USN-3917-1 snapd vulnerability

The snapd default seccomp filter for strict mode snaps blocks the use of the ioctl system call when used with TIOCSTI as the second argument to the system call. Jann Horn discovered that this restriction could be circumvented on 64 bit architectures. A malicious snap could exploit this to bypass...

ALPINE-CVE-2019-9897

Multiple denial-of-service attacks that can be triggered by writing to the terminal exist in PuTTY versions before 0.71...

DEBIAN-CVE-2019-9897

Multiple denial-of-service attacks that can be triggered by writing to the terminal exist in PuTTY versions before 0.71...

CVE-2019-9897

Multiple denial-of-service attacks that can be triggered by writing to the terminal exist in PuTTY versions before 0.71...

CVE-2019-9897

Multiple denial-of-service attacks that can be triggered by writing to the terminal exist in PuTTY versions before 0.71...

UBUNTU-CVE-2019-9897

Multiple denial-of-service attacks that can be triggered by writing to the terminal exist in PuTTY versions before 0.71...

CVE-2018-17495

eVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error with the Virtual Keyboard Help Dialog. By visiting the kiosk and removing the program from fullscreen, an attacker could exploit this vulnerability using the terminal to launch the command prom...

Design/Logic Flaw

eVisitorPass could allow a local attacker to gain elevated privileges on the system, caused by an error with the Virtual Keyboard Help Dialog. By visiting the kiosk and removing the program from fullscreen, an attacker could exploit this vulnerability using the terminal to launch the command prom...

CVE-2019-9897

Multiple denial-of-service attacks that can be triggered by writing to the terminal exist in PuTTY versions before 0.71...

CVE-2019-9897

Multiple denial-of-service attacks that can be triggered by writing to the terminal exist in PuTTY versions before 0.71...

CVE-2019-9897

Multiple denial-of-service attacks that can be triggered by writing to the terminal exist in PuTTY versions before 0.71...

PuTTY Denial of Service Vulnerability (CNVD-2019-22448)

PuTTY is a free implementation of SSH and Telnet for Windows and Unix platforms and an xterm terminal emulator. A denial of service vulnerability exists in PuTTY versions prior to 0.71. An attacker can exploit this vulnerability by writing to a terminal, resulting in a denial of service...

CVE-2019-7303

A vulnerability in the seccomp filters of Canonical snapd before version 2.37.4 allows a strict mode snap to insert characters into a terminal on a 64-bit host. The seccomp rules were generated to match 64-bit ioctl2 commands on a 64-bit platform; however, the Linux kernel only uses the lower 32...

PuTTY Releases Important Software Update to Patch 8 High-Severity Flaws

The popular SSH client program PuTTY has released the latest version of its software that includes security patches for 8 high-severity security vulnerabilities. PuTTY is one of the most popular and widely used open-source client-side programs that allows users to remotely access computers over...

Cobham Satcom Sailor 800 and 900 Access Control Error Vulnerabilities

The Cobham Satcom Sailor 800 and Cobham Satcom Sailor 900 are both shipboard maritime satellite broadband terminals from Cobham UK. An access control error vulnerability exists in the Cobham Satcom Sailor 800 and 900. A remote attacker could exploit this vulnerability to write to the system's...

March 12, 2019—KB4489878 (Monthly Rollup)

None None...

Buffer Overflow

Guacamole's terminal emulator is vulnerable to buffer overflow. A race condition causing overlap writing of data leads to misreading of packet data as the packet length, thereby writing remaining data out of the statically-allocated buffer...

RealTerm Serial Terminal 2.0.0.70 Echo Port Buffer Overflow

!/usr/bin/python Exploit Title: RealTerm: Serial Terminal 2.0.0.70 - 'Echo Port' Buffer Overflow - SEH Version: 2.0.0.70 Credits to: Alejandra Sanchez for finding initial DoS https://www.exploit-db.com/exploits/46391 Matteo Malvica for creating initial PoC https://www.exploit-db.com/exploits/4644...

CVE-2019-3920

The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to authenticated command injection via crafted HTTP request sent by a remote, authenticated attacker to /GponForm/deviceForm?script/...

PT-2019-16775 · Alcatel Lucent · Alcatel Lucent I-240W-Q Gpon Ont

Name of the Vulnerable Software and Affected Versions: Alcatel Lucent I-240W-Q GPON ONT version 3FE54567BOZJ19 Description: The issue allows for authenticated command injection via crafted HTTP requests sent to the "/GponForm/device Form?script/" endpoint by a remote, authenticated attacker...