Denial of service

The VBA32 AntiRootKit component for Novell Client 2 SP3 before IR5 on Windows allows local users to cause a denial of service bugcheck and BSOD via an IOCTL call for an invalid IOCTL...

CVE-2013-3705

The VBA32 AntiRootKit component for Novell Client 2 SP3 before IR5 on Windows allows local users to cause a denial of service bugcheck and BSOD via an IOCTL call for an invalid IOCTL...

CVE-2013-3705

CVE-2013-3705 affects Novell Client 2 SP3 on Windows, specifically the VBA32 AntiRootKit component. The issue is a local DoS via an invalid IOCTL call to the IOCTL handling, potentially causing a bugcheck/BSOD. The vulnerability is described as affecting SP3 prior to IR5; Nessus/Vulnerability fee...

PT-2013-4574

Name of the Vulnerable Software and Affected Versions Novell Client 2 SP3 versions before IR5 Description The issue allows local users to cause a denial of service, resulting in a bugcheck and BSOD, via an IOCTL call for an invalid IOCTL. Recommendations For Novell Client 2 SP3 versions before IR...

CVE-2013-3705: Improper Input Validation

The VBA32 AntiRootKit component for Novell Client 2 SP3 before IR5 on Windows allows local users to cause a denial of service bugcheck and BSOD via an IOCTL call for an invalid IOCTL...

Mandriva Linux Security Advisory : kernel (MDVSA-2013:291)

Multiple vulnerabilities has been found and corrected in the Linux kernel : The Linux kernel before 3.12.2 does not properly use the getdumpable function, which allows local users to bypass intended ptrace restrictions or obtain sensitive information from IA64 scratch registers via a crafted...

PT-2013-1028 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 3.12.5 Description: The issue allows local users to gain privileges via a large id value, specifically through an array index error in the kvm vm ioctl create vcpu function in the KVM subsystem. This can be...

Low: kernel

Issue Overview: Multiple buffer underflows in the XFS implementation in the Linux kernel through 3.12.1 allow local users to cause a denial of service memory corruption or possibly have unspecified other impact by leveraging the CAPSYSADMIN capability for a 1 XFSIOCATTRLISTBYHANDLE or 2...

CVE-2013-6431

The fib6add function in net/ipv6/ip6fib.c in the Linux kernel before 3.11.5 does not properly implement error-code encoding, which allows local users to cause a denial of service NULL pointer dereference and system crash by leveraging the CAPNETADMIN capability for an IPv6 SIOCADDRT ioctl call...

CVE-2013-6431

The fib6add function in net/ipv6/ip6fib.c in the Linux kernel before 3.11.5 does not properly implement error-code encoding, which allows local users to cause a denial of service NULL pointer dereference and system crash by leveraging the CAPNETADMIN capability for an IPv6 SIOCADDRT ioctl call...

UBUNTU-CVE-2013-6431

The fib6add function in net/ipv6/ip6fib.c in the Linux kernel before 3.11.5 does not properly implement error-code encoding, which allows local users to cause a denial of service NULL pointer dereference and system crash by leveraging the CAPNETADMIN capability for an IPv6 SIOCADDRT ioctl call...

CVE-2013-6409

Debian adequate before 0.8.1, when run by root with the --user option, allows local users to hijack the tty and possibly gain privileges via the TIOCSTI ioctl...

CVE-2013-6409

Debian adequate before 0.8.1, when run by root with the --user option, allows local users to hijack the tty and possibly gain privileges via the TIOCSTI ioctl...

CVE-2013-6409

Debian adequate before 0.8.1, when run by root with the --user option, allows local users to hijack the tty and possibly gain privileges via the TIOCSTI ioctl...

Code injection

Debian adequate before 0.8.1, when run by root with the --user option, allows local users to hijack the tty and possibly gain privileges via the TIOCSTI ioctl...

CVE-2013-6409

Debian adequate before 0.8.1, when run by root with the --user option, allows local users to hijack the tty and possibly gain privileges via the TIOCSTI ioctl...

USN-2049-1: Linux kernel vulnerabilities

Miroslav Vadkerti discovered a flaw in how the permissions for network sysctls are handled in the Linux kernel. An unprivileged local user could exploit this flaw to have privileged access to files in /proc/sys/net/. CVE-2013-4270 A flaw was discovered in the Linux kernel's dm snapshot facility. ...

CVE-2013-6409: Undefined Security Weakness

Debian adequate before 0.8.1, when run by root with the --user option, allows local users to hijack the tty and possibly gain privileges via the TIOCSTI ioctl...

PT-2013-6035

Name of the Vulnerable Software and Affected Versions Debian adequate version prior to 0.8.1 Description The issue allows local users to potentially gain privileges by hijacking the tty when the software is run by root with the --user option, utilizing the TIOCSTI ioctl. Recommendations For...

Ubuntu: Security Advisory (USN-2040-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...