Lucene search
K

8515 matches found

0day.today
0day.today
added 2018/09/24 12:0 a.m.29 views

udisks2 2.8.0 - Denial of Service Vulnerability

Exploit for linux platform in category dos / poc Exploit: udisks2 2.8.0 - Denial of Service PoC Author: oxagast Vendor Homepage: http://storaged.org/ Software Link: https://github.com/storaged-project/udisks Version: =udisks2 2.8.0 Tested on: Ubuntu x64 / / / \ / / / O / / \ \ /\//\//...

7.4AI score
Exploits0
Packet Storm
Packet Storm
added 2018/09/24 12:0 a.m.33 views

udisks2 2.8.0 Denial Of Service

Exploit: udisks2 2.8.0 - Denial of Service PoC Author: oxagast Date: 2018-09-22 Vendor Homepage: http://storaged.org/ Software Link: https://github.com/storaged-project/udisks Version: =udisks2 2.8.0 Tested on: Ubuntu x64 / / / \ / / / O / / \ \ /\//\// ========The vulnerable section of code...

7.4AI score
Exploits0
Exploit DB
Exploit DB
added 2018/09/24 12:0 a.m.38 views

udisks2 2.8.0 - Denial of Service (PoC)

Exploit: udisks2 2.8.0 - Denial of Service PoC Author: oxagast Date: 2018-09-22 Vendor Homepage: http://storaged.org/ Software Link: https://github.com/storaged-project/udisks Version: =udisks2 2.8.0 Tested on: Ubuntu x64 / / / \ / / / O / / \ \ /\//\// ========The vulnerable section of code...

7AI score
Exploits0
Prion
Prion
added 2018/09/22 4:29 p.m.14 views

Format string

UDisks 2.8.0 has a format string vulnerability in udiskslog in udiskslogging.c, allowing attackers to obtain sensitive information stack contents, cause a denial of service memory corruption, or possibly have unspecified other impact via a malformed filesystem label, as demonstrated by %d or %n...

4.6CVSS8AI score0.00622EPSS
Exploits1References3Affected Software2
NVD
NVD
added 2018/09/22 4:29 p.m.16 views

CVE-2018-17336

UDisks 2.8.0 has a format string vulnerability in udiskslog in udiskslogging.c, allowing attackers to obtain sensitive information stack contents, cause a denial of service memory corruption, or possibly have unspecified other impact via a malformed filesystem label, as demonstrated by %d or %n...

7.8CVSS8.2AI score0.00622EPSS
Exploits1References3
OSV
OSV
added 2018/09/22 4:29 p.m.19 views

CVE-2018-17336

UDisks 2.8.0 has a format string vulnerability in udiskslog in udiskslogging.c, allowing attackers to obtain sensitive information stack contents, cause a denial of service memory corruption, or possibly have unspecified other impact via a malformed filesystem label, as demonstrated by %d or %n...

7.8CVSS7.3AI score
Exploits0References3
OSV
OSV
added 2018/09/22 4:29 p.m.1 views

DEBIAN-CVE-2018-17336

UDisks 2.8.0 has a format string vulnerability in udiskslog in udiskslogging.c, allowing attackers to obtain sensitive information stack contents, cause a denial of service memory corruption, or possibly have unspecified other impact via a malformed filesystem label, as demonstrated by %d or %n...

7.8CVSS7.4AI score0.00622EPSS
Exploits1References1
Cvelist
Cvelist
added 2018/09/22 4:0 p.m.17 views

CVE-2018-17336

UDisks 2.8.0 has a format string vulnerability in udiskslog in udiskslogging.c, allowing attackers to obtain sensitive information stack contents, cause a denial of service memory corruption, or possibly have unspecified other impact via a malformed filesystem label, as demonstrated by %d or %n...

8.1AI score0.00622EPSS
Exploits1References3
CVE
CVE
added 2018/09/22 4:0 p.m.88 views

CVE-2018-17336

CVE-2018-17336 affects UDisks 2.8.0 where a format-string vulnerability in udisks_log (udiskslogging.c) can leak stack contents, enable a denial of service via memory corruption, or cause other impacts with malformed filesystem labels (demonstrated by %d/%n). Exploitation is local. Public reports...

