CVE-2019-15540

filters/filter-cso/filter-stream.c in the CSO filter in libMirage 3.2.2 in CDemu does not validate the part size, triggering a heap-based buffer overflow that can lead to root access by a local Linux user...

libguestfs-winsupport security update

7.2-3 - Fix for CVE-2019-9755 heap-based buffer overflow leads to local root privilege escalation resolves: rhbz1698502...

Exploit for CVE-2019-13272

CVE-2019-13272 Linux local root exploit Linux 4.10 "...

Low: Red Hat Security Advisory: libguestfs-winsupport security update

An update for libguestfs-winsupport is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabilit...

CVE-2017-18400

cPanel before 68.0.15 allows local root code execution via cpdavd SEC-333...

Remote code execution

cPanel before 68.0.15 allows local root code execution via cpdavd SEC-333...

CVE-2017-18400

CVE-2017-18400 affects cPanel before 68.0.15, enabling local root code execution via the cpdavd component. The vulnerability is triggered by an attacker with local access, leading to complete control over the host’s root privileges as described in multiple sources (e.g., Red Hat advisory and CNVD...

Exploit for CVE-2019-13272

CVE-2019-13272 Linux local root exploit Linux 4.10 "...

Slackware 14.2 : Slackware 14.2 kernel (SSA:2019-202-01)

New kernel packages are available for Slackware 14.2 to fix security issues. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2019-202-01. The text itself is copyright C Slackware Linux, Inc. include'compat.inc...

UBUNTU-CVE-2019-13272

In the Linux kernel before 5.1.17, ptracelink in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to obtain root access by leveraging certain scenarios with a parent-child process relationship, where a...

DEBIAN-CVE-2019-11675

The groonga-httpd package 6.1.5-1 for Debian sets the /var/log/groonga ownership to the groonga account, which might let local users obtain root access because of unsafe interaction with logrotate. For example, an attacker can exploit a race condition to insert a symlink from /var/log/groonga/htt...

UBUNTU-CVE-2019-11675

The groonga-httpd package 6.1.5-1 for Debian sets the /var/log/groonga ownership to the groonga account, which might let local users obtain root access because of unsafe interaction with logrotate. For example, an attacker can exploit a race condition to insert a symlink from /var/log/groonga/htt...

openSUSE Security Update : dovecot22 (openSUSE-2019-1220)

This update for dovecot22 fixes the following issues : Security issues fixed : - CVE-2019-7524: Fixed an improper file handling which could result in stack overflow allowing local root escalation bsc1130116. - CVE-2019-3814: Fixed a vulnerability related to SSL client certificate authentication...

openSUSE Security Update : dovecot23 (openSUSE-2019-1212)

This update for dovecot23 fixes the following issue : Security issue fixed : - CVE-2019-7524: Fixed an improper file handling which could result in stack oveflow allowing local root escalation bsc1130116. This update was imported from the SUSE:SLE-15:Update update project. %NASLMINLEVEL 70300 C...

openSUSE: Security Advisory for dovecot23 (openSUSE-SU-2019:1212-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2019:1212-1 Security update for dovecot23

This update for dovecot23 fixes the following issue: Security issue fixed: - CVE-2019-7524: Fixed an improper file handling which could result in stack oveflow allowing local root escalation bsc1130116. This update was imported from the SUSE:SLE-15:Update update project...

Security update for dovecot23 (moderate)

openSUSE Security Update: Security update for dovecot23 Announcement ID: openSUSE-SU-2019:1212-1 Rating: moderate References: 1130116 Cross-References: CVE-2019-7524 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for dovecot...

SUSE SLES15 Security Update : dovecot23 (SUSE-SU-2019:0876-1)

This update for dovecot23 fixes the following issue : Security issue fixed : CVE-2019-7524: Fixed an improper file handling which could result in stack oveflow allowing local root escalation bsc1130116. Note that Tenable Network Security has extracted the preceding description block directly from...

SUSE-SU-2019:0876-1 Security update for dovecot23

This update for dovecot23 fixes the following issue: Security issue fixed: - CVE-2019-7524: Fixed an improper file handling which could result in stack oveflow allowing local root escalation bsc1130116...

Internet Bug Bounty: Apache HTTP [2.4.17-2.4.38] Local Root Privilege Escalation

Hello, I reported a Local Root privilege escalation vulnerability on Apache HTTPd at the beginning of the year. Apache has now patched it, as you can see here. The vulnerability affects modprefork, modevent, and modworker, the most used mods on Linux. Basically, this is an arbitrary function call...