Lucene search
+L

2120 matches found

Positive Technologies
Positive Technologies
•added 2022/11/07 12:00 a.m.•28 views

PT-2023-13556 · Unknown +4 · Device-Mapper-Multipath +4

Name of the Vulnerable Software and Affected Versions: device-mapper-multipath affected versions not specified Description: A local privilege escalation issue exists, allowing local users to obtain root access by exploiting a flaw in the handling of UNIX domain sockets. This can be achieved by...

8.4CVSS6.5AI score0.00216EPSS
SaveExploits0References20
Tenable Nessus
Tenable Nessus
•added 2022/11/02 12:00 a.m.•44 views

EulerOS 2.0 SP10 : mariadb-connector-c (EulerOS-SA-2022-2659)

According to the versions of the mariadb-connector-c package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmeti...

9.8CVSS8.1AI score0.51733EPSS
SaveExploits2References7
osv_debian
osv_debian
•added 2022/10/29 7:15 p.m.•7 views

DEBIAN-CVE-2022-41974

multipath-tools 0.7.0 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited alone or in conjunction with CVE-2022-41973. Local users able to write to UNIX domain sockets can bypass access controls and manipulate the multipath setup. This can lead to local privilege...

7.8CVSS7.4AI score0.00643EPSS
SaveExploits5References1
Prion
Prion
•added 2022/10/29 7:15 p.m.•52 views

Privilege escalation

multipath-tools 0.7.0 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited alone or in conjunction with CVE-2022-41973. Local users able to write to UNIX domain sockets can bypass access controls and manipulate the multipath setup. This can lead to local privilege...

4.3CVSS7.8AI score0.00698EPSS
SaveExploits6References13Affected Software3
Mend
Mend
•added 2022/10/29 12:00 a.m.•8 views

CVE-2022-41974

multipath-tools 0.7.0 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited alone or in conjunction with CVE-2022-41973. Local users able to write to UNIX domain sockets can bypass access controls and manipulate the multipath setup. This can lead to local privilege...

8.5CVSS0.00643EPSS
SaveExploits5References19
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/29 12:00 a.m.•6 views

CVE-2022-41974: Improper Privilege Management

multipath-tools 0.7.0 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited alone or in conjunction with CVE-2022-41973. Local users able to write to UNIX domain sockets can bypass access controls and manipulate the multipath setup. This can lead to local privilege...

7.8CVSS7.4AI score0.00643EPSS
SaveExploits5References2
RedHat Linux
RedHat Linux
•added 2022/10/25 3:10 p.m.•13 views

device-mapper-multipath: Authorization bypass, multipathd daemon listens for client connections on an abstract Unix socket

A vulnerability was found in the device-mapper-multipath. The device-mapper-multipath allows local users to obtain root access, exploited alone or in conjunction with CVE-2022-41973. Local users that are able to write to UNIX domain sockets can bypass access controls and manipulate the multipath...

7.8CVSS7.2AI score0.00643EPSS
SaveExploits5References5
RedhatCVE
RedhatCVE
•added 2022/10/24 8:18 p.m.•62 views

CVE-2022-41974

A vulnerability was found in the device-mapper-multipath. The device-mapper-multipath allows local users to obtain root access, exploited alone or in conjunction with CVE-2022-41973. Local users that are able to write to UNIX domain sockets can bypass access controls and manipulate the multipath...

7.8CVSS7.2AI score0.00698EPSS
SaveExploits6References4
osv_ubuntu
osv_ubuntu
•added 2022/10/24 3:00 p.m.•25 views

UBUNTU-CVE-2022-41974

multipath-tools 0.7.0 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited alone or in conjunction with CVE-2022-41973. Local users able to write to UNIX domain sockets can bypass access controls and manipulate the multipath setup. This can lead to local privilege...

7.8CVSS7.4AI score0.00643EPSS
SaveExploits5References4
BDU FSTEC
BDU FSTEC
•added 2022/10/21 12:00 a.m.•17 views

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the ax25release function in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.8CVSS6.7AI score0.02033EPSS
SaveExploits0References24Affected Software7
BDU FSTEC
BDU FSTEC
•added 2022/10/13 12:00 a.m.•13 views

Samba Pointer Arithmetic DoS

The vulnerability of the Samba networking communication package is related to pointer arithmetic errors. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

6.8CVSS6.8AI score0.02118EPSS
SaveExploits0References16Affected Software8
Tenable Nessus
Tenable Nessus
•added 2022/10/13 12:00 a.m.•35 views

Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : GMP vulnerability (USN-5672-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5672-1 advisory. It was discovered that GMP did not properly manage memory on 32-bit platforms when processing a specially crafted input. An attacker could...

7.5CVSS7.2AI score0.04464EPSS
SaveExploits1References2
Ubuntu
Ubuntu
•added 2022/10/12 12:54 p.m.•60 views

USN-5672-1: GMP vulnerability

It was discovered that GMP did not properly manage memory on 32-bit platforms when processing a specially crafted input. An attacker could possibly use this issue to cause applications using GMP to crash, resulting in a denial of service...

7.5CVSS7.2AI score0.04464EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
•added 2022/10/10 12:00 a.m.•24 views

InspIRCd Pointer Assignment DoS

The vulnerability of InspIRCd relates to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

6.8CVSS6.4AI score0.02787EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2022/09/26 12:00 a.m.•23 views

Cron Pointer Arithmetic DoS

The vulnerability of the Cron task scheduler in UNIX-like operating systems is related to pointer dereferencing errors. Exploiting this vulnerability allows a perpetrator to cause service failures...

5.5CVSS5.7AI score0.00365EPSS
SaveExploits0References5Affected Software2
Code423n4
Code423n4
•added 2022/09/23 12:00 a.m.•19 views

Mistakenly use of arithmetic operation can lead to loss

Lines of code Vulnerability details Mistakenly use of arithmetic operation can lead to loss Description Calculating the values can somewhat correct to what you need but this is a great mistake of calculation which should be overcomed .Now why should this be overcomed? Since in Solidity, the order...

6.8AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2022/09/19 12:00 a.m.•11 views

Samba Pointer Arithmetic DoS

The vulnerability of the Samba networking communication package is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to cause service failures...

5.5CVSS6.5AI score0.00621EPSS
SaveExploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
•added 2022/09/19 12:00 a.m.•15 views

LibTIFF Heap Buffer Overflow DoS

The vulnerability of the TIFFFetchStripThing function in the tifdirread.c component of the LibTIFF library is related to pointer arithmetic errors. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created TIFF file...

7.1CVSS6.3AI score0.0125EPSS
SaveExploits1References14Affected Software6
BDU FSTEC
BDU FSTEC
•added 2022/09/16 12:00 a.m.•12 views

LibTIFF Pointer Dereferencing DoS

The vulnerability of the LibTIFF library is related to pointer arithmetic errors. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created TIFF file...

7.1CVSS6.6AI score0.0127EPSS
SaveExploits1References11Affected Software4
Prion
Prion
•added 2022/09/09 10:15 p.m.•27 views

Design/Logic Flaw

An issue in the Leptonica linked library v1.79.0 allows attackers to cause an arithmetic exception leading to a Denial of Service DoS via a crafted JPEG file...

4.3CVSS6.1AI score0.01449EPSS
SaveExploits1References4Affected Software3
Rows per page
Query Builder