210 matches found
SUSE CVE-2022-23613
xrdp is an open source remote desktop protocol RDP server. In affected versions an integer underflow leading to a heap overflow in the sesman server allows any unauthenticated attacker which is able to locally access a sesman server to execute code as root. This vulnerability has been patched in...
AZL-38137 CVE-2022-3650 affecting package ceph for versions less than 18.2.1-1
A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a local attacker to escalate privileges to root in the form of a crash dump, and dump privileged information...
Vulnerability in HPE OfficeConnect switches
HP Enterprise has fixed a vulnerability in several OfficeConnect switches. The vulnerability allows a malicious party to able to bypass authentication. The malicious party can use the acquired access to the switch to execute code on the underlying system with the privileges of the root user...
CVE-2022-30984
A buffer overflow vulnerability in the Rubrik Backup Service RBS Agent for Linux or Unix-based systems in Rubrik CDM 7.0.1, 7.0.1-p1, 7.0.1-p2 or 7.0.1-p3 before CDM 7.0.2-p2 could allow a local attacker to obtain root privileges by sending a crafted message to the RBS agent...
PT-2022-20437 · Rubrik · Rubrik Cdm
Name of the Vulnerable Software and Affected Versions: Rubrik CDM versions 7.0.1 through 7.0.1-p3 Description: A buffer overflow vulnerability in the Rubrik Backup Service RBS Agent for Linux or Unix-based systems could allow a local attacker to obtain root privileges by sending a crafted message...
CVE-2022-27239
In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges...
DEBIAN-CVE-2021-31155
Failure to normalize the umask in please before 0.4 allows a local attacker to gain full root privileges if they are allowed to execute at least one command...
CVE-2020-5025
IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, 11.1, and 11.5 db2fm is vulnerable to a buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with root privileges. IBM X-Force ID: 193661...
Apple Patches 10-Year-Old macOS SUDO Root Privilege Escalation Bug
Apple has rolled out a fix for a critical sudo vulnerability in macOS Big Sur, Catalina, and Mojave that could allow unauthenticated local users to gain root-level privileges on the system. "A local attacker may be able to elevate their privileges," Apple said in a security advisory. "This issue...
kernel: out-of-bounds write via crafted keycode table
An out-of-bounds write flaw was found in the Linux kernel. A crafted keycode table could be used by drivers/input/input.c to perform the out-of-bounds write. A local user with root access can insert garbage to this keycode table that can lead to out-of-bounds memory access. The highest threat fro...
kernel: out-of-bounds write via crafted keycode table
An out-of-bounds write flaw was found in the Linux kernel. A crafted keycode table could be used by drivers/input/input.c to perform the out-of-bounds write. A local user with root access can insert garbage to this keycode table that can lead to out-of-bounds memory access. The highest threat fro...
CVE-2020-16261
Winston 1.5.4 devices allow a U-Boot interrupt, resulting in local root access...
CVE-2020-16261
Winston 1.5.4 devices allow a U-Boot interrupt, resulting in local root access...
Design/Logic Flaw
Winston 1.5.4 devices allow a U-Boot interrupt, resulting in local root access...
CVE-2020-16261
Winston 1.5.4 devices allow a U-Boot interrupt, resulting in local root access...
CVE-2020-16261
CVE-2020-16261 affects Winston 1.5.4 devices. The vulnerability arises from a U-Boot interrupt that can grant local root access, indicating a component/root-cause issue at boot-time or firmware control paths. The available sources describe the impact as local root access with confidentiality, int...
kernel: lockdown: bypass through ACPI write via efivar_ssdt
A flaw was found in how the ACPI table loading through the EFI variable and the related efivarssdt boot option was handled when the Linux kernel was locked down. This flaw allows a root privileged local user to circumvent the kernel lockdown restrictions. The highest threat from this vulnerabilit...
kernel: out-of-bounds write via crafted keycode table
An out-of-bounds write flaw was found in the Linux kernel. A crafted keycode table could be used by drivers/input/input.c to perform the out-of-bounds write. A local user with root access can insert garbage to this keycode table that can lead to out-of-bounds memory access. The highest threat fro...
CVE-2020-1989
An incorrect privilege assignment vulnerability when writing application-specific files in the Palo Alto Networks Global Protect Agent for Linux on ARM platform allows a local authenticated user to gain root privileges on the system. This issue affects Palo Alto Networks Global Protect Agent for...