864 matches found
glibc LD_AUDIT Arbitrary DSO Load Privilege Escalation
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/exploit/local/linux' require 'msf/core/exploit/exe' class MetasploitModule 'glibc LDAUDIT Arbitrary DSO Load Privilege Escalation', 'Description' = %q...
glibc '$ORIGIN' Expansion Privilege Escalation
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/exploit/local/linux' require 'msf/core/exploit/exe' class MetasploitModule "glibc '$ORIGIN' Expansion Privilege Escalation", 'Description' = %q This...
glibc LD_AUDIT Arbitrary DSO Load Privilege Escalation Exploit
This Metasploit module attempts to gain root privileges on Linux systems by abusing a vulnerability in the GNU C Library glibc dynamic linker. glibc ld.so in versions before 2.11.3, and 2.12.x before 2.12.2 does not properly restrict use of the LDAUDIT environment variable when loading setuid...
Security update for webkit2gtk3 (important)
This update for webkit2gtk3 fixes the following issues: Update to version 2.18.5: + Disable SharedArrayBuffers from Web API. + Reduce the precision of "high" resolution time to 1ms. + bsc1075419 - Security fixes: includes improvements to mitigate the effects of Spectre and Meltdown CVE-2017-5753...
openSUSE Security Update : webkit2gtk3 (openSUSE-2018-118) (Meltdown) (Spectre)
This update for webkit2gtk3 fixes the following issues : Update to version 2.18.5 : + Disable SharedArrayBuffers from Web API. + Reduce the precision of 'high' resolution time to 1ms. + bsc1075419 - Security fixes: includes improvements to mitigate the effects of Spectre and Meltdown CVE-2017-575...
Fedora 27 : glibc (2018-7714b514e2)
This update addresses two security vulnerabilities : - CVE-2017-16997: Check for empty tokens before dynamic string token expansion in the dynamic linker, so that pre-existing privileged programs with $ORIGIN rpaths/runpaths do not cause the dynamic linker to search the current directory,...
Fedora 26 : glibc (2018-8e27ad96ed)
This update addresses two security vulnerabilities : - CVE-2017-15670, CVE-2017-15671, CVE-2017-15804: Various vulnerabilities could lead to memory corruption in the glob and glob64 function. RHBZ1505298, RHBZ1504807 - CVE-2017-16997: Check for empty tokens before dynamic string token expansion i...
Fedora 27 : glibc (2017-828f8a8fc6)
This update addresses RHBZ1468837, which caused bash to lack job control in mock chroots. Note that glibc inside the chroot needs to be upgraded for the fix to be effective. In additon, two dynamic linker issues where fixed which are not security bugs, but received CVE IDs nevertheless RHBZ152486...
CVE-2017-17562
Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked. This is a result of initializing the environment of forked CGI scripts using untrusted HTTP request parameters in the cgiHandler function in cgi.c. When combined with the glibc...
CVE-2017-17562
Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked. This is a result of initializing the environment of forked CGI scripts using untrusted HTTP request parameters in the cgiHandler function in cgi.c. When combined with the glibc...
Remote code execution
Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked. This is a result of initializing the environment of forked CGI scripts using untrusted HTTP request parameters in the cgiHandler function in cgi.c. When combined with the glibc...
CVE-2017-17562
Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked. This is a result of initializing the environment of forked CGI scripts using untrusted HTTP request parameters in the cgiHandler function in cgi.c. When combined with the glibc...
SUSE SLED12 / SLES12 Security Update : binutils (SUSE-SU-2017:3170-1)
GNU binutil was updated to the 2.29.1 release, bringing various new features, fixing a lot of bugs and security issues. Following security issues are being addressed by this release : - 18750 bsc1030296 CVE-2014-9939 - 20891 bsc1030585 CVE-2017-7225 - 20892 bsc1030588 CVE-2017-7224 - 20898...
October 10, 2017—KB4042895 (OS Build 10240.17643)
None None...
October 17, 2017—KB4041686 (Preview of Monthly Rollup)
None None...
October 17, 2017—KB4041685 (Preview of Monthly Rollup)
None None...
October 17, 2017—KB4035176 Improvements and Fixes to Universal C Runtime in Windows
None None...
[SECURITY] Fedora 27 Update: pkgconf-1.3.9-1.fc27
pkgconf is a program which helps to configure compiler and linker flags for development frameworks. It is similar to pkg-config from freedesktop.org and handles .pc files in a similar manner as pkg-config...
Apple Memory Corruption Vulnerability (CNVD-2017-32723)
Apple Xcode is a set of integrated development environments IDEs provided by Apple to developers for Mac OS X and iOS applications. ld64 is one of the linker components. A security vulnerability exists in the ld64 component in versions of Apple Xcode prior to 9. A remote attacker can exploit this...
Apple Memory Corruption Vulnerability (CNVD-2017-32725)
Apple Xcode is a set of integrated development environments IDEs provided by Apple to developers for Mac OS X and iOS applications. ld64 is one of the linker components. A security vulnerability exists in the ld64 component in versions of Apple Xcode prior to 9. A remote attacker can exploit this...