CVE-2017-1000374

NetBSD stack guard page bypass vulnerability allows arbitrary code execution via certain setuid binaries. Affected: NetBSD 7.1 and possibly earlier. The description is consistent across CVE-2017-1000374 records; no exploit status or explicit remediation details are provided in the connected docum...

CVE-2017-1000375

NetBSD maps the run-time link-editor ld.so directly below the stack region, even if ASLR is enabled, this allows attackers to more easily manipulate memory leading to arbitrary code execution. This affects NetBSD 7.1 and possibly earlier versions...

CVE-2017-1000375

CVE-2017-1000375 pertains to NetBSD where the run-time linker ld.so is mapped directly below the stack region, bypassing ASLR and enabling memory manipulation that leads to arbitrary code execution. Affected family includes NetBSD 7.1 and possibly earlier versions. The vulnerability is demonstrat...

CVE-2017-1000378

The CVE-2017-1000378 entry concerns the NetBSD qsort() implementation. The root cause is that qsort() is recursive and not randomized, enabling an attacker to construct a pathological input array of N elements that deterministically recurses N/4 times. This can cause the process to consume arbitr...

CVE-2017-1000378

The NetBSD qsort function is recursive, and not randomized, an attacker can construct a pathological input array of N elements that causes qsort to deterministically recurse N/4 times. This allows attackers to consume arbitrary amounts of stack memory and manipulate stack memory to assist in...

CVE-2017-1000374

A flaw exists in NetBSD's implementation of the stack guard page that allows attackers to bypass it resulting in arbitrary code execution using certain setuid binaries. This affects NetBSD 7.1 and possibly earlier versions...

Directory traversal

dpkg-source in dpkg 1.3.0 through 1.18.23 is able to use a non-GNU patch program and does not offer a protection mechanism for blank-indented diff hunks, which allows remote attackers to conduct directory traversal attacks via a crafted Debian source package, as demonstrated by use of dpkg-source...

CVE-2017-8283

dpkg-source in dpkg 1.3.0 through 1.18.23 is able to use a non-GNU patch program and does not offer a protection mechanism for blank-indented diff hunks, which allows remote attackers to conduct directory traversal attacks via a crafted Debian source package, as demonstrated by use of dpkg-source...

CVE-2017-8283

dpkg-source in dpkg 1.3.0 through 1.18.23 is able to use a non-GNU patch program and does not offer a protection mechanism for blank-indented diff hunks, which allows remote attackers to conduct directory traversal attacks via a crafted Debian source package, as demonstrated by use of dpkg-source...

CVE-2017-8283

dpkg-source in dpkg 1.3.0 through 1.18.23 is able to use a non-GNU patch program and does not offer a protection mechanism for blank-indented diff hunks, which allows remote attackers to conduct directory traversal attacks via a crafted Debian source package, as demonstrated by use of dpkg-source...

CVE-2017-8283

dpkg-source in dpkg 1.3.0 through 1.18.23 is able to use a non-GNU patch program and does not offer a protection mechanism for blank-indented diff hunks, which allows remote attackers to conduct directory traversal attacks via a crafted Debian source package, as demonstrated by use of dpkg-source...

The vulnerability of the NetBSD operating system allows a hacker to bypass the protection against cross-site request forgery attacks.

The vulnerability of the mail.local service in the NetBSD operating system is related to incorrect definition of links before accessing the file. Exploiting this vulnerability allows a malicious actor to bypass security measures against cross-site request forgery by manipulating symbolic links...

NetBSD 'connect()' Local Denial of Service Vulnerability

NetBSD is a BSD-based operating system. A local denial of service vulnerability exists in NetBSD 'connect', which can be exploited by an attacker to crash the kernel and launch a denial of service attack...

Code injection

mail.local in NetBSD versions 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows local users to change ownership of or append data to arbitrary files on the target system via a symlink attack on the user mailbox...

CVE-2016-6253

mail.local in NetBSD versions 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows local users to change ownership of or append data to arbitrary files on the target system via a symlink attack on the user mailbox...

CVE-2016-6253

mail.local in NetBSD versions 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows local users to change ownership of or append data to arbitrary files on the target system via a symlink attack on the user mailbox...

CVE-2016-6253

CVE-2016-6253 concerns NetBSD’s mail.local local privilege escalation. A race/symlink vulnerability in mail.local (affecting NetBSD 6.0–6.0.6, 6.1–6.1.5, and 7.0) allows a local user to change ownership of or append data to arbitrary files via the user mailbox handling. Public references document...

CVE-2015-8212

CGI handling flaw in bozohttpd in NetBSD 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows remote attackers to execute arbitrary code via crafted arguments, which are handled by a non-CGI aware program...

CVE-2015-8212

CGI handling flaw in bozohttpd in NetBSD 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows remote attackers to execute arbitrary code via crafted arguments, which are handled by a non-CGI aware program...

UBUNTU-CVE-2015-8212

CGI handling flaw in bozohttpd in NetBSD 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows remote attackers to execute arbitrary code via crafted arguments, which are handled by a non-CGI aware program...