[USN-2392-1] systemd-shim vulnerability

========================================================================== Ubuntu Security Notice USN-2392-1 October 30, 2014 systemd-shim vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives...

CVE-2014-8399

The default configuration in systemd-shim 8 enables the Abandon debugging clause, which allows local users to cause a denial of service via unspecified vectors...

CVE-2014-8399

The default configuration in systemd-shim 8 enables the Abandon debugging clause, which allows local users to cause a denial of service via unspecified vectors...

Default configuration

The default configuration in systemd-shim 8 enables the Abandon debugging clause, which allows local users to cause a denial of service via unspecified vectors...

CVE-2014-8399

CVE-2014-8399 affects systemd-shim 8 and is described in Ubuntu USN-2392-1. The vulnerability arises from a debugging clause enabled by default, allowing a local attacker to cause a denial of service via unspecified vectors. The Ubuntu advisory specifies update to systemd-shim 8-1ubuntu0.1 as the...

CVE-2014-8399

Removed by vendor...

CVE-2014-8399

The default configuration in systemd-shim 8 enables the Abandon debugging clause, which allows local users to cause a denial of service via unspecified vectors...

Ubuntu 14.10 : systemd-shim vulnerability (USN-2392-1)

It was discovered that systemd-shim incorrectly shipped with a debugging clause enabled. A local attacker could possibly use this issue to cause a denial of service. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenabl...

USN-2392-1: systemd-shim vulnerability

It was discovered that systemd-shim incorrectly shipped with a debugging clause enabled. A local attacker could possibly use this issue to cause a denial of service...

UBUNTU-CVE-2014-8399

The default configuration in systemd-shim 8 enables the Abandon debugging clause, which allows local users to cause a denial of service via unspecified vectors...

CVE-2014-8399

The default configuration in systemd-shim 8 enables the Abandon debugging clause, which allows local users to cause a denial of service via unspecified vectors...

PT-2016-7397 · Systemd +2 · Systemd +2

Name of the Vulnerable Software and Affected Versions: systemd affected versions not specified Description: The issue allows local users to cause a denial of service, resulting in a system hang. This occurs when a zero-length message is received over a notify socket, causing an error to be return...

GLSA-201406-27 : polkit, Spice-Gtk, systemd, HPLIP, libvirt: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-201406-27 polkit, Spice-Gtk, systemd, HPLIP, libvirt: Privilege escalation polkit has a race condition which potentially allows a process to change its UID/EUID via suid or pkexec before authentication is completed. Impact : A loc...

polkit, Spice-Gtk, systemd, HPLIP, libvirt: Privilege escalation

Background polkit is a toolkit for managing policies relating to unprivileged processes communicating with privileged processes. Description polkit has a race condition which potentially allows a process to change its UID/EUID via suid or pkexec before authentication is completed. Impact A local...

openSUSE Security Update : systemd (openSUSE-2012-139)

Add fix-console-switch.patch: prevent console lockup rhb771563. - Add fix-quota.patch: correctly enable quota rhb773431. - Add passcredentials.patch: ensure compatibility with kernel 3.2 bnc743299. - Update modulesonboot.patch to not cause failed state for systemd-modules-load.service bnc741481...

openSUSE Security Update : systemd (openSUSE-SU-2012:0383-1)

local attackers could delete arbitrary system files by exploiting a race condition in systemd-logind %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-166. The text description of...

openSUSE Security Update : sysconfig (openSUSE-2012-74)

Fixed to quote config / interface variables in ifservices script and cleaned up content of the ESSID which gets appended to them by NetworkManager dispatcher hook bnc735394, CVE-2011-4182. Fixed also to return proper exit code 0 in NM dispatcher hooks. - Changed to call ip addr flush in ifdown,...

openSUSE Security Update : cups (openSUSE-SU-2014:0119-1)

Hardening : - cups-0002-systemd-listen-only-on-localhost-for-socket-ac tivation.patch fixes the systemd cups.socket file so that systemd listens only on localhost bnc857372. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

openSUSE Security Update : samba (openSUSE-2012-109)

" - Fix memory leak in parent smbd on connection; CVE-2012-0817; bso8724 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-109. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : libvirt (openSUSE-SU-2013:1550-1)

libvirt was updated to fix security issues and bugs : Security issues fixed: CVE-2013-4311: Add support for using 3-arg pkcheck syntax for process to avoid race conditions. CVE-2013-4296: Fix a crash denial of service in remoteDispatchDomainMemoryStats CVE-2013-5651: Fix virBitmapParse to avoid...