FreeBSD : zookeeper -- Denial Of Service (af61b271-9e47-4db0-a0f6-29fb032236a3)

zookeeper developers report : Two four letter word commands 'wchp/wchc' are CPU intensive and could cause spike of CPU utilization on Apache ZooKeeper server if abused, which leads to the server unable to serve legitimate client requests. Apache ZooKeeper thru version 3.4.9 and 3.5.2 suffer from...

FreeBSD : node -- access to unintended files (1257718e-be97-458a-9744-d938b592db42)

node developers report : Node.js 8.5.0 before 8.6.0 allows remote attackers to access unintended files, because a change to '..' handling was incompatible with the pathname validation used by unspecified community modules. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

FreeBSD : rubygems -- deserialization vulnerability (2c8bd00d-ada2-11e7-82af-8dbff7d75206)

oss-security mailing list : There is a possible unsafe object desrialization vulnerability in RubyGems. It is possible for YAML deserialization of gem specifications to bypass class white lists. Specially crafted serialized objects can possibly be used to escalate to remote code execution...

Code injection

The sysamd64 IRET Handler in the kernel in FreeBSD 9.3 and 10.1 allows local users to gain privileges or cause a denial of service kernel panic...

CVE-2015-5675

The sysamd64 IRET Handler in the kernel in FreeBSD 9.3 and 10.1 allows local users to gain privileges or cause a denial of service kernel panic...

CVE-2015-5675

The sysamd64 IRET Handler in the kernel in FreeBSD 9.3 and 10.1 allows local users to gain privileges or cause a denial of service kernel panic...

CVE-2015-5675

Removed by vendor...

CVE-2015-5675

The CVE-2015-5675 entry describes a Local Privilege Escalation/DoS in FreeBSD kernels due to the sys_amd64 IRET Handler. Affected: FreeBSD 9.3 and 10.1. Root cause: a mis-handling of IRET exceptions (#SS, #NP) in the kernel, which can allow a local user to gain privileges or trigger a kernel pani...

CVE-2015-5675

The sysamd64 IRET Handler in the kernel in FreeBSD 9.3 and 10.1 allows local users to gain privileges or cause a denial of service kernel panic...

FreeBSD : xorg-server -- multiple vulnabilities (4f8ffb9c-f388-4fbd-b90f-b3131559d888)

Alan Coopersmith reports : X.Org thanks Michal Srb of SuSE for finding these issues and bringing them to our attention, Julien Cristau of Debian for getting the fixes integrated, and Adam Jackson of Red Hat for publishing the release. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

FreeBSD : tomcat -- Remote Code Execution (c0dae634-4820-4505-850d-b1c975d0f67d)

tomcat developers reports : When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled e.g. via setting the readonly initialisation parameter of the Default servlet to false it was possible to upload a JSP file to the...

FreeBSD 'sys/netsmb/smb_subr.c' out-of-bounds read denial of service vulnerability

FreeBSD is a BSD-based operating system. A security vulnerability in the FreeBSD smbstrdupin function in sys/netsmb/smbsubr.c allows attackers to exploit the vulnerability to submit a special request and crash the system...

CVE-2017-15037

In FreeBSD through 11.1, the smbstrdupin function in sys/netsmb/smbsubr.c has a race condition with a resultant out-of-bounds read, because it can cause t2p-tname strings to lack a final '\0' character...

Race condition

In FreeBSD through 11.1, the smbstrdupin function in sys/netsmb/smbsubr.c has a race condition with a resultant out-of-bounds read, because it can cause t2p-tname strings to lack a final '\0' character...

CVE-2017-15037

In FreeBSD through 11.1, the smbstrdupin function in sys/netsmb/smbsubr.c has a race condition with a resultant out-of-bounds read, because it can cause t2p-tname strings to lack a final '\0' character...

CVE-2017-15037

In FreeBSD through 11.1, the smbstrdupin function in sys/netsmb/smbsubr.c has a race condition with a resultant out-of-bounds read, because it can cause t2p-tname strings to lack a final '\0' character...

CVE-2017-15037

Removed by vendor...

CVE-2017-15037

In FreeBSD up to version 11.1, the race condition in smb_strdupin (sys/netsmb/smb_subr.c) can cause t2p->t_name strings to miss a terminating '\0', leading to an out-of-bounds read. This is a concrete technical detail from the CVE entry and connected records describe the vulnerable function an...

FreeBSD : cURL -- out of bounds read (ccace707-a8d8-11e7-ac58-b499baebfeaf)

The cURL project reports : FTP PWD response parser out of bounds read libcurl may read outside of a heap allocated buffer when doing FTP. When libcurl connects to an FTP server and successfully logs in anonymous or not, it asks the server for the current directory with the PWD command. The server...

FreeBSD : FreeBSD -- heimdal KDC-REP service name validation vulnerability (420243e9-a840-11e7-b5af-a4badb2f4699)

There is a programming error in the Heimdal implementation that used an unauthenticated, plain-text version of the KDC-REP service name found in a ticket. Impact : An attacker who has control of the network between a client and the service it talks to will be able to impersonate the service,...