CVE-2019-13049

An integer wrap in kernel/sys/syscall.c in ToaruOS 1.10.10 allows users to map arbitrary kernel pages into userland process space via TOARUSYSFUNCMMAP, leading to escalation of privileges...

CVE-2019-13046

linker/linker.c in ToaruOS through 1.10.9 has insecure LDLIBRARYPATH handling in setuid applications...

CVE-2019-13046

linker/linker.c in ToaruOS through 1.10.9 has insecure LDLIBRARYPATH handling in setuid applications...

CVE-2019-13048

kernel/sys/syscall.c in ToaruOS through 1.10.9 allows a denial of service upon a critical error in certain syssbrk allocation patterns involving PAGESIZE, and a value less than PAGESIZE...

CVE-2019-13047

kernel/sys/syscall.c in ToaruOS through 1.10.9 has incorrect access control in syssysfunc case 9 for TOARUSYSFUNCSETHEAP, allowing arbitrary kernel pages to be mapped into user land, leading to root access...

CVE-2019-13047

kernel/sys/syscall.c in ToaruOS through 1.10.9 has incorrect access control in syssysfunc case 9 for TOARUSYSFUNCSETHEAP, allowing arbitrary kernel pages to be mapped into user land, leading to root access...

Design/Logic Flaw

linker/linker.c in ToaruOS through 1.10.9 has insecure LDLIBRARYPATH handling in setuid applications...

Design/Logic Flaw

kernel/sys/syscall.c in ToaruOS through 1.10.9 allows a denial of service upon a critical error in certain syssbrk allocation patterns involving PAGESIZE, and a value less than PAGESIZE...

Integer overflow

An integer wrap in kernel/sys/syscall.c in ToaruOS 1.10.10 allows users to map arbitrary kernel pages into userland process space via TOARUSYSFUNCMMAP, leading to escalation of privileges...

Information disclosure

kernel/sys/syscall.c in ToaruOS through 1.10.9 has incorrect access control in syssysfunc case 9 for TOARUSYSFUNCSETHEAP, allowing arbitrary kernel pages to be mapped into user land, leading to root access...

CVE-2019-13049

An integer wrap in kernel/sys/syscall.c in ToaruOS 1.10.10 allows users to map arbitrary kernel pages into userland process space via TOARUSYSFUNCMMAP, leading to escalation of privileges...

CVE-2019-13049

CVE-2019-13049 affects ToaruOS 1.10.10, where an integer wrap in kernel/sys/syscall.c enables mapping arbitrary kernel pages into a userland process via TOARU_SYS_FUNC_MMAP, causing privilege escalation. Multiple sources corroborate the same description, including Red Hat and CVE databases. The v...

CVE-2019-13048

CVE-2019-13048 concerns ToaruOS kernels (kernel/sys/syscall.c) prior to 1.10.10, where a denial-of-service can occur due to a critical error in certain sys_sbrk allocation patterns involving PAGE_SIZE and a value less than PAGE_SIZE. The connected PT-2019-13095 entry explicitly states affected ve...

CVE-2019-13048

kernel/sys/syscall.c in ToaruOS through 1.10.9 allows a denial of service upon a critical error in certain syssbrk allocation patterns involving PAGESIZE, and a value less than PAGESIZE...

CVE-2019-13047

ToaruOS up to version 1.10.9 is affected by an incorrect access control in the syscall handler (sys_sysfunc case 9 for TOARU_SYS_FUNC_SETHEAP), allowing arbitrary kernel pages to be mapped into user space and enabling root access. Affected product: ToaruOS; affected version range: prior to 1.10.1...

CVE-2019-13047

kernel/sys/syscall.c in ToaruOS through 1.10.9 has incorrect access control in syssysfunc case 9 for TOARUSYSFUNCSETHEAP, allowing arbitrary kernel pages to be mapped into user land, leading to root access...

CVE-2019-13046

CVE-2019-13046 affects ToaruOS (up to 1.10.9). The root cause is insecure LD_LIBRARY_PATH handling in setuid applications, enabling potential elevation of privileges within affected binaries. Documented in multiple sources (NVD/Red Hat/others) with ToaruOS prior to 1.10.10 identified as vulnerabl...

CVE-2019-13046

linker/linker.c in ToaruOS through 1.10.9 has insecure LDLIBRARYPATH handling in setuid applications...

PT-2019-13095 · Toaruos · Toaruos

Name of the Vulnerable Software and Affected Versions: ToaruOS versions prior to 1.10.10 Description: The issue allows for a denial of service when a critical error occurs in certain sys sbrk allocation patterns, specifically those involving PAGE SIZE and a value less than PAGE SIZE...

PT-2019-13093 · Toaruos · Toaruos

Name of the Vulnerable Software and Affected Versions: ToaruOS versions prior to 1.10.10 Description: The issue is related to insecure LD LIBRARY PATH handling in setuid applications. This affects setuid applications, which have elevated privileges. Recommendations: For ToaruOS versions prior to...