7.8CVSS7.9AI score0.00622EPSS
Exploits1References3Affected Software1
Debian CVE
Debian CVE
added 2018/09/22 4:0 p.m.17 views

CVE-2018-17336

UDisks 2.8.0 has a format string vulnerability in udiskslog in udiskslogging.c, allowing attackers to obtain sensitive information stack contents, cause a denial of service memory corruption, or possibly have unspecified other impact via a malformed filesystem label, as demonstrated by %d or %n...

7.8CVSS8.1AI score0.00622EPSS
Exploits1
UbuntuCve
UbuntuCve
added 2018/09/22 12:0 a.m.24 views

CVE-2018-17336

UDisks 2.8.0 has a format string vulnerability in udiskslog in udiskslogging.c, allowing attackers to obtain sensitive information stack contents, cause a denial of service memory corruption, or possibly have unspecified other impact via a malformed filesystem label, as demonstrated by %d or %n...

7.8CVSS7.1AI score0.00622EPSS
Exploits1References2
OSV
OSV
added 2018/09/22 12:0 a.m.0 views

UBUNTU-CVE-2018-17336

UDisks 2.8.0 has a format string vulnerability in udiskslog in udiskslogging.c, allowing attackers to obtain sensitive information stack contents, cause a denial of service memory corruption, or possibly have unspecified other impact via a malformed filesystem label, as demonstrated by %d or %n...

7.8CVSS7.1AI score0.00622EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2018/09/18 12:0 a.m.33 views

EulerOS Virtualization 2.5.0 : ncurses (EulerOS-SA-2018-1252)

According to the versions of the ncurses packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In ncurses 6.0, there is a stack-based buffer overflow in the fmtentry function. A crafted input will lead to a remote arbitrary...

9.8CVSS8.1AI score0.04876EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2018/09/16 2:29 a.m.26 views

CVE-2018-16554

The ProcessGpsInfo function of the gpsinfo.c file of jhead 3.00 may allow a remote attacker to cause a denial-of-service attack or unspecified other impact via a malicious JPEG file, because of inconsistency between float and double in a sprintf format string during TAGGPSALT handling...

7.8CVSS6.7AI score0.01766EPSS
Exploits1References1
Prion
Prion
added 2018/09/16 2:29 a.m.16 views

Format string

The ProcessGpsInfo function of the gpsinfo.c file of jhead 3.00 may allow a remote attacker to cause a denial-of-service attack or unspecified other impact via a malicious JPEG file, because of inconsistency between float and double in a sprintf format string during TAGGPSALT handling...

6.8CVSS7.5AI score0.01766EPSS
Exploits1References3Affected Software1
OSV
OSV
added 2018/09/16 2:29 a.m.4 views

DEBIAN-CVE-2018-16554

The ProcessGpsInfo function of the gpsinfo.c file of jhead 3.00 may allow a remote attacker to cause a denial-of-service attack or unspecified other impact via a malicious JPEG file, because of inconsistency between float and double in a sprintf format string during TAGGPSALT handling...

7.8CVSS7.2AI score0.01766EPSS
Exploits1References1
CVE
CVE
added 2018/09/16 2:0 a.m.147 views

CVE-2018-16554

CVE-2018-16554 affects jhead 3.00, where ProcessGpsInfo in gpsinfo.c mishandles a sprintf format string for TAG_GPS_ALT due to float/double mismatch, enabling a remote attacker to cause a denial-of-service or unspecified impact via a crafted JPEG. Public advisories (openSUSE/SUSE patches) show th...

7.8CVSS6.1AI score0.01766EPSS
Exploits1References3Affected Software1
NVD
NVD
added 2018/09/06 11:29 p.m.18 views

CVE-2018-15749

The Pulse Secure Desktop macOS 5.3RX before 5.3R5 and 9.0R1 has a Format String Vulnerability...

5.5CVSS5.5AI score0.00316EPSS
Exploits0References1
Prion
Prion
added 2018/09/06 11:29 p.m.14 views

Format string

The Pulse Secure Desktop macOS 5.3RX before 5.3R5 and 9.0R1 has a Format String Vulnerability...

2.1CVSS5.5AI score0.00316EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2018/09/06 11:29 p.m.2 views

CVE-2018-15749

The Pulse Secure Desktop macOS 5.3RX before 5.3R5 and 9.0R1 has a Format String Vulnerability...

5.5CVSS5.8AI score0.00316EPSS
Exploits0References1
Rows per page
Query Builder