PT-2018-4712

Name of the Vulnerable Software and Affected Versions express-restify-mongoose versions 2.4.2 and earlier express-restify-mongoose versions 3.0.0 through 3.0.1 Description The issue allows a malicious user to send a request for "GET /User?distinct=password" and get all the passwords for all the...

CVE-2016-10533: Exposure of Sensitive Information to an Unauthorized Actor

express-restify-mongoose is a module to easily create a flexible REST interface for mongoose models. express-restify-mongoose 2.4.2 and earlier and 3.0.X through 3.0.1 allows a malicious user to send a request for GET /User?distinct=password and get all the passwords for all the users in the...

UBUNTU-CVE-2017-1000405

The Linux Kernel versions 2.6.38 through 4.14 have a problematic use of pmdmkdirty in the touchpmd function inside the THP implementation. touchpmd can be reached by getuserpages. In such case, the pmd will become dirty. This scenario breaks the new canfollowwritepmd's logic - pmd can become dirt...

PT-2017-4077 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 2.6.38 through 4.14 Description: The issue is related to the touch pmd function in the Linux Kernel, which can be exploited due to incorrect synchronization when using a shared resource. This can allow an attacker to...

PT-2017-18056

Name of the Vulnerable Software and Affected Versions Xen versions prior to 4.5.x Description The issue arises from inadequate access permission checks for MMIO ranges in Xen PV guests, specifically an error in the get user function. This allows unauthorized reads of host PCI device space memory,...

DEBIAN-CVE-2016-9178

The getuserasmex macro in arch/x86/include/asm/uaccess.h in the Linux kernel before 4.7.5 does not initialize a certain integer variable, which allows local users to obtain sensitive information from kernel stack memory by triggering failure of a getuserex call...

CVE-2016-9644

The getuserasmex macro in arch/x86/include/asm/uaccess.h in the Linux kernel 4.4.22 through 4.4.28 contains extended asm statements that are incompatible with the exception table, which allows local users to obtain root access on non-SMEP platforms via a crafted application. NOTE: this...

PT-2016-7807

Name of the Vulnerable Software and Affected Versions Linux kernel versions 4.4.22 through 4.4.28 Description The issue allows local users to obtain root access on non-SMEP platforms via a crafted application, due to extended asm statements in the get user asm ex macro that are incompatible with...

PT-2016-7679

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.7.5 Description The issue allows local users to obtain sensitive information from kernel stack memory by triggering failure of a get user ex call, due to the get user asm ex macro in...

PT-2016-1290

Name of the Vulnerable Software and Affected Versions Moodle versions 2.6.11 and earlier, 2.7.x through 2.7.8, 2.8.x through 2.8.6, 2.9.x through 2.9.0 Description A cross-site scripting XSS issue exists due to the absence of an external format text call in a web service, allowing remote attacker...

Google Chrome WebRTC Memory Misreference Vulnerability

Google Chrome is a web browser developed by the American company Google Google. A memory misreference vulnerability exists in the WebRTC 'content/renderer/media/usermediaclientimpl.cc' file in versions of Google Chrome prior to 43.0.2357.65. A remote attacker can exploit this vulnerability to cau...

UBUNTU-CVE-2015-1260

Multiple use-after-free vulnerabilities in content/renderer/media/usermediaclientimpl.cc in the WebRTC implementation in Google Chrome before 43.0.2357.65 allow remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that executes upon...

Red Hat FreeIPA extdom plugin denial of service vulnerability

Red Hat FreeIPA is an integrated security information management solution from Red Hat that provides an easy-to-manage identity, policy and audit IPA suite for Linux and Unix computer networks. extdom is a directory server plug-in. A security vulnerability in the 'getusergrouplist' function in...

ipa: memory corruption when using get_user_grouplist()

It was discovered that the IPA extdom Directory Server plug-in did not correctly perform memory reallocation when handling user account information. A request for a list of groups for a user that belongs to a large number of groups would cause a Directory Server to crash...

PYSEC-2015-33

RhodeCode before 2.2.7 allows remote authenticated users to obtain API keys and other sensitive information via the 1 updaterepo, 2 getlocks, or 3 getusergroups API method...

PT-2015-5389

Name of the Vulnerable Software and Affected Versions RhodeCode versions prior to 2.2.7 Description The issue allows remote authenticated users to obtain sensitive information, including API keys, by exploiting certain API methods. Specifically, the "update repo", "get locks", and "get user group...

VulnCheck KEV: CVE-2013-6282

The getuser and putuser API functions of the Linux kernel fail to validate the target address when being used on ARM v6k/v7 platforms. This allows an application to read and write kernel memory which could lead to privilege escalation...

PT-2013-5986 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 3.5.5 Description: The issue arises from improper input validation in the Linux kernel, specifically in the 1 get user and 2 put user API functions on the v6k and v7 ARM platforms. This allows attackers to read ...

kernel: Reinstate ZERO_PAGE optimization in 'get_user_pages()' and fix XIP

The Linux kernel 2.6.24 and 2.6.25 before 2.6.25.9 allows local users to cause a denial of service memory consumption via a large number of calls to the getuserpages function, which lacks a ZEROPAGE optimization and results in allocation of "useless newly zeroed pages."...

PT-2008-3853 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 2.6.24 and 2.6.25 through 2.6.25.8 Description: The issue allows local users to cause a denial of service, resulting in memory consumption. This is achieved through a large number of calls to the get user pages function,...