PT-2016-4038

Name of the Vulnerable Software and Affected Versions Linux kernel version 4.0 Description The issue is related to an integer overflow in the aio setup single vector function in fs/aio.c, which allows local users to cause a denial of service or possibly have other unspecified impacts via a large...

CVE-2015-8785: Loop with Unreachable Exit Condition

The fusefillwritepages function in fs/fuse/file.c in the Linux kernel before 4.4 allows local users to cause a denial of service infinite loop via a writev system call that triggers a zero length for the first segment of an iov...

FastIR Collector - Windows Incident Response Tool

This tool collects different artefacts on live Windows and records the results in csv files. With the analyses of this artefacts, an early compromission can be detected. Requirements pywin32 python WMI python psutil python yaml construct distorm3 hexdump pytz Execution ./fastIRx64.py -h for help...

SOL95345942 - Linux kernel vulnerability CVE-2015-3339

Race condition in the preparebinprm function in fs/exec.c in the Linux kernel before 3.19.6 allows local users to gain privileges by executing a setuid program at a time instant when a chown to root is in progress, and the ownership is changed but the setuid bit is not yet stripped. CVE-2015-3339...

PT-2016-3582

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.4 Description A memory leak issue exists in the cuse channel release function, located in fs/fuse/cuse.c, allowing local users to cause a denial of service due to memory consumption by repeatedly opening...

PT-2015-7817

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.3.3 Linux kernel affected versions not specified Description The issue allows local users to bypass intended access restrictions and modify the attributes of arbitrary overlay files via a crafted application...

CVE-2015-8374: Exposure of Sensitive Information to an Unauthorized Actor

fs/btrfs/inode.c in the Linux kernel before 4.3.3 mishandles compressed inline extents, which allows local users to obtain sensitive pre-truncation information from a file via a clone action...

CVE-2015-7509: Improper Input Validation

fs/ext4/namei.c in the Linux kernel before 3.7 allows physically proximate attackers to cause a denial of service system crash via a crafted no-journal filesystem, a related issue to CVE-2013-2015...

CVE-2015-8660: Undefined Security Weakness

The ovlsetattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass intended access restrictions and modify the attributes of arbitrary overlay files via a crafted application...

Oracle Linux 6 : kernel (ELSA-2015-2636)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-2636 advisory. - kvm svm: unconditionally intercept DB Paolo Bonzini 1279467 1279468 CVE-2015-8104 - x86 virt: guest to host DoS by triggering an infinite loop in...

kernel security, bug fix, and enhancement update

3.10.0-327.OL7 - Oracle Linux certificates Alexey Petrenko 3.10.0-327 - mm free compound page with correct order Andrea Arcangeli 1274867 - netdrv revert 'ixgbe: Refactor busy poll socket code to address multiple issues' John Greene 1261275 - powerpc dma: dmasetcoherentmask should not be GPL only...

PT-2016-4408

Name of the Vulnerable Software and Affected Versions linux package versions prior to 3.2.73-2+deb7u3 linux package versions prior to 3.10.0-229.26.2 on Red Hat Enterprise Linux RHEL 7.1 Description The issue is related to the pipe read and pipe write implementations in fs/pipe.c in certain Linux...

CVE-2015-2925

The prependpath function in fs/dcache.c in the Linux kernel before 4.2.4 does not properly handle rename actions inside a bind mount, which allows local users to bypass an intended container protection mechanism by renaming a directory, related to a "double-chroot attack."...

CVE-2015-2925: Undefined Security Weakness

The prependpath function in fs/dcache.c in the Linux kernel before 4.2.4 does not properly handle rename actions inside a bind mount, which allows local users to bypass an intended container protection mechanism by renaming a directory, related to a "double-chroot attack."...

PT-2016-4069

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.2.6 Description The issue is related to an incorrect cleanup code path in the fs/overlayfs/copy up.c file, which can cause a denial of service due to a dentry reference leak. This occurs when local users perfor...

Oracle Linux 7 : kernel (ELSA-2015-1978)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1978 advisory. - netdrv virtio-net: drop NETIFFFRAGLIST Jason Wang 1247839 1247840 CVE-2015-5156 - fs dcache: dwalk might skip too much Denys Vlasenko 1173812 1173813...

CVE-2015-0275: Undefined Security Weakness

The ext4zerorange function in fs/ext4/extents.c in the Linux kernel before 4.1 allows local users to cause a denial of service BUG via a crafted fallocate zero-range request...

Oracle: Security Advisory (ELSA-2008-0885)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2014-0108-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2012-0107)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...