Lucene search
+L

34 matches found

Cvelist
Cvelist
added 2024/02/12 12:0 a.m.33 views

CVE-2023-52429

dmtablecreate in drivers/md/dm-table.c in the Linux kernel through 6.7.4 can attempt to in alloctargets allocate more than INTMAX bytes, and crash, because of a missing check for struct dmioctl.targetcount...

6.3AI score0.00249EPSS
SaveExploits0References6
OSV
OSV
added 2024/01/31 2:7 p.m.41 views

CVE-2023-6779 Glibc: off-by-one heap-based buffer overflow in __vsyslog_internal()

An off-by-one heap-based buffer overflow was found in the vsysloginternal function of the glibc library. This function is called by the syslog and vsyslog functions. This issue occurs when these functions are called with a message bigger than INTMAX bytes, leading to an incorrect calculation of t...

8.2CVSS7.1AI score0.04794EPSS
SaveExploits8References15
NVD
NVD
added 2024/01/23 9:15 a.m.25 views

CVE-2024-23851

copyparams in drivers/md/dm-ioctl.c in the Linux kernel through 6.7.1 can attempt to allocate more than INTMAX bytes, and crash, because of a missing paramkernel-datasize check. This is related to ctlioctl...

5.5CVSS6AI score0.00296EPSS
SaveExploits0References6
Prion
Prion
added 2022/06/09 5:15 p.m.31 views

Design/Logic Flaw

The aprwrite function in Apache HTTP Server 2.4.53 and earlier may read unintended memory if an attacker can cause the server to reflect very large input using aprwrite or aprputs, such as with modluas r:puts function. Modules compiled and distributed separately from Apache HTTP Server that use t...

5CVSS6.8AI score0.04428EPSS
SaveExploits0References6Affected Software2
Cvelist
Cvelist
added 2020/05/15 5:31 p.m.27 views

CVE-2020-12651

SecureCRT before 8.7.2 allows remote attackers to execute arbitrary code via an Integer Overflow and a Buffer Overflow because a banner can trigger a line number to CSI functions that exceeds INTMAX...

9.9AI score0.06603EPSS
SaveExploits2References4
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.44 views

Huawei EulerOS: Security Advisory for polkit (EulerOS-SA-2019-2314)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9CVSS7.8AI score0.11483EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2019/12/03 12:0 a.m.35 views

EulerOS Virtualization for ARM 64 3.0.3.0 : polkit (EulerOS-SA-2019-2314)

According to the version of the polkit packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - A flaw was found in PolicyKit aka polkit 0.115 that allows a user with a uid greater than INTMAX to successfully execute...

9CVSS7AI score0.11483EPSS
SaveExploits1References2
The Hacker News
The Hacker News
added 2018/12/06 4:3 p.m.218 views

Warning! Unprivileged Linux Users With UID > INT_MAX Can Execute Any Command

Hold tight, this may blow your mind… A low-privileged user account on most Linux operating systems with UID value anything greater than 2147483647 can execute any systemctl command unauthorizedly—thanks to a newly discovered vulnerability. The reported vulnerability actually resides in PolicyKit...

9CVSS0.9AI score0.11483EPSS
SaveExploits1
OSV
OSV
added 2018/12/03 6:29 a.m.32 views

CVE-2018-19788

A flaw was found in PolicyKit aka polkit 0.115 that allows a user with a uid greater than INTMAX to successfully execute any systemctl command...

8.8CVSS6.6AI score
SaveExploits0References10
Vulnrichment
Vulnrichment
added 2018/12/03 6:0 a.m.18 views

CVE-2018-19788

A flaw was found in PolicyKit aka polkit 0.115 that allows a user with a uid greater than INTMAX to successfully execute any systemctl command...

6.7AI score0.11483EPSS
SaveExploits1References9
AlpineLinux
AlpineLinux
added 2018/12/03 6:0 a.m.33 views

CVE-2018-19788

A flaw was found in PolicyKit aka polkit 0.115 that allows a user with a uid greater than INTMAX to successfully execute any systemctl command...

9CVSS6.8AI score0.11483EPSS
SaveExploits1
UbuntuCve
UbuntuCve
added 2018/12/03 12:0 a.m.22 views

CVE-2018-19788

A flaw was found in PolicyKit aka polkit 0.115 that allows a user with a uid greater than INTMAX to successfully execute any systemctl command...

9CVSS7.1AI score0.11483EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2018/10/09 10:0 p.m.25 views

CVE-2018-17963

qemudeliverpacketiov in net/net.c in Qemu accepts packet sizes greater than INTMAX, which allows attackers to cause a denial of service or possibly have unspecified other impact...

9.8AI score0.04782EPSS
SaveExploits0References9
Debian CVE
Debian CVE
added 2016/12/13 8:0 p.m.39 views

CVE-2016-7944

Integer overflow in X.org libXfixes before 5.0.3 on 32-bit platforms might allow remote X servers to gain privileges via a length value of INTMAX, which triggers the client to stop reading data and get out of sync...

9.8CVSS9AI score0.03395EPSS
SaveExploits0
Rows per page
Query Builder