CVE-2019-13046

CVE-2019-13046 affects ToaruOS (up to 1.10.9). The root cause is insecure LD_LIBRARY_PATH handling in setuid applications, enabling potential elevation of privileges within affected binaries. Documented in multiple sources (NVD/Red Hat/others) with ToaruOS prior to 1.10.10 identified as vulnerabl...

CVE-2019-13046

linker/linker.c in ToaruOS through 1.10.9 has insecure LDLIBRARYPATH handling in setuid applications...

PT-2019-13095 · Toaruos · Toaruos

Name of the Vulnerable Software and Affected Versions: ToaruOS versions prior to 1.10.10 Description: The issue allows for a denial of service when a critical error occurs in certain sys sbrk allocation patterns, specifically those involving PAGE SIZE and a value less than PAGE SIZE...

CVE-2019-13049: Integer Overflow or Wraparound

An integer wrap in kernel/sys/syscall.c in ToaruOS 1.10.10 allows users to map arbitrary kernel pages into userland process space via TOARUSYSFUNCMMAP, leading to escalation of privileges...

PT-2019-13093 · Toaruos · Toaruos

Name of the Vulnerable Software and Affected Versions: ToaruOS versions prior to 1.10.10 Description: The issue is related to insecure LD LIBRARY PATH handling in setuid applications. This affects setuid applications, which have elevated privileges. Recommendations: For ToaruOS versions prior to...

CVE-2019-13046: Undefined Security Weakness

linker/linker.c in ToaruOS through 1.10.9 has insecure LDLIBRARYPATH handling in setuid applications...

CVE-2019-13047: Missing Authorization

kernel/sys/syscall.c in ToaruOS through 1.10.9 has incorrect access control in syssysfunc case 9 for TOARUSYSFUNCSETHEAP, allowing arbitrary kernel pages to be mapped into user land, leading to root access...

PT-2019-13094 · Toaruos · Toaruos

Name of the Vulnerable Software and Affected Versions: ToaruOS versions prior to 1.10.10 Description: The issue is related to incorrect access control in the sys sysfunc case 9 for TOARU SYS FUNC SETHEAP, allowing arbitrary kernel pages to be mapped into user land. This can lead to root access...

PT-2019-13096 · Toaruos · Toaruos

Name of the Vulnerable Software and Affected Versions: ToaruOS version 1.10.10 Description: The issue is related to an integer wrap in the kernel/sys/syscall.c file, which allows users to map arbitrary kernel pages into userland process space via the TOARU SYS FUNC MMAP function, leading to...

CVE-2019-13048: Integer Overflow or Wraparound

kernel/sys/syscall.c in ToaruOS through 1.10.9 allows a denial of service upon a critical error in certain syssbrk allocation patterns involving PAGESIZE, and a value less than PAGESIZE...

CVE-2019-12937

apps/gsudo.c in gsudo in ToaruOS through 1.10.9 has a buffer overflow allowing local privilege escalation to the root user via the DISPLAY environment variable...

CVE-2019-12937

apps/gsudo.c in gsudo in ToaruOS through 1.10.9 has a buffer overflow allowing local privilege escalation to the root user via the DISPLAY environment variable...

Buffer overflow

apps/gsudo.c in gsudo in ToaruOS through 1.10.9 has a buffer overflow allowing local privilege escalation to the root user via the DISPLAY environment variable...

CVE-2019-12937

The CVE-2019-12937 issue affects ToaruOS gsudo, specifically apps/gsudo.c in gsudo up to version 1.10.9. A buffer overflow in gsudo, exploitable via the DISPLAY environment variable, allows local privilege escalation to root. The Red Hat advisory entry corroborates the vulnerability description. ...

CVE-2019-12937: Out-of-bounds Write

apps/gsudo.c in gsudo in ToaruOS through 1.10.9 has a buffer overflow allowing local privilege escalation to the root user via the DISPLAY environment variable...