CVE-2019-15084

Realtek Waves MaxxAudio driver 1.6.2.0, as used on Dell laptops, installs with incorrect file permissions. As a result, a local attacker can escalate to SYSTEM...

CVE-2016-10849

cPanel before 11.54.0.4 allows certain file-chmod operations in scripts/secureit SEC-82...

SUSE SLED12 / SLES12 Security Update : glib2 (SUSE-SU-2019:1722-1)

This update for glib2 provides the following fix : Security issues fixed : CVE-2019-12450: Fixed an improper file permission when copy operation takes place bsc1137001. CVE-2018-16428: Avoid a NULL pointer dereference that could crash glib2 users in markup processing bnc1107121. CVE-2018-16429:...

SUSE-SU-2019:1722-1 Security update for glib2

This update for glib2 provides the following fix: Security issues fixed: - CVE-2019-12450: Fixed an improper file permission when copy operation takes place bsc1137001. - CVE-2018-16428: Avoid a null pointer dereference that could crash glib2 users in markup processing bnc1107121. - CVE-2018-1642...

openSUSE Security Update : glib2 (openSUSE-2019-1650)

This update for glib2 fixes the following issues : Security issue fixed : - CVE-2019-12450: Fixed an improper file permission when copy operation takes place bsc1137001. Other issue addressed : - glib2 was handling an UNKNOWN connectivity state from NetworkManager as if there was a connection thu...

Security update for glib2 (important)

openSUSE Security Update: Security update for glib2 Announcement ID: openSUSE-SU-2019:1650-1 Rating: important References: 1103678 1137001 Cross-References: CVE-2019-12450 Affected Products: openSUSE Leap 15.0 An update that solves one vulnerability and has one errata is now available.Description...

SUSE-SU-2019:14102-1 Security update for glib2

This update for glib2 fixes the following issues: Security issue fixed: - CVE-2019-12450: Fixed an improper file permission when copy operation takes place bsc1137001...

SUSE SLES12 Security Update : glib2 (SUSE-SU-2019:1596-1)

This update for glib2 fixes the following issues : Security issues fixed : CVE-2019-12450: Fixed an improper file permission when copy operation takes place bsc1137001. CVE-2018-16428: Avoid a NULL pointer dereference bsc1107121. CVE-2018-16429: Fixed out-of-bounds read vulnerability...

SUSE SLED15 / SLES15 Security Update : glib2 (SUSE-SU-2019:1594-1)

This update for glib2 fixes the following issues : Security issue fixed : CVE-2019-12450: Fixed an improper file permission when copy operation takes place bsc1137001. Other issue addressed: glib2 was handling an UNKNOWN connectivity state from NetworkManager as if there was a connection thus...

SUSE-SU-2019:1594-1 Security update for glib2

This update for glib2 fixes the following issues: Security issue fixed: - CVE-2019-12450: Fixed an improper file permission when copy operation takes place bsc1137001. Other issue addressed: - glib2 was handling an UNKNOWN connectivity state from NetworkManager as if there was a connection thus...

[SECURITY] [DLA 1826-1] glib2.0 security update

Package : glib2.0 Version : 2.42.1-1+deb8u1 CVE ID : CVE-2019-12450 Debian Bug : 929753 It was discovered that GLib does not properly restrict some file permissions while a copy operation is in progress; instead, default permissions are used. For Debian 8 "Jessie", this problem has been fixed in...

Pronestor Health Monitoring 8.1.11.0 - Privilege Escalation Vulnerability

Exploit for windows platform in category local exploits Pronestor Health Monitoring sc qc PNHM SERVICENAME: PNHM TYPE : 10 WIN32OWNPROCESS STARTTYPE : 2 AUTOSTART ERRORCONTROL : 1 NORM...

Authorization Bypass

kernel-rt is vulnerable to authorization bypass. A flaw was found in the way file permission checks for the /dev/cpu/x/msr files were performed in restricted root environments for example, when using a capability-based security model. A local user with the ability to write to these files could us...

Denial Of Service (DoS)

kernel-rt is vulnerable to denial of service. A flaw was found in the way file permission checks for the /dev/kmsg file were performed in restricted root environments for example, when using a capability-based security model. A local user able to write to this file could cause a denial of service...

Hardcoded credentials

A hard-link created from the log file of Check Point ZoneAlarm up to 15.4.062 to any file on the system will get its permission changed so that all users can access that linked file. Doing this on files with limited access gains the local attacker higher privileges to the file...

Linux: Only root user has UID 0

The UID 0 refers to an account with superuser privileges. Limiting the UID 0 to root user only prevents other users from unauthorized access rights. This script tests if any other user than root has UID 0. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a...

kernel: userfaultfd bypasses tmpfs file permissions

A flaw was found in the Linux kernel with files on tmpfs and hugetlbfs. An attacker is able to bypass file permissions on filesystems mounted with tmpfs/hugetlbs to modify a file and possibly disrupt normal system behavior. At this time there is an understanding there is no crash or privilege...

Information Disclosure

pulp is vulnerable to information disclosure. An insecure file permission in the /etc/pki/pulp/nodes/ directory allows local users to retrieve confidential information...

ghostscript security update

CentOS Errata and Security Advisory CESA-2018:3650 An update for ghostscript is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Scientific Linux Security Update : ghostscript on SL7.x x86_64 (20181127)

Security Fixes : - ghostscript: .tempfile file permission issues 699657 CVE-2018-15908 - ghostscript: shadingparam incomplete type checking 699660 CVE-2018-15909 - ghostscript: missing type check in type checker 699659 CVE-2018-16511 - ghostscript: incorrect access checking in temp file handling ...