66 matches found
CVE-2022-38934
CVE-2022-38934 affects ToaruOS 2.0.1, where readelf may read arbitrary addresses while parsing crafted ELF files. The NVD/NVD-derived metrics assign a low impact (AV:L/AC:L/PR:N/UI:R/C:N/I:N/A:L; base score 3.3). Connected Red Hat and other sources reiterate the readelf vector in ToaruOS 2.0.1; P...
CVE-2022-38934
readelf in ToaruOS 2.0.1 has some arbitrary address read vulnerabilities when parsing a crafted ELF file...
PT-2022-24622 · Toaruos · Toaruos
Name of the Vulnerable Software and Affected Versions: ToaruOS version 2.0.1 Description: The issue concerns arbitrary address read vulnerabilities in the readelf component of ToaruOS when it parses a crafted ELF file. Recommendations: For ToaruOS version 2.0.1, at the moment, there is no...
ToaruOS 缓冲区错误漏洞
ToaruOS is an open source computer operating system written in the C language. A security vulnerability exists in ToaruOS version 2.0.1, which stems from some arbitrary address read vulnerabilities in its readelf when parsing carefully crafted ELF files...
CVE-2022-38932
readelf in ToaruOS 2.0.1 has a global overflow allowing RCE when parsing a crafted ELF file...
CVE-2022-38932
readelf in ToaruOS 2.0.1 has a global overflow allowing RCE when parsing a crafted ELF file...
Buffer overflow
readelf in ToaruOS 2.0.1 has a global overflow allowing RCE when parsing a crafted ELF file...
CVE-2022-38932
readelf in ToaruOS 2.0.1 has a global overflow allowing RCE when parsing a crafted ELF file...
CVE-2022-38932
readelf in ToaruOS 2.0.1 has a global overflow allowing RCE when parsing a crafted ELF file...
CVE-2022-38932
ToaruOS 2.0.1 is affected by a readelf component vulnerability that introduces a global overflow when parsing crafted ELF files, enabling remote code execution. Root cause: a global overflow in readelf. Impact: remote code execution if untrusted ELF files are parsed. Mitigation/workaround from PT...
ToaruOS 缓冲区错误漏洞
ToaruOS is an open source computer operating system written in the C language. A code execution vulnerability exists in ToaruOS version 2.0.1, which stems from a global overflow in readelf, and can be exploited to remotely execute code while parsing a specially crafted ELF file...
PT-2022-24621 · Toaruos · Toaruos
Name of the Vulnerable Software and Affected Versions: ToaruOS version 2.0.1 Description: The issue allows for remote code execution when a crafted ELF file is parsed, due to a global overflow in the readelf component. Recommendations: For ToaruOS version 2.0.1, consider avoiding the use of reade...
CVE-2021-36710
ToaruOS 1.99.2 is affected by incorrect access control via the kernel. Improper MMU management and having a low GDT address allows it to be mapped in userland. A call gate can then be written to escalate to CPL 0...
CVE-2021-36710
ToaruOS 1.99.2 is affected by incorrect access control via the kernel. Improper MMU management and having a low GDT address allows it to be mapped in userland. A call gate can then be written to escalate to CPL 0...
Design/Logic Flaw
ToaruOS 1.99.2 is affected by incorrect access control via the kernel. Improper MMU management and having a low GDT address allows it to be mapped in userland. A call gate can then be written to escalate to CPL 0...
CVE-2021-36710
CVE-2021-36710 affects ToaruOS 1.99.2, with incorrect kernel access control due to improper MMU management and a low GDT address that allows userland mapping. This enables writing a call gate to escalate to CPL 0, per multiple connected sources (Red Hat, NVD, PRION/PT-PT, CNNVD, etc.). No public ...
CVE-2021-36710
ToaruOS 1.99.2 is affected by incorrect access control via the kernel. Improper MMU management and having a low GDT address allows it to be mapped in userland. A call gate can then be written to escalate to CPL 0...
ToaruOS 安全漏洞
ToaruOS is an open source computer operating system written in the C language. A security vulnerability exists in ToaruOS version 1.99.2 that stems from incorrect kernel access control...