UBUNTU-CVE-2016-3750

libs/binder/Parcel.cpp in the Parcels Framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not validate the return value of the dup system call, which allows attackers to bypass an isolation protection mechanism via a crafted...

PT-2019-4107 · Linux +7 · Linux Kernel +7

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 2.6.34 through 5.2.x Description: A buffer overflow flaw was found in the Linux kernel's vhost functionality, which translates virtqueue buffers to IOVs and logs buffer descriptors during migration. This flaw can be...

Design/Logic Flaw

UPR-Kernel in Ubuntu Privacy Remix UPR before 8.04r1 includes kernel support for mounting RAID arrays, which might allow remote attackers to bypass intended isolation mechanisms by 1 reading from or 2 writing to these arrays...

CVE-2008-5393

CVE-2008-5393 describes a vulnerability in the UPR-Kernel used by Ubuntu Privacy Remix (UPR) prior to 8.04_r1. The issue concerns kernel support for mounting RAID arrays, which could allow remote attackers to bypass isolation by reading from or writing to RAID arrays. Multiple sources (NVD, RH ad...