13 matches found
CVE-2018-10933_ssh
CVE-2018-10933 测试此代码: 从主页获取易受攻击的 libssh 版本:https://www.libssh.org/files/0.7/libssh-0.7.4.tar.xz 解压并构建,然后进入 example 目录,那里有一个使用 libssh 的简单 sshd 服务器,名称:samplesshd-cb 通过以下命令运行这个简单的 sshd: $ samplesshd-cb 127.0.0.1 -p 2222 运行我的代码,输出将是: Allocated session channel Allocated shell...
CVE-2018-10933
CVE-2018-10933 要测试此代码: 在主页获取存在漏洞的 libssh 版本:https://www.libssh.org/files/0.7/libssh-0.7.4.tar.xz 解压并构建,然后进入 example 目录,有一个使用 libssh 的简单 sshd 服务器,名为:samplesshd-cb 通过以下命令运行这个简单的 sshd: $ samplesshd-cb 127.0.0.1 -p 2222 运行我的代码,输出将为: Allocated session channel Allocated shell 这意味着我可以绕过身份验证,无需任何凭据即可生成一个...
CVE-2026-67279
RouterOS SSH enters the connection protocol after a client-requested rekey even though user authentication was never attempted, allowing an unauthenticated client to open a session channel and send an exec request. On affected builds the server dispatches the command, enabling unauthenticated...
UBUNTU-CVE-2022-50856
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix xid leak in cifssesaddchannel Before return, should free the xid, otherwise, the xid will be leaked...
CVE-2022-50856
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix xid leak in cifssesaddchannel Before return, should free the xid, otherwise, the xid will be leaked...
CVE-2022-50856
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix xid leak in cifssesaddchannel Before return, should free the xid, otherwise, the xid will be leaked...
CVE-2022-50856
The CVE-2022-50856 entry applies to the Linux kernel, specifically the CIFS subsystem. The vulnerability was caused by an xid leak in cifs_ses_add_channel() where the xid was not freed before returning. A fix was applied to ensure the xid is freed, mitigating the leak. Affected versions/contexts ...
CVE-2022-50856 cifs: Fix xid leak in cifs_ses_add_channel()
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix xid leak in cifssesaddchannel Before return, should free the xid, otherwise, the xid will be leaked...
CVE-2022-50856
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix xid leak in cifssesaddchannel Before return, should free the xid, otherwise, the xid will be leaked...
PT-2025-53974
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's CIFS implementation within the cifs ses add channel function. Specifically, the function fails to free a transaction ID xid before returning, leading ...
DEBIAN-CVE-2024-35999
In the Linux kernel, the following vulnerability has been resolved: smb3: missing lock when picking channel Coverity spotted a place where we should have been holding the channel lock when accessing the ses channel index. Addresses-Coverity: 1582039 "Data race condition MISSINGLOCK"...
DEBIAN-CVE-2011-4063
chansip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.7.1 and 10.x before 10.0.0-rc1 does not properly initialize variables during request parsing, which allows remote authenticated users to cause a denial of service daemon crash via a malformed request...
DEBIAN-CVE-2008-1332
Unspecified vulnerability in Asterisk Open Source 1.2.x before 1.2.27, 1.4.x before 1.4.18.1 and 1.4.19-rc3; Business Edition A.x.x, B.x.x before B.2.5.1, and C.x.x before C.1.6.2; AsteriskNOW 1.0.x before 1.0.2; Appliance Developer Kit before 1.4 revision 109393; and s800i 1.0.x before 1.1.0.2;...