CVE-2017-2616

A race condition was found in util-linux before 2.32.1 in the way su handled the management of child processes. A local authenticated attacker could use this flaw to kill other processes with root privileges under specific conditions...

CVE-2017-2616

A race condition was found in util-linux before 2.32.1 in the way su handled the management of child processes. A local authenticated attacker could use this flaw to kill other processes with root privileges under specific conditions...

CVE-2017-2616

A race condition was found in util-linux before 2.32.1 in the way su handled the management of child processes. A local authenticated attacker could use this flaw to kill other processes with root privileges under specific conditions...

SUSE SLED12 / SLES12 Security Update : util-linux (SUSE-SU-2018:2071-1)

This update for util-linux fixes the following issues : The update package also includes non-security fixes. See advisory for details. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically...

CVE-2017-2616: Privilege Defined With Unsafe Actions

A race condition was found in util-linux before 2.32.1 in the way su handled the management of child processes. A local authenticated attacker could use this flaw to kill other processes with root privileges under specific conditions...

clam-util (>=0.0.5, <=0.1.20), generator-clam (>=0.1.68, <=0.1.86) +2 more potentially affected by CVE-2018-3719 via mixin-deep (1.0.1)

mixin-deep NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on mixin-deep and may be impacted: - clam-util =0.0.5, =0.1.68, =0.3.0-alpha.2, =0.4.12 - grunt-formatdata 0.1.1 Source cves: CVE-2018-3719 Source advisory: OSV:GHSA-3MPR-HQ3P-49...

SUSE-SU-2018:2071-1 Security update for util-linux

This update for util-linux fixes the following issues: This non-security issue was fixed: - CVE-2018-7738: bash-completion/umount allowed local users to gain privileges by embedding shell commands in a mountpoint name, which was mishandled during a umount command by a different user bsc1084300...

SUSE-SU-2018:2066-1 Security update for util-linux

This update for util-linux fixes the following security issue: - CVE-2018-7738: Fix local vulnerability using embedded shell commands in a mountpoint name bsc1084300...

Photon OS 2.0 : Zsh / Python3 / Xerces / Mercurial / Pmd / Pycrypto / Net / Python2 / Util / Mysql / Paramiko / Binutils / Patch / Sqlite (PhotonOS-PHSA-2018-2.0-0037) (deprecated)

An update of 'mercurial', 'python2', 'zsh', 'pycrypto', 'patch', 'binutils', 'paramiko', 'httpd', 'mysql', 'xerces-c', 'util-linux', 'net-snmp', 'python3', 'sqlite' packages of Photon OS has been released. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2/7/2019 The descriptive text and...

Denial Of Service (DoS)

tomcat-util is vulnerable to denial of service DoS attacks. The attack exists due to not proper handling of overflow in the decodeHasArray function in UTF-8 decoder...

PT-2018-4196

Name of the Vulnerable Software and Affected Versions Jasig CAS server versions prior to 3.4.12.1 Jasig CAS server versions 3.5.x prior to 3.5.2.1 Description The issue allows remote unauthenticated users to bypass authentication via crafted XML data when Google Accounts Integration is enabled...

CVE-2018-14402

axmldec 1.2.0 has an out-of-bounds write in the jitana::axmlparser::parsestartnamespace function in lib/jitana/util/axmlparser.cpp...

CVE-2018-14402

CVE-2018-14402 affects axmldec 1.2.0, with an out-of-bounds write in jitana::axml_parser::parse_start_namespace (lib/jitana/util/axml_parser.cpp). Multiple sources (NVD, OSV, CVE records) confirm the flaw. The Connected documents do not provide remediation steps or explicit exploit details. No ve...

CVE-2018-14402: Out-of-bounds Write

axmldec 1.2.0 has an out-of-bounds write in the jitana::axmlparser::parsestartnamespace function in lib/jitana/util/axmlparser.cpp...

PT-2018-12494

Name of the Vulnerable Software and Affected Versions axmldec version 1.2.0 Description The issue is related to an out-of-bounds write in the jitana::axml parser::parse start namespace function, located in lib/jitana/util/axml parser.cpp. Recommendations For axmldec version 1.2.0, at the moment,...

ALPINE-CVE-2018-14355

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/util.c mishandles ".." directory traversal in a mailbox name...

DEBIAN-CVE-2018-14355

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/util.c mishandles ".." directory traversal in a mailbox name...

CloudBees Jenkins Fortify CloudScan Plugin Arbitrary File Write Vulnerability

CloudBees Jenkins formerly known as Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools , which is mainly used to monitor the continuous software release/testing projects and some of the timed execution of the task . Fortify CloudScan...

libming denial of service vulnerability (CNVD-2018-12759)

libming is a Flash SWF output library written in C for use in systems developed in PHP, Perl, etc. It can be used to output Flash SWF files to the system. A security vulnerability exists in the 'readBytes' function of the util/read.c file in libming version 0.4.8, which originates from a program...

PT-2018-11719

Name of the Vulnerable Software and Affected Versions libming version 0.4.8 Description The issue is related to an excessive memory allocation attempt in the readBytes function of the util/read.c file, specifically with parseSWF DEFINEBITSJPEG2. This could allow remote attackers to cause a...