575 matches found
CVE-2018-14615
An issue was discovered in the Linux kernel through 4.17.10. There is a buffer overflow in truncateinlineinode in fs/f2fs/inline.c when umounting an f2fs image, because a length value may be negative...
DEBIAN-CVE-2018-14615
An issue was discovered in the Linux kernel through 4.17.10. There is a buffer overflow in truncateinlineinode in fs/f2fs/inline.c when umounting an f2fs image, because a length value may be negative...
PT-2018-12617
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.17.10 Description A buffer overflow issue exists in the Linux kernel due to a negative length value in the truncate inline inode function, located in fs/f2fs/inline.c, when umounting an f2fs image...
UBUNTU-CVE-2018-14615
An issue was discovered in the Linux kernel through 4.17.10. There is a buffer overflow in truncateinlineinode in fs/f2fs/inline.c when umounting an f2fs image, because a length value may be negative...
kernel: vfs: BUG in truncate_inode_pages_range() and fuse client
A non-privileged user is able to mount a fuse filesystem on RHEL 6 or 7 and crash a system if an application punches a hole in a file that does not end aligned to a page boundary...
CVE-2017-7794
On Linux systems, if the content process is compromised, the sandbox broker will allow files to be truncated even though the sandbox explicitly only has read access to the local file system and no write permissions. Note: This attack only affects the Linux operating system. Other operating system...
kernel: vfs: BUG in truncate_inode_pages_range() and fuse client
A non-privileged user is able to mount a fuse filesystem on RHEL 6 or 7 and crash a system if an application punches a hole in a file that does not end aligned to a page boundary...
PT-2018-16395
Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.13.4 Description The issue involves the APFS component and allows attackers to trigger truncation of an APFS volume password via an unspecified injection. Recommendations For macOS versions prior to 10.13.4, update t...
ALPINE-CVE-2018-7537
An issue was discovered in Django 2.0 before 2.0.3, 1.11 before 1.11.11, and 1.8 before 1.8.19. If django.utils.text.Truncator's chars and words methods were passed the html=True argument, they were extremely slow to evaluate certain inputs due to a catastrophic backtracking vulnerability in a...
UBUNTU-CVE-2018-7537
An issue was discovered in Django 2.0 before 2.0.3, 1.11 before 1.11.11, and 1.8 before 1.8.19. If django.utils.text.Truncator's chars and words methods were passed the html=True argument, they were extremely slow to evaluate certain inputs due to a catastrophic backtracking vulnerability in a...
CVE-2014-4978
The rsfiltergraph function in librawstudio/rs-filter.c in rawstudio might allow local users to truncate arbitrary files via a symlink attack on 1 /tmp/rs-filter-graph.png or 2 /tmp/rs-filter-graph...
CVE-2014-4978
The rsfiltergraph function in librawstudio/rs-filter.c in rawstudio might allow local users to truncate arbitrary files via a symlink attack on 1 /tmp/rs-filter-graph.png or 2 /tmp/rs-filter-graph...
CVE-2014-4978: Improper Link Resolution Before File Access
The rsfiltergraph function in librawstudio/rs-filter.c in rawstudio might allow local users to truncate arbitrary files via a symlink attack on 1 /tmp/rs-filter-graph.png or 2 /tmp/rs-filter-graph...
PT-2017-5941
Name of the Vulnerable Software and Affected Versions: rawstudio affected versions not specified Description: The issue concerns the rs filter graph function in librawstudio/rs-filter.c, which might allow local users to truncate arbitrary files via a symlink attack on temporary files...
CVE-2016-10118
Firejail allows local users to truncate /etc/resolv.conf via a chroot command to /...
DEBIAN-CVE-2016-10118
Firejail allows local users to truncate /etc/resolv.conf via a chroot command to /...
CVE-2016-10118
Firejail allows local users to truncate /etc/resolv.conf via a chroot command to /...
CVE-2016-10118
Firejail exposes a local-privilege issue: in CVE-2016-10118, a local user can truncate /etc/resolv.conf by performing a chroot to /. The NVD entry confirms LOCAL access with LOW/LOW remote? to integrity and confidentiality impact as stated, with impact limited to integrity (PARTIAL) and no confid...
