5453 matches found
Privilege escalation
An privilege elevation vulnerability exists in Cloud-init before 0.7.0 when requests to an untrusted system are submitted for EC2 instance data...
CVE-2012-6639
CVE-2012-6639 describes a privilege-elevation vulnerability in Cloud-init prior to 0.7.0. The issue occurs when requests to an untrusted system are made for EC2 instance data, allowing an attacker with network access to leverage low-privileged execution to gain higher privileges. The available co...
CVE-2012-6639
An privilege elevation vulnerability exists in Cloud-init before 0.7.0 when requests to an untrusted system are submitted for EC2 instance data...
CVE-2012-6639
An privilege elevation vulnerability exists in Cloud-init before 0.7.0 when requests to an untrusted system are submitted for EC2 instance data...
[SECURITY] Fedora 31 Update: systemd-243.4-1.fc31
systemd is a system and service manager that runs as PID 1 and starts the rest of the system. It provides aggressive parallelization capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, keeps track of processes using Linux control groups,...
DEBIAN-CVE-2019-19065
A memory leak in the sdmainit function in drivers/infiniband/hw/hfi1/sdma.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service memory consumption by triggering rhashtableinit failures, aka CID-34b3be18a04e. NOTE: This has been disputed as not a vulnerability because...
CVE-2019-19044
Two memory leaks in the v3dsubmitclioctl function in drivers/gpu/drm/v3d/v3dgem.c in the Linux kernel before 5.3.11 allow attackers to cause a denial of service memory consumption by triggering kcalloc or v3djobinit failures, aka CID-29cd13cfd762...
CVE-2019-19059
Multiple memory leaks in the iwlpciectxtinfogen3init function in drivers/net/wireless/intel/iwlwifi/pcie/ctxt-info-gen3.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service memory consumption by triggering iwlpcieinitfwsec or dmaalloccoherent failures, aka...
UBUNTU-CVE-2019-19065
A memory leak in the sdmainit function in drivers/infiniband/hw/hfi1/sdma.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service memory consumption by triggering rhashtableinit failures, aka CID-34b3be18a04e. NOTE: This has been disputed as not a vulnerability because...
Linux kernel memory leak vulnerability (CNVD-2019-41261)
The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A memory leak vulnerability exists in the sdmainit function in drivers/infiniband/hw/hfi1/sdma.c in Linux kernel...
mesos: docker image code execution
A flaw was found in Docker image running under root user, where it is possible to overwrite the init helper binary of the container runtime or the command executor in Apache Mesos. A malicious user could use this flaw to gain root-level code execution on the host...
UBUNTU-CVE-2019-15793
In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, several locations which shift ids translate user/group ids before performing operations in the lower filesystem were translating them into inituserns, whereas they should have been translated in...
EulerOS 2.0 SP5 : cloud-init (EulerOS-SA-2019-2132)
According to the version of the cloud-init package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A security feature bypass exists in Azure SSH Keypairs, due to a change in the provisioning logic for some Linux images that use cloud-init, aka...
Linux kernel memory leak vulnerability (CNVD-2019-40151)
The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A memory leak vulnerability exists in the komedawbconnectoradd function in...
DEBIAN-CVE-2019-18814
An issue was discovered in the Linux kernel through 5.3.9. There is a use-after-free when aalabelparse fails in aaauditruleinit in security/apparmor/audit.c...
UBUNTU-CVE-2019-18814
An issue was discovered in the Linux kernel through 5.3.9. There is a use-after-free when aalabelparse fails in aaauditruleinit in security/apparmor/audit.c...
kernel: Memory leak in sit_init_net() in net/ipv6/sit.c
A flaw was found in the way the sitinitnet function in the Linux kernel handled resource cleanup on errors. This flaw allows an attacker to use the error conditions to crash the system...
DEBIAN-CVE-2010-0398
The init script in autokey before 0.61.3-2 allows local attackers to write to arbitrary files via a symlink attack...
