Lucene search
K

1447 matches found

Packet Storm
Packet Storm
added 2018/01/18 12:0 a.m.129 views

glibc getcwd() Local Privilege Escalation

/ This software is provided by the copyright owner "as is" and any expressed or implied warranties, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose are disclaimed. In no event shall the copyright owner be liable for any direct, indirec...

0.6AI score0.13614EPSS
Exploits9
0day.today
0day.today
added 2018/01/18 12:0 a.m.81 views

glibc - getcwd() Local Privilege Escalation Exploit

Exploit for linux platform in category local exploits / This software is provided by the copyright owner "as is" and any expressed or implied warranties, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose are disclaimed. In no event shall...

6.3AI score0.00616EPSS
Exploits9
exploitpack
exploitpack