1488 matches found
Buffer overflow
Buffer overflow in text-utils/colcrt.c in colcrt in util-linux before 2.27 allows local users to cause a denial of service crash via a crafted file, related to the page global variable...
CVE-2015-5218
Buffer overflow in text-utils/colcrt.c in colcrt in util-linux before 2.27 allows local users to cause a denial of service crash via a crafted file, related to the page global variable...
CVE-2015-5218
CVE-2015-5218 is a buffer overflow in util-linux's text-utils/colcrt.c (colcrt) that allows a local user to crash the system via a crafted file. The description states the issue and the mitigation path provided here is for CP4S: upgrade Cloud Pak for Security to 1.9.0 (per remediation section); n...
CVE-2015-5218
Buffer overflow in text-utils/colcrt.c in colcrt in util-linux before 2.27 allows local users to cause a denial of service crash via a crafted file, related to the page global variable...
CVE-2015-5218: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in text-utils/colcrt.c in colcrt in util-linux before 2.27 allows local users to cause a denial of service crash via a crafted file, related to the page global variable...
Mageia: Security Advisory (MGASA-2015-0434)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MGASA-2015-0434 Updated util-linux packages fix security vulnerability
A buffer overflow in the colcrt command in util-linux can lead to a crash when given a large input CVE-2015-5218...
Updated util-linux packages fix security vulnerability
A buffer overflow in the colcrt command in util-linux can lead to a crash when given a large input CVE-2015-5218...
PT-2015-2717
Name of the Vulnerable Software and Affected Versions util-linux versions prior to 2.27 Description The issue is related to a buffer overflow in the text-utils/colcrt.c file in the colcrt component of the util-linux utility. This can be exploited by local users through a crafted file, potentially...
openSUSE Security Update : util-linux (openSUSE-2015-702)
util-linux was updated to fix one security issue. This security issue was fixed : - CVE-2015-5218: Prevent colcrt buffer overflow bsc949754. This non-security issue was fixed : - bsc903440: Calendar 'cal' crash with segmentation fault when execute in background. %NASLMINLEVEL 70300 C Tenable...
Mageia: Security Advisory (MGASA-2015-0352)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle: Security Advisory (ELSA-2011-1691)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle: Security Advisory (ELSA-2012-0307)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle: Security Advisory (ELSA-2013-0517)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo Security Advisory GLSA 201405-15
Gentoo Linux Local Security Checks GLSA 201405-15 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...
MGASA-2015-0352 Updated util-linux packages fix CVE-2015-5224
Updated util-linux packages fix security vulnerability: The chfn and chsh commands in util-linux's login-utils are vulnerable to a file name collision due to incorrect mkstemp usage. If the chfn and chsh binaries are both setuid-root they eventually call mkostemp in such a way that an attacker...
Updated util-linux packages fix CVE-2015-5224
Updated util-linux packages fix security vulnerability: The chfn and chsh commands in util-linux's login-utils are vulnerable to a file name collision due to incorrect mkstemp usage. If the chfn and chsh binaries are both setuid-root they eventually call mkostemp in such a way that an attacker...
PT-2017-6832
Name of the Vulnerable Software and Affected Versions util-linux affected versions not specified Description The issue is related to the mkostemp function in login-utils, which can be exploited by remote attackers to cause file name collision and potentially other attacks when used incorrectly...
Qualys Security Advisory - CVE-2015-3245 userhelper - CVE-2015-3246 libuser
Hello, it is July 23, 2015, 17:00 UTC, the Coordinated Release Date for CVE-2015-3245 and CVE-2015-3246. Please find our advisory below, and our exploit attached. Qualys Security Advisory CVE-2015-3245 userhelper chfn newline filtering CVE-2015-3246 libuser passwd file handling -- Summary...
The vulnerability of the Red Hat Enterprise Linux operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the util-linux-2.12a package of the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited locally...