21896 matches found
Privilege Escalation
openstack-keystone is vulnerable to privilege escalation attacks. The vulnerability exists as the LDAP backend in OpenStack Identity Keystone Grizzly and Havana, when removing a role on a tenant for a user who does not have that role, adds the role to the user, which allows local users to gain...
Denial Of Service (DoS)
openstack-nova is vulnerable to denial of service DoS attacks. The vulnerability exists as OpenStack Compute Nova Folsom, Grizzly, and Havana does not properly verify the virtual size of a QCOW2 image, which allows local users to cause a denial of service host file system disk consumption via a...
World Writable Permissions
augeas is vulnerable to world writable permissions. The vulnerability exists as the transformsave function in transform.c in Augeas 1.0.0 through 1.1.0 does not properly calculate the permission values when the umask contains a "7," which causes world-writable permissions to be used for new files...
Information Disclosure
virt-who is vulnerable to information disclosure. Excessive permissions on the /etc/sysconfig/virt-who file allows any local users to read the contents and retrieve confidential information such as the password for hypervisors...
Information Disclosure
jboss is vulnerable to information disclosure attacks. The vulnerability exists as twiddle.sh in JBoss AS 5.0 and EAP 5.0 and earlier accepts credentials as command-line arguments, which allows local users to read the credentials by listing the process and its arguments...
Elevation Of Privileges
Jinja2 is vulnerable to elevation of privileges. Local users of Jinja2 are able to gain privileges by using a .cache file with a name starting with jinja2 in the /tmp directory. This is only applicable with the default configuration for bccache.FileSystemBytecodeCache...
Arbitrary File Overwrite
hplip3 is vulnerable to arbitrary file overwrite attacks. The vulnerability exists as the senddatatostdout function in prnt/hpijs/hpcupsfax.cpp in HP Linux Imaging and Printing HPLIP 3.x before 3.11.10 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hpcupsfax.out...
Denial Of Service (DoS)
openipmi is vulnerable to denial of service DoS attacks. The vulnerability exists as ipmievd aka the IPMI event daemon in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux RHEL 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for its ipmievd.pid...
Information Disclosure
qemu-kvm-rhev is vulnerable to information disclosure attacks. The vulnerability exists as qemu guest agent in Qemu 1.4.1 and earlier, as used by Xen, when started in daemon mode, uses weak permissions for certain files, which allows local users to read and write to these files...
Information Disclosure
libguestfs is vulnerable to information disclosure attacks. The vulnerability exists as virt-edit in libguestfs before 1.18.0 does not preserve the permissions from the original file and saves the new file with world-readable permissions when editing, which might allow local guest users to obtain...
Unauthorized Access
libvirt is vulnerable to unauthorized access attacks. The vulnerability exists as libvirt does not properly assign USB devices to virtual machines when multiple devices have the same vendor and product ID, which might cause the wrong device to be associated with a guest and might allow local user...
Denial Of Service (DoS)
libvirt is vulnerable to denial of service DoS attacks. The vulnerability exists through the qemuMigrationWaitForSpice function in qemu/qemumigration.c in libvirt before 1.1.3 that does not properly enter a monitor when performing seamless SPICE migration, which allows local users to cause a deni...
Authorization Bypass
qemu-kvm is vulnerable to authorization bypass attacks. The vulnerability exists through a buffer overflow in the SCSI implementation in QEMU, when a SCSI controller has more than 256 attached devices, allows local users to gain privileges via a small transfer buffer in a REPORT LUNS command...
Denial Of Service (DoS)
kernel-rt is vulnerable to denial of service DoS attacks. The vulnerability exists as the epoll implementation in the Linux kernel 2.6.37.2 and earlier does not properly traverse a tree of epoll file descriptors, which allows local users to cause a denial of service through a crafted application...
GNU tar has been updated to fix CVE-2018-20482
GNU Tar through 1.30, when --sparse is used, mishandles file shrinkage during read access, which allows local users to cause a denial of service infinite read loop in sparsedumpregion in sparse.c by modifying a file that is supposed to be archived by a different user's process e.g., a system back...
Input validation
An exploitable denial-of-service vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to improper input validation. A user with local access can use this vulnerability to terminate a privileged helper application. An attacker would need local access to the machine for a...
CVE-2018-16183
CVE-2018-16183 details an unquoted service path vulnerability in Panasonic PCs with pre-installed applications running Windows 7/8/8.1/10 (from Oct 2009 onward). The root cause is services started with unquoted file paths (CWE-428), which could allow local attackers to execute a Trojan horse exec...
Updated coreutils packages fix security vulnerabilities
A flaw was found in GNU Coreutils through 8.29 in chown-core.c. The functions chown and chgrp do not prevent replacement of a plain file with a symlink during use of the POSIX "-R -L" options, which allows local users to modify the ownership of arbitrary files by leveraging a race condition...
