7503 matches found
Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2018-4172)
The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4172 advisory. - KVM: Fix stack-out-of-bounds read in writemmio Wanpeng Li Orabug: 27951293 CVE-2017-17741 CVE-2017-17741 - kernel/exit.c: avoid undefined behavio...
Apple macOS/OS X Sensitive Information Disclosure Vulnerability
macOS is Apple's proprietary operating system for the Mac line of products. An Apple macOS/OS X sensitive information disclosure vulnerability exists due to an out-of-bounds memory read error triggered in the IOGraphics component, which can be exploited by an attacker to gain access to the conten...
Google Android has an unspecified vulnerability (CNVD-2019-44517)
Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A security vulnerability exists in Android that stems from the program not properly validating pointers in the ADSPRPC command. An attacker can exploit the vulnerability to access...
About the security content of watchOS 4.3.2
About the security content of watchOS 4.3.2 This document describes the security content of watchOS 4.3.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...
About the security content of macOS High Sierra 10.13.6, Security Update 2018-004 Sierra, Security Update 2018-004 El Capitan
About the security content of macOS High Sierra 10.13.6, Security Update 2018-004 Sierra, Security Update 2018-004 El Capitan This document describes the security content of macOS High Sierra 10.13.6, Security Update 2018-004 Sierra, Security Update 2018-004 El Capitan. About Apple security updat...
CVE-2018-5886
CVE-2018-5886 describes a vulnerability where a pointer in an ADSPRPC command is not properly validated in CAF Android builds using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android). The root cause is improper validation of a pointer in the ADSPRPC path, which can allow access t...
Ubuntu: Security Advisory (USN-3697-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
IBM AIX rmsock SetUID Binary Information Leak
Summary An exploitable kernel memory leak vulnerability is exposed by the rmsock setUID functionality of IBM AIX 6.1 and IBM AIX 7.1. A specially crafted command line can cause a kernel memory leak, resulting in uninitialized kernel memory being exposed. An attacker can execute rmuser with an...
Ubuntu: Security Advisory (USN-3695-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security Bulletin: Vulnerability in rmsock affects AIX (CVE-2018-1655)
Summary There is a vulnerability in the rmsock command that affects AIX. Vulnerability Details CVEID: CVE-2018-1655 DESCRIPTION: IBM AIX contains a vulnerability in the rmsock command that may be used to expose kernel memory. CVSS Base Score: 4 CVSS Temporal Score: See...
USN-3698-2: Linux kernel (Trusty HWE) vulnerabilities
USN-3698-1 fixed vulnerabilities in the Linux kernel for Ubuntu 14.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 14.04 LTS for Ubuntu 12.04 ESM. It was discovered that the nested KVM implementation in the Linux kernel in some...
USN-3695-1: Linux kernel vulnerabilities
Wen Xu discovered that the ext4 filesystem implementation in the Linux kernel did not properly initialize the crc32c checksum driver. A local attacker could use this to cause a denial of service system crash. CVE-2018-1094 It was discovered that the cdrom driver in the Linux kernel contained an...
AIX rmsock Advisory : rmsock_advisory2.asc (IJ06904) (IJ06905) (IJ06906) (IJ06907) (IJ06908) (IJ06934) (IJ06935)
The version of the rmsock command installed on the remote AIX host is affected by an information disclosure vulnerability. An unauthenticated, local attacker can exploit this and potentially expose kernel memory. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid110777;...
CVE-2018-1655
IBM AIX 5.3, 6.1, 7.1, and 7.2 contains a vulnerability in the rmsock command that may be used to expose kernel memory. IBM X-Force ID: 144748...
Design/Logic Flaw
IBM AIX 5.3, 6.1, 7.1, and 7.2 contains a vulnerability in the rmsock command that may be used to expose kernel memory. IBM X-Force ID: 144748...
CVE-2018-1655
IBM AIX 5.3, 6.1, 7.1, and 7.2 contains a vulnerability in the rmsock command that may be used to expose kernel memory. IBM X-Force ID: 144748...
CVE-2018-1655
IBM AIX 5.3, 6.1, 7.1, and 7.2 contains a vulnerability in the rmsock command that may be used to expose kernel memory. IBM X-Force ID: 144748...
CVE-2018-1655
CVE-2018-1655 affects IBM AIX rmsock in AIX 5.3, 6.1, 7.1, 7.2 (and VIOS 2.2.x). The rmsock setUID binary can leak uninitialized kernel memory when handling crafted socket addresses, enabling an information disclosure via kernel memory exposure. TALOS confirms a kernel memory leak vulnerability e...
IBM AIX Information Disclosure Vulnerability (CNVD-2018-12113)
IBM AIX Advanced Interactive eXecutive is a UNIX operating system developed by IBM. A security vulnerability exists in the rmsock command in IBM AIX. An attacker can exploit this vulnerability to disclose kernel memory...
CVE-2018-1655
IBM AIX 5.3, 6.1, 7.1, and 7.2 contains a vulnerability in the rmsock command that may be used to expose kernel memory. IBM X-Force ID: 144748. Recent assessments: timb-machine at March 05, 2021 12:31am UTC reported: This bug is trivial to exploit but time consuming to gain useful advantage. Each...