543 matches found
SUSE SLES12 Security Update : kernel (SUSE-SU-2018:0270-1)
This update for the Linux Kernel 3.12.74-606463 fixes several issues. The following security issues were fixed : - CVE-2017-15868: The bnepaddconnection function in net/bluetooth/bnep/core.c in did not ensure that an l2cap socket is available, which allowed local users to gain privileges via a...
Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20171115)
Security Fixes : - A race condition issue leading to a use-after-free flaw was found in the way the raw packet sockets are implemented in the Linux kernel networking subsystem handling synchronization. A local user able to open a raw packet socket requires the CAPNETRAW capability could use this...
CVE-2017-16659
The Gentoo mail-filter/assp package 1.9.8.13030 and earlier allows local users to gain privileges by leveraging access to the assp user account to install a Trojan horse /usr/share/assp/assp.pl script...
kernel: Integer overflow in ip6_find_1stfragopt() causes infinite loop
An integer overflow vulnerability in ip6find1stfragopt function was found. A local attacker that has privileges of CAPNETRAW to open raw socket can cause an infinite loop inside the ip6find1stfragopt function...
CVE-2017-3757
An unquoted service path vulnerability was identified in the driver for the ElanTech Touchpad, various versions, used on some Lenovo brand notebooks not ThinkPads. This could allow an attacker with local privileges to execute code with administrative privileges...
Privilege escalation
A privilege escalation vulnerability was identified in Lenovo Active Protection System for ThinkPad systems versions earlier than 1.82.0.17. An attacker with local privileges could execute code with administrative privileges via an unquoted service path...
Design/Logic Flaw
An unquoted service path vulnerability was identified in the driver for the ThinkPad Compact USB Keyboard with TrackPoint versions earlier than 1.5.5.0. This could allow an attacker with local privileges to execute code with administrative privileges...
CVE-2017-3751
An unquoted service path vulnerability was identified in the driver for the ThinkPad Compact USB Keyboard with TrackPoint versions earlier than 1.5.5.0. This could allow an attacker with local privileges to execute code with administrative privileges...
Unquoted Service Path Privilege Escalation in ThinkPad Active Protection System - Lenovo Support US
No description provided...
CVE-2017-3751
An unquoted service path vulnerability was identified in the driver for the ThinkPad Compact USB Keyboard with TrackPoint versions earlier than 1.5.5.0. This could allow an attacker with local privileges to execute code with administrative privileges...
Pelco VideoXpert 1.12.105 - Local Privilege Escalation
Schneider Electric Pelco VideoXpert Privilege Escalations Vendor: Schneider Electric SE Product web page: https://www.pelco.com Affected version: Core Software 1.12.105 Media Gateway Software 1.12.26 Exports 1.12 Summary: VideoXpert is a video management solution designed for scalability, fitting...
CVE-2017-3747
Privilege escalation vulnerability in Lenovo Nerve Center for Windows 10 on Desktop systems Lenovo Nerve Center for notebook systems is not affected that could allow an attacker with local privileges on a system to alter registry keys...
Code injection
In Lenovo Service Bridge before version 4, a user with local privileges on a system could execute code with administrative privileges...
CVE-2016-8228
In Lenovo Service Bridge before version 4, a user with local privileges on a system could execute code with administrative privileges...
CVE-2017-3740
In Lenovo Active Protection System before 1.82.0.14, an attacker with local privileges could send commands to the system's embedded controller, which could cause a denial of service attack on the system or the ability to alter hardware functionality...
CVE-2016-8228
CVE-2016-8228 (Lenovo Service Bridge) affects Lenovo Service Bridge on Windows. Before version 4, a user with local privileges could execute code with administrative privileges, enabling local privilege escalation. Connected sources corroborate a local code execution vulnerability in LSB prior to...
CVE-2016-8228
In Lenovo Service Bridge before version 4, a user with local privileges on a system could execute code with administrative privileges...
Microsoft Windows 7 Kernel - Uninitialized Memory in the Default dacl Descriptor of System Processes Token
Microsoft Windows 7 Kernel - Uninitialized Memory in the Default dacl Descriptor of System Processes Token / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1145 We have observed on Windows 7 32-bit that for unclear reasons, the kernel-mode structure containing the default DACL ...
Lenovo Active Protection System Privilege Escalation - us
Lenovo Security Advisory: LEN-13637 Potential Impact: Privilege Escalation or Denial of Service Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2017-3740 Summary Description: During an internal assessment, a local privilege escalation vulnerability was identified in Lenovo...