1928 matches found
CVE-2020-8648: Use After Free
There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the nttyreceivebufcommon function in drivers/tty/ntty.c...
kernel security and bug fix update
3.10.0-1062.12.1.OL7 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey Orabug: 24817676 3.10.0-1062.12.1 - powerpc powerpc/pseries: Remove confusing warning message Gusta...
[SECURITY] Fedora 31 Update: sysstat-12.3.1-1.fc31
The sysstat package contains the sar, sadf, mpstat, iostat, tapestat, pidstat, cifsiostat and sa tools for Linux. The sar command collects and reports system activity information. The information collected by sar can be saved in a file in a binary format for future inspection. The statistics...
PT-2020-1607
Name of the Vulnerable Software and Affected Versions Linux kernel versions through 5.5.2 Description The issue is related to a use-after-free vulnerability in the vc do resize function, located in drivers/tty/vt/vt.c, which can lead to the disclosure of protected information or cause a denial of...
PT-2020-1609
Name of the Vulnerable Software and Affected Versions Linux kernel versions through 5.5.2 Description The issue is related to a use-after-free vulnerability in the n tty receive buf common function in drivers/tty/n tty.c. This vulnerability may allow an attacker to disclose protected information ...
PT-2020-6487 Ā· FFmpegĀ +4 Ā· FfmpegĀ +4
Name of the Vulnerable Software and Affected Versions: ffmpeg versions prior to 4.3 Description: The issue is related to the tty demuxer in the FFmpeg library, which did not have a read probe function assigned to it. This can be exploited by crafting a legitimate "ffconcat" file that references a...
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2016-1028)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
TAS - A Tiny Framework For Easily Manipulate The Tty And Create Fake Binaries
A tiny framework for easily manipulate the tty and create fake binaries. How it works? The framework has three main functions, tasexecv, tasforkpty, and tasttyloop. tasexecv: It is a function similar to execv, but it doesn't re-execute the current binary, something very useful for creating fake...
Exploit for Improper Privilege Management in Centreon
CVE-2019-19699 Centreon =\ After logging in we navi...
CVE-2019-19252
vcswrite in drivers/tty/vt/vcscreen.c in the Linux kernel through 5.3.13 does not prevent write access to vcsu devices, aka CID-0c9acb1af77a...
CVE-2019-19252: Out-of-bounds Read
vcswrite in drivers/tty/vt/vcscreen.c in the Linux kernel through 5.3.13 does not prevent write access to vcsu devices, aka CID-0c9acb1af77a...
PT-2019-4466
Name of the Vulnerable Software and Affected Versions Linux kernel versions through 5.3.13 Description The issue is related to the vcs write function in the Linux kernel, specifically in the drivers/tty/vt/vc screen.c file. It involves a buffer overflow in memory, which could allow an attacker to...
CVE-2005-4890
There is a possible tty hijacking in shadow 4.x before 4.1.5 and sudo 1.x before 1.7.4 via "su - user -c program". The user session can be escaped to the parent session by using the TIOCSTI ioctl to push characters into the input buffer to be read by the next process...
CVE-2005-4890
There is a possible tty hijacking in shadow 4.x before 4.1.5 and sudo 1.x before 1.7.4 via "su - user -c program". The user session can be escaped to the parent session by using the TIOCSTI ioctl to push characters into the input buffer to be read by the next process...
CVE-2005-4890
There is a possible tty hijacking in shadow 4.x before 4.1.5 and sudo 1.x before 1.7.4 via "su - user -c program". The user session can be escaped to the parent session by using the TIOCSTI ioctl to push characters into the input buffer to be read by the next process...
CVE-2005-4890
The CVE-2005-4890 entry describes a local vulnerability where tty hijacking is possible in shadow 4.x (before 4.1.5) and sudo 1.x (before 1.7.4) via the command path "su - user -c program". Attacker can use the TIOCSTI ioctl to inject characters into the input buffer, allowing the user session to...
CVE-2005-4890
There is a possible tty hijacking in shadow 4.x before 4.1.5 and sudo 1.x before 1.7.4 via "su - user -c program". The user session can be escaped to the parent session by using the TIOCSTI ioctl to push characters into the input buffer to be read by the next process...
CVE-2005-4890: Improper Input Validation
There is a possible tty hijacking in shadow 4.x before 4.1.5 and sudo 1.x before 1.7.4 via "su - user -c program". The user session can be escaped to the parent session by using the TIOCSTI ioctl to push characters into the input buffer to be read by the next process...
CVE-2017-2636
A race condition flaw was found in the NHLDC Linux kernel driver when accessing nhdlc.tbuf list that can lead to double free. A local, unprivileged user able to set the HDLC line discipline on the tty device could use this flaw to increase their privileges on the system. Mitigation The nhdlc kern...
