Lucene search
+L

109 matches found

NVD
NVD
•added 2018/02/23 5:29 p.m.•23 views

CVE-2018-6764

util/virlog.c in libvirt does not properly determine the hostname on LXC container startup, which allows local guest OS users to bypass an intended container protection mechanism and execute arbitrary commands via a crafted NSS module...

7.8CVSS6.5AI score0.00325EPSS
SaveExploits0References4
OSV
OSV
•added 2018/02/23 5:29 p.m.•8 views

DEBIAN-CVE-2018-6764

util/virlog.c in libvirt does not properly determine the hostname on LXC container startup, which allows local guest OS users to bypass an intended container protection mechanism and execute arbitrary commands via a crafted NSS module...

7.8CVSS6.9AI score0.00325EPSS
SaveExploits0References1
Prion
Prion
•added 2018/02/23 5:29 p.m.•28 views

Design/Logic Flaw

util/virlog.c in libvirt does not properly determine the hostname on LXC container startup, which allows local guest OS users to bypass an intended container protection mechanism and execute arbitrary commands via a crafted NSS module...

4.6CVSS7.6AI score0.00325EPSS
SaveExploits0References4Affected Software6
OSV
OSV
•added 2018/02/23 5:29 p.m.•46 views

CVE-2018-6764

util/virlog.c in libvirt does not properly determine the hostname on LXC container startup, which allows local guest OS users to bypass an intended container protection mechanism and execute arbitrary commands via a crafted NSS module...

7.8CVSS5.9AI score
SaveExploits0References4
CVE
CVE
•added 2018/02/23 5:00 p.m.•176 views

CVE-2018-6764

CVE-2018-6764 affects libvirt: util/virlog.c may fail to determine the hostname during LXC container startup, enabling a local attacker (guest OS user) to bypass container protections and run arbitrary commands via a crafted NSS module. The issue is concrete in libvirt’s LXC handling and NSS modu...

7.8CVSS6.5AI score0.00325EPSS
SaveExploits0References4Affected Software1
Debian CVE
Debian CVE
•added 2018/02/23 5:00 p.m.•34 views

CVE-2018-6764

util/virlog.c in libvirt does not properly determine the hostname on LXC container startup, which allows local guest OS users to bypass an intended container protection mechanism and execute arbitrary commands via a crafted NSS module...

7.8CVSS7.9AI score0.00325EPSS
SaveExploits0
Cvelist
Cvelist
•added 2018/02/23 5:00 p.m.•30 views

CVE-2018-6764

util/virlog.c in libvirt does not properly determine the hostname on LXC container startup, which allows local guest OS users to bypass an intended container protection mechanism and execute arbitrary commands via a crafted NSS module...

6.7AI score0.00325EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/02/23 12:00 a.m.•4 views

CVE-2018-6764: Origin Validation Error

util/virlog.c in libvirt does not properly determine the hostname on LXC container startup, which allows local guest OS users to bypass an intended container protection mechanism and execute arbitrary commands via a crafted NSS module...

7.8CVSS7AI score0.00325EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2018/02/07 4:48 a.m.•31 views

CVE-2018-6764

util/virlog.c in libvirt does not properly determine the hostname on LXC container startup, which allows local guest OS users to bypass an intended container protection mechanism and execute arbitrary commands via a crafted NSS module...

7.8CVSS6.9AI score0.00325EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2018/02/07 12:00 a.m.•35 views

CVE-2018-6764

util/virlog.c in libvirt does not properly determine the hostname on LXC container startup, which allows local guest OS users to bypass an intended container protection mechanism and execute arbitrary commands via a crafted NSS module...

7.8CVSS7AI score0.00325EPSS
SaveExploits0References2
OSV
OSV
•added 2017/09/25 9:29 p.m.•14 views

CVE-2015-7510

Stack-based buffer overflow in the getpwnam and getgrnam functions of the NSS module nss-mymachines in systemd...

9.8CVSS7.3AI score
SaveExploits0References8
Prion
Prion
•added 2017/09/25 9:29 p.m.•16 views

Stack overflow

Stack-based buffer overflow in the getpwnam and getgrnam functions of the NSS module nss-mymachines in systemd...

7.5CVSS7.5AI score0.04331EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2017/09/25 9:00 p.m.•38 views

CVE-2015-7510

Stack-based buffer overflow in the getpwnam and getgrnam functions of the NSS module nss-mymachines in systemd...

8.9AI score0.04331EPSS
SaveExploits1References3
CVE
CVE
•added 2017/09/25 9:00 p.m.•99 views

CVE-2015-7510

CVE-2015-7510 is a stack-based buffer overflow in the NSS module nss-mymachines of systemd, specifically in getpwnam and getgrnam. The vulnerability is described as enabling a crash/DoS under exploitation of the NSS functions. Public references show patches/update activity (e.g., systemd commit a...

9.8CVSS8.8AI score0.04331EPSS
SaveExploits1References3Affected Software1
Debian CVE
Debian CVE
•added 2017/09/25 9:00 p.m.•52 views

CVE-2015-7510

Stack-based buffer overflow in the getpwnam and getgrnam functions of the NSS module nss-mymachines in systemd...

9.8CVSS9.8AI score0.04331EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2016/03/08 12:00 a.m.•50 views

VMware ESX Multiple Vulnerabilities (VMSA-2010-0015) (remote check)

The remote VMware ESX host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in several third-party components and libraries : - Berkeley DB NSS module - cURL / libcURL - GnuTLS - Network Security Services...

10CVSS7AI score0.87264EPSS
SaveExploits20References9
Debian CVE
Debian CVE
•added 2016/02/18 9:00 p.m.•108 views

CVE-2015-7547

Multiple stack-based buffer overflows in the 1 senddg and 2 sendvc functions in the libresolv library in the GNU C Library aka glibc or libc6 before 2.23 allow remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted DNS response that triggers a call to...

8.1CVSS8.3AI score0.90987EPSS
SaveExploits17
Tenable Nessus
Tenable Nessus
•added 2016/02/17 12:00 a.m.•64 views

F5 Networks BIG-IP : glibc vulnerability (K47098834)

Multiple stack-based buffer overflows in the 1 senddg and 2 sendvc functions in the libresolv library in the GNU C Library aka glibc or libc6 before 2.23 allow remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted DNS response that triggers a call to...

8.1CVSS8.4AI score0.90987EPSS
SaveExploits17References3
RedHat Linux
RedHat Linux
•added 2016/02/16 3:38 p.m.•16 views

glibc: getaddrinfo stack-based buffer overflow

A stack-based buffer overflow was found in the way the libresolv library performed dual A/AAAA DNS queries. A remote attacker could create a specially crafted DNS response which could cause libresolv to crash or, potentially, execute code with the permissions of the user running the library. Note...

8.1CVSS8AI score0.90987EPSS
SaveExploits17References5
FreeBSD
FreeBSD
•added 2016/02/16 12:00 a.m.•54 views

glibc -- getaddrinfo stack-based buffer overflow

Fabio Olive Leite reports: A stack-based buffer overflow was found in libresolv when invoked from nssdns, allowing specially crafted DNS responses to seize control of EIP in the DNS client. The buffer overflow occurs in the functions senddg send datagram and sendvc send TCP for the NSS module...

8.1CVSS7.9AI score0.90987EPSS
SaveExploits17References4
Rows per page
Query Builder