174 matches found
PT-2017-18445 · Microsoft · Windows 10 +3
Name of the Vulnerable Software and Affected Versions: Internet Explorer versions in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 Description: A security issue exists due to Internet Explorer failing to validate User Mode Code Integrity UMCI policies, allowing an attacker to bypass...
Linux kernel local memory corruption vulnerability (CNVD-2017-15535)
Linux kernel is an open source operating system. Linux kernel suffers from a memory corruption vulnerability that allows local attackers to bypass the stack guard page by submitting a special request using the vulnerability...
glibc: heap/stack gap jumping via unbounded stack allocations
A flaw was found in the way memory was being allocated on the stack for user space binaries. If heap or different memory region and stack memory regions were adjacent to each other, an attacker could use this flaw to jump over the stack guard gap, cause controlled memory corruption on process sta...
CVE-2017-1000372
A flaw exists in OpenBSD's implementation of the stack guard page that allows attackers to bypass it resulting in arbitrary code execution using setuid binaries such as /usr/bin/at. This affects OpenBSD 6.1 and possibly earlier versions...
DEBIAN-CVE-2017-1000371
The offset2lib patch as used by the Linux Kernel contains a vulnerability, if RLIMITSTACK is set to RLIMINFINITY and 1 Gigabyte of memory is allocated the maximum under the 1/4 restriction then the stack will be grown down to 0x80000000, and as the PIE binary is mapped above 0x80000000 the minimu...
CVE-2017-1000374
A flaw exists in NetBSD's implementation of the stack guard page that allows attackers to bypass it resulting in arbitrary code execution using certain setuid binaries. This affects NetBSD 7.1 and possibly earlier versions...
UBUNTU-CVE-2017-1000371
The offset2lib patch as used by the Linux Kernel contains a vulnerability, if RLIMITSTACK is set to RLIMINFINITY and 1 Gigabyte of memory is allocated the maximum under the 1/4 restriction then the stack will be grown down to 0x80000000, and as the PIE binary is mapped above 0x80000000 the minimu...
CVE-2017-0218
Microsoft Windows 10 Gold, Windows 10 1511, Windows 10 1607, and Windows Server 2016 allow an attacker to exploit a security feature bypass vulnerability in Device Guard that could allow the attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Poli...
KB4022715: Windows 10 Version 1607 and Windows Server 2016 June 2017 Cumulative Update
The remote Windows host is missing security update KB4022715. It is, therefore, affected by multiple vulnerabilities : - Multiple security bypass vulnerabilities exist in Device Guard. A local attacker can exploit these, via a specially crafted script, to bypass the Device Guard Code Integrity...
Microsoft Device Guard protection bypass - Lenovo Support US
No description provided...
Apple Xcode LLVM CLANG stack-guard security protection bypass vulnerability
Apple Xcode is a programming software developed by Apple and is the quickest way for developers to build OS X and iOS applications. A security vulnerability exists in the Apple Xcode LLVM CLANG stack-guard, which allows an attacker to bypass the stack-protection mechanism and execute malicious co...
UBUNTU-CVE-2015-3027
Clang in LLVM, as used in Apple Xcode before 6.3, performs incorrect register allocation in a way that triggers stack storage for stack cookie pointers, which might allow context-dependent attackers to bypass a stack-guard protection mechanism via crafted input to an affected C program...
