Design/Logic Flaw

apparmorparser in the apparmor package before 2.8.952430-0ubuntu5.1 in Ubuntu 14.04 allows attackers to bypass AppArmor policies via unspecified vectors, related to a "miscompilation flaw."...

CVE-2014-1424

apparmorparser in the apparmor package before 2.8.952430-0ubuntu5.1 in Ubuntu 14.04 allows attackers to bypass AppArmor policies via unspecified vectors, related to a "miscompilation flaw."...

CVE-2014-1424

apparmorparser in the apparmor package before 2.8.952430-0ubuntu5.1 in Ubuntu 14.04 allows attackers to bypass AppArmor policies via unspecified vectors, related to a "miscompilation flaw."...

CVE-2014-1424

apparmorparser in the apparmor package before 2.8.952430-0ubuntu5.1 in Ubuntu 14.04 allows attackers to bypass AppArmor policies via unspecified vectors, related to a "miscompilation flaw."...

CVE-2014-1424

CVE-2014-1424 affects the Ubuntu 14.04 package set: the component apparmor_parser in the apparmor package (before 2.8.95~2430-0ubuntu5.1) could bypass AppArmor policies due to a miscompilation flaw. Impact: confined applications may gain unintended access or be restricted incorrectly. Affected re...

CVE-2014-1424

apparmorparser in the apparmor package before 2.8.952430-0ubuntu5.1 in Ubuntu 14.04 allows attackers to bypass AppArmor policies via unspecified vectors, related to a "miscompilation flaw."...

[USN-2413-1] AppArmor vulnerability

========================================================================== Ubuntu Security Notice USN-2413-1 November 20, 2014 apparmor vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

AppArmor restrictions bypass

Restrictions bypass in apparmorparser...

Ubuntu 14.04 LTS : AppArmor vulnerability (USN-2413-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2413-1 advisory. An AppArmor policy miscompilation flaw was discovered in apparmorparser. Under certain circumstances, a malicious application could use this flaw to perform...

USN-2413-1: AppArmor vulnerability

An AppArmor policy miscompilation flaw was discovered in apparmorparser. Under certain circumstances, a malicious application could use this flaw to perform operations that are not allowed by AppArmor policy. The flaw may also prevent applications from accessing resources that are allowed by...

USN-2413-1 apparmor vulnerability

An AppArmor policy miscompilation flaw was discovered in apparmorparser. Under certain circumstances, a malicious application could use this flaw to perform operations that are not allowed by AppArmor policy. The flaw may also prevent applications from accessing resources that are allowed by...

Warning — Zero-Day Vulnerabilities Identified in Tails Operating System

The critical zero-day security flaws has been discovered in the privacy and security dedicated Linux-based operating system “Tails” that could be used by an attacker to unmask your identity. Tails, which is been used and recommended by the global surveillance whistleblower Edward Snowden to remai...

PHD Help Desk 2.12 - SQL Injection Vulnerability

No description provided by source. Exploit Title: PHD Help Desk 2.12 SQLi Date: 05/24/2013 Exploit Author: drone @dronesec More information: http://forelsec.blogspot.com/2013/06/phd-help-desk-212-sqli-and-xss.html Vendor Homepage: http://www.p-hd.com.ar/ Software Link:...

openSUSE Security Update : libvirt (openSUSE-2012-78)

Fix authorization workflow with PolicyKit. polkit.patch bnc735403 - Fix qemu default migration speed. It should not be 33554432Mb! 61f2b6ba-no-unlimited-mig2file-speed.patch d8916dc8-def-qemu-migspeed.patch - CVE-2011-4600: unintended firewall port exposure after restarting libvirtd when defining...

openSUSE Security Update : samba (openSUSE-SU-2014:0404-1)

"Samba was updated to 4.1.6, fixing bugs and security issues : - Password lockout not enforced for SAMR password changes, this allowed brute forcing of passwords; CVE-2013-4496; bnc849224. - smbcacls can remove a file or directory ACL by mistake; CVE-2013-6442; bnc855866. Also the following bugs...

openSUSE Security Update : libvirt (openSUSE-SU-2014:0268-1)

This update fixes the following security and non security issues with libvirt : - bnc857492: Fix libvirtd crash when hot-plugging disks for qemu domains CVE-2013-6458 - bnc858817: Don't crash if a connection closes early CVE-2014-1447 - bnc858824: avoid crashing libvirtd when calling virsh...

openSUSE Security Update : apparmor-parser (openSUSE-SU-2011:0268-1)

Fixed apparmor-parser: The parser could generate a policy using an unconfined fallback execute transition. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update apparmor-parser-3810. The text...

CVE-2013-4459

LightDM 1.7.5 through 1.8.3 and 1.9.x before 1.9.2 does not apply the AppArmor profile to the Guest account, which allows local users to bypass intended restrictions by leveraging the Guest account...

CVE-2013-4459

LightDM 1.7.5 through 1.8.3 and 1.9.x before 1.9.2 does not apply the AppArmor profile to the Guest account, which allows local users to bypass intended restrictions by leveraging the Guest account...

CVE-2013-4459

LightDM vulnerability CVE-2013-4459 affects LightDM 1.7.5–1.8.3 and 1.9.x prior to 1.9.2, where the AppArmor profile was not applied to the Guest account, allowing local users to bypass intended restrictions. Impact is local information exposure and a potential bypass of guest-restricted controls...