CVE-2019-12937-ToaruOS

CVE-2019-12937 ToaruOS is an open-source computer operating system written in C, a hobbyist operating system developed by an undergraduate computer science student at the University of Illinois. ToaruOS runs on POSIX and x86 architectures. Its main features include support for processes and...

CVE-2022-38934

readelf in ToaruOS 2.0.1 has some arbitrary address read vulnerabilities when parsing a crafted ELF file...

CVE-2019-12937

apps/gsudo.c in gsudo in ToaruOS through 1.10.9 has a buffer overflow allowing local privilege escalation to the root user via the DISPLAY environment variable...

EUVD-2021-23305

Malware in sbrugna...

EUVD-2019-4606

Malware in sbrugna...

EUVD-2019-4608

Malware in sbrugna...

EUVD-2019-4609

Malware in sbrugna...

EUVD-2019-4513

Malware in sbrugna...

EUVD-2019-4607

Malware in sbrugna...

EUVD-2022-41481

Malicious code in bioql PyPI...

EUVD-2022-41479

Malicious code in bioql PyPI...

CVE-2022-38932

readelf in ToaruOS 2.0.1 has a global overflow allowing RCE when parsing a crafted ELF file...

CVE-2021-36710

ToaruOS 1.99.2 is affected by incorrect access control via the kernel. Improper MMU management and having a low GDT address allows it to be mapped in userland. A call gate can then be written to escalate to CPL 0...

CVE-2019-13046

linker/linker.c in ToaruOS through 1.10.9 has insecure LDLIBRARYPATH handling in setuid applications...

CVE-2019-13047

kernel/sys/syscall.c in ToaruOS through 1.10.9 has incorrect access control in syssysfunc case 9 for TOARUSYSFUNCSETHEAP, allowing arbitrary kernel pages to be mapped into user land, leading to root access...

CVE-2019-13048

kernel/sys/syscall.c in ToaruOS through 1.10.9 allows a denial of service upon a critical error in certain syssbrk allocation patterns involving PAGESIZE, and a value less than PAGESIZE...

CVE-2019-13049

An integer wrap in kernel/sys/syscall.c in ToaruOS 1.10.10 allows users to map arbitrary kernel pages into userland process space via TOARUSYSFUNCMMAP, leading to escalation of privileges...

ToaruOS Code Execution Vulnerability

ToaruOS is an open source computer operating system written in the C language. A code execution vulnerability exists in ToaruOS version 2.0.1, which stems from a global overflow in readelf, and can be exploited to remotely execute code while parsing a specially crafted ELF file...

CVE-2022-38934

readelf in ToaruOS 2.0.1 has some arbitrary address read vulnerabilities when parsing a crafted ELF file...

CVE-2022-38934

readelf in ToaruOS 2.0.1 has some arbitrary address read vulnerabilities when parsing a crafted ELF file...