel OpenVAS Vulnerability Test CentOS Update for kernel CESA-2009:1670 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

7.8CVSS0.9AI score0.12EPSS
SaveExploits5References2
OpenVAS
OpenVAS
added 2009/12/30 12:0 a.m.35 views

RedHat Security Advisory RHSA-2009:1670

The remote host is missing updates announced in advisory RHSA-2009:1670. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security fixes: NULL pointer dereference flaws in the r128 driver. Checks to test if the Concurrent Command Engine state was initialized...

7.8CVSS7AI score0.12EPSS
SaveExploits5References3
OpenVAS
OpenVAS
added 2009/12/30 12:0 a.m.45 views

RedHat Security Advisory RHSA-2009:1671

The remote host is missing updates announced in advisory RHSA-2009:1671. The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: a flaw was found in the Realtek r8169 Ethernet driver in the Linux kernel. pciunmapsingle...

7.8CVSS0.3AI score0.12461EPSS
SaveExploits5References2
OpenVAS
OpenVAS
added 2009/12/30 12:0 a.m.52 views

RedHat Security Advisory RHSA-2009:1671

The remote host is missing updates announced in advisory RHSA-2009:1671. The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: a flaw was found in the Realtek r8169 Ethernet driver in the Linux kernel. pciunmapsingle...

7.8CVSS7.1AI score0.12461EPSS
SaveExploits5References2
Cent OS
Cent OS
added 2009/12/18 7:0 p.m.96 views

kernel security update

CentOS Errata and Security Advisory CESA-2009:1671 Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages...

7.8CVSS6.5AI score0.12461EPSS
SaveExploits5References8
OpenVAS
OpenVAS
added 2009/11/11 12:0 a.m.46 views

Debian: Security Advisory (DSA-1929-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.8AI score0.0489EPSS
SaveExploits30References3
Rows per page
Query Builder