CVE-2017-11741

HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion before 4.0.24 uses weak permissions for the sudo helper scripts, allows local users to execute arbitrary code with root privileges by overwriting one of the scripts...

CVE-2017-11741

CVE-2017-11741 affects HashiCorp Vagrant VMware Fusion plugin (vagrant-vmware-fusion) prior to 4.0.24. The issue stems from weak permissions granted to the plugin’s sudo helper scripts, enabling a local attacker to overwrite the scripts and execute arbitrary code with root privileges. Public refe...

CVE-2017-11741

HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion before 4.0.24 uses weak permissions for the sudo helper scripts, allows local users to execute arbitrary code with root privileges by overwriting one of the scripts...

SUSE-SU-2017:2102-1 Security update for Linux Kernel Live Patch 22 for SLE 12

This update for the Linux Kernel 3.12.61-5277 fixes several issues. The following security bugs were fixed: - CVE-2017-7533: A bug in inotify code allowed local users to escalate privilege bsc1050751. - CVE-2017-7645: The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel allowed remote...

SUSE-SU-2017:2093-1 Security update for Linux Kernel Live Patch 17 for SLE 12

This update for the Linux Kernel 3.12.60-5260 fixes several issues. The following security bugs were fixed: - CVE-2017-7533: A bug in inotify code allowed local users to escalate privilege bsc1050751. - CVE-2017-7645: The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel allowed remote...

SUSE-SU-2017:2088-1 Security update for Linux Kernel Live Patch 8 for SLE 12 SP1

This update for the Linux Kernel 3.12.62-60648 fixes several issues. The following security bugs were fixed: - CVE-2017-7533: A bug in inotify code allowed local users to escalate privilege bsc1050751. - CVE-2017-7645: The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel allowed remot...

EulerOS 2.0 SP1 : openssh (EulerOS-SA-2017-1138)

According to the version of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The shared memory manager associated with pre-authentication compression in sshd in OpenSSH before 7.4 does not ensure that a bounds check is...

CVE-2015-8621

t-coffee before 11.00.8cbe486-2 allows local users to write to /.tcoffee globally...

Code injection

t-coffee before 11.00.8cbe486-2 allows local users to write to /.tcoffee globally...

CVE-2015-8621

t-coffee before 11.00.8cbe486-2 allows local users to write to /.tcoffee globally...

SUSE-SU-2017:2061-1 Security update for Linux Kernel Live Patch 9 for SLE 12 SP1

This update for the Linux Kernel 3.12.67-606418 fixes several issues. The following security bugs were fixed: - CVE-2017-7533: A bug in inotify code allowed local users to escalate privilege bsc1050751. - CVE-2017-7645: The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel allowed remo...

SUSE-SU-2017:2063-1 Security update for Linux Kernel Live Patch 5 for SLE 12 SP2

This update for the Linux Kernel 4.4.49-9211 fixes several issues. The following security bugs were fixed: - CVE-2017-7533: A bug in inotify code allowed local users to escalate privilege bsc1050751. - CVE-2017-8797: The NFSv4 server in the Linux kernel did not properly validate the layout type...

SUSE-SU-2017:2070-1 Security update for Linux Kernel Live Patch 6 for SLE 12 SP2

This update for the Linux Kernel 4.4.49-9214 fixes several issues. The following security bugs were fixed: - CVE-2017-7533: A bug in inotify code allowed local users to escalate privilege bsc1050751. - CVE-2017-8797: The NFSv4 server in the Linux kernel did not properly validate the layout type...

SUSE-SU-2017:2062-1 Security update for Linux Kernel Live Patch 0 for SLE 12 SP2

This update for the Linux Kernel 4.4.21-69 fixes several issues. The following security bugs were fixed: - CVE-2017-7533: A bug in inotify code allowed local users to escalate privilege bsc1050751. - CVE-2017-8797: The NFSv4 server in the Linux kernel did not properly validate the layout type whe...

CVE-2017-7533

Race condition in the fsnotify implementation in the Linux kernel through 4.12.4 allows local users to gain privileges or cause a denial of service memory corruption via a crafted application that leverages simultaneous execution of the inotifyhandleevent and vfsrename functions...

Directory traversal

Dashlane might allow local users to gain privileges by placing a Trojan horse WINHTTP.dll in the %APPDATA%\Dashlane directory...

CVE-2017-11657

Dashlane on Windows is affected by a local privilege escalation (DLL hijacking) vulnerability: a local attacker could place a malicious WINHTTP.dll in %APPDATA%\Dashlane to gain higher privileges. The linked sources describe DLL hijacking as the method and indicate the vulnerability arises from h...

CVE-2017-7533

Race condition in the fsnotify implementation in the Linux kernel through 4.12.4 allows local users to gain privileges or cause a denial of service memory corruption via a crafted application that leverages simultaneous execution of the inotifyhandleevent and vfsrename functions...

CVE-2017-9247

Multiple unquoted service path vulnerabilities in Sierra Wireless Windows Mobile Broadband Driver Package MBDP with build ID 4657 allows local users to launch processes with elevated privileges...

Design/Logic Flaw

The sudo helper in the HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion before 4.0.21 allows local users to gain root privileges by leveraging failure to verify the path to the encoded ruby script or scrub the PATH variable...