CVE-2018-7006

CVE-2018-7006 is rejected/not used per the Initial Description; it does not represent an active vulnerability entry.

CVE-2018-7015

This CVE entry is rejected/not used and does not represent an active vulnerability entry.

CVE-2018-7024

CVE-2018-7024 entry is rejected/not used; this candidate was in CNA pool and not assigned to issues in 2018.

CVE-2018-7011

CVE-2018-7011 entry is rejected/not used and does not represent an active vulnerability.

Privilege Escalation

glusterfs.so is vulnerable to privilege escalation. A malicious user can authenticate through TLS using the gluster CLI with the --remote-host command to add themselves to the trusted pool and gain the same permissions...

CVE-2018-19268

This CVE entry is rejected/not used and does not represent an active vulnerability entry.

CVE-2018-19255

CVE-2018-19255 is rejected; this CVE entry is not an active vulnerability.

CVE-2018-13265

This CVE entry is rejected/not used; the candidate number was in a CNA pool and not assigned in 2018.

CVE-2018-13271

CVE-2018-13271 is rejected/not used; this entry does not represent an active vulnerability.

CVE-2018-13264

This CVE entry is rejected/not used and does not represent an active vulnerability.

CentOS 7 : keepalived (CESA-2019:0022)

An update for keepalived is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

Design/Logic Flaw

DriverAgent 2.2015.7.14, which includes DrvAgent64.sys 1.0.0.1, allows a user to send an IOCTL 0x80002068 with a user defined buffer size. If the size of the buffer is less than 512 bytes, then the driver will overwrite the next pool header if there is one next to the user buffer's pool...

CVE-2018-19523

DriverAgent 2.2015.7.14, which includes DrvAgent64.sys 1.0.0.1, allows a user to send an IOCTL 0x80002068 with a user defined buffer size. If the size of the buffer is less than 512 bytes, then the driver will overwrite the next pool header if there is one next to the user buffer's pool...

CVE-2018-19523

DriverAgent 2.2015.7.14, which includes DrvAgent64.sys 1.0.0.1, allows a user to send an IOCTL 0x80002068 with a user defined buffer size. If the size of the buffer is less than 512 bytes, then the driver will overwrite the next pool header if there is one next to the user buffer's pool...

PT-2019-9849

Name of the Vulnerable Software and Affected Versions DriverAgent version 2.2015.7.14 Description The issue allows a user to send an IOCTL 0x80002068 with a user-defined buffer size. If the size of the buffer is less than 512 bytes, the driver will overwrite the next pool header if there is one...

CVE-2018-19523: Improper Restriction of Operations within the Bounds of a Memory Buffer

DriverAgent 2.2015.7.14, which includes DrvAgent64.sys 1.0.0.1, allows a user to send an IOCTL 0x80002068 with a user defined buffer size. If the size of the buffer is less than 512 bytes, then the driver will overwrite the next pool header if there is one next to the user buffer's pool...

CVE-2018-20331

Local attackers can trigger a Kernel Pool Buffer Overflow in Antiy AVL ATool v1.0.0.22. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the processing of IOCTL 0x80002004 by the...

CVE-2018-20331

Local attackers can trigger a Kernel Pool Buffer Overflow in Antiy AVL ATool v1.0.0.22. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the processing of IOCTL 0x80002004 by the...

Buffer overflow

Local attackers can trigger a Kernel Pool Buffer Overflow in Antiy AVL ATool v1.0.0.22. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the processing of IOCTL 0x80002004 by the...

CVE-2018-20331

Local attackers can trigger a Kernel Pool Buffer Overflow in Antiy AVL ATool v1.0.0.22. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the processing of IOCTL 0x80002004 by the...