util-linux elevation of privilege vulnerability

util-linux is a set of software packages used in Linux systems and contains a variety of system administration tools, it provides tools to load, unload, format, partition and manage hard drives, open tty ports and get kernel messages. A security vulnerability exists in bash-completion/umount in...

CVE-2018-7738

In util-linux before 2.32-rc1, bash-completion/umount allows local users to gain privileges by embedding shell commands in a mountpoint name, which is mishandled during a umount command within Bash by a different user, as demonstrated by logging in as root and entering umount followed by a tab...

CVE-2018-7738

The CVE-2018-7738 entry concerns util-linux before 2.32-rc1, where the bash-completion/umount script mishandles certain mountpoint names, allowing a local attacker to escalate privileges via an autocompletion sequence in Bash. Exploitation is demonstrated by embedding shell commands in a mountpoi...

CVE-2018-7738

In util-linux before 2.32-rc1, bash-completion/umount allows local users to gain privileges by embedding shell commands in a mountpoint name, which is mishandled during a umount command within Bash by a different user, as demonstrated by logging in as root and entering umount followed by a tab...

CVE-2018-7738

In util-linux before 2.32-rc1, bash-completion/umount allows local users to gain privileges by embedding shell commands in a mountpoint name, which is mishandled during a umount command within Bash by a different user, as demonstrated by logging in as root and entering umount followed by a tab...

PT-2018-3086 · Gnu +5 · Util-Linux +5

Name of the Vulnerable Software and Affected Versions: JunOS version affected versions not specified util-linux versions prior to 2.32-rc1 Description: The issue exists due to insufficient input validation in the srxpfe process of JunOS, allowing a remote attacker to cause a denial of service. In...

CVE-2018-7738: Undefined Security Weakness

In util-linux before 2.32-rc1, bash-completion/umount allows local users to gain privileges by embedding shell commands in a mountpoint name, which is mishandled during a umount command within Bash by a different user, as demonstrated by logging in as root and entering umount followed by a tab...

CVE-2018-6764

util/virlog.c in libvirt does not properly determine the hostname on LXC container startup, which allows local guest OS users to bypass an intended container protection mechanism and execute arbitrary commands via a crafted NSS module...

CVE-2018-6764: Origin Validation Error

util/virlog.c in libvirt does not properly determine the hostname on LXC container startup, which allows local guest OS users to bypass an intended container protection mechanism and execute arbitrary commands via a crafted NSS module...

CCN-lite Buffer Overflow Vulnerability

CCN-lite is a lightweight and functionally interoperable implementation of the CCNx protocol for XEROX PARC. A buffer overflow vulnerability exists in util/ccnl-common.c in versions of CCN-lite prior to 2.0.0. An attacker could exploit this vulnerability to cause a buffer overflow via incorrect...

CVE-2017-12469

Buffer overflow in util/ccnl-common.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by leveraging incorrect memory allocation...

PT-2018-5408

Name of the Vulnerable Software and Affected Versions: CCN-lite versions prior to 2.00 Description: A buffer overflow issue exists due to incorrect memory allocation in util/ccnl-common.c, allowing context-dependent attackers to have an unspecified impact. Recommendations: For versions prior to...

PT-2018-3357

Name of the Vulnerable Software and Affected Versions: libvirt affected versions not specified Description: The issue is related to the util/virlog.c in libvirt, which does not properly determine the hostname on LXC container startup. This allows local guest OS users to bypass an intended contain...

CVE-2017-12469: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in util/ccnl-common.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by leveraging incorrect memory allocation...

PT-2018-17501

Name of the Vulnerable Software and Affected Versions libming versions prior to 0.4.8 Description The issue is related to a heap-based buffer overflow in the printDefineFont2 function, located in util/listfdb.c. This may allow attackers to cause a denial of service or have an unspecified impact v...

Oracle Linux 6 : libvirt (ELSA-2018-0030)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-0030 advisory. - util: Implement virFileReadHeaderFD CVE-2017-5715 - util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD CVE-2017-5715 - util: introduce...

Oracle Linux 7 : libvirt (ELSA-2018-0029)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-0029 advisory. - qemu: Properly store microcode version in QEMU caps cache CVE-2017-5715 - util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD CVE-2017-5715 -...

libming denial of service vulnerability (CNVD-2018-03975)

libming is a Flash SWF output library written in C for use in systems developed in PHP, Perl, etc. It can be used to output Flash SWF files to the system. A security vulnerability exists in the 'readSBits' function in the util/read.c file in libming version 0.4.8. A remote attacker can exploit th...

PT-2018-4101

Name of the Vulnerable Software and Affected Versions Red Hat OpenShift Enterprise versions 1 and 2 Description The issue allows local users to have unspecified impact via a symlink attack on an unspecified file in /tmp. This is related to the oo-analytics-export and oo-analytics-import component...

CVE-2013-4364: Improper Link Resolution Before File Access

1 oo-analytics-export and 2 oo-analytics-import in the openshift-origin-broker-util package in Red Hat OpenShift Enterprise 1 and 2 allow local users to have unspecified impact via a symlink attack on an unspecified file in /tmp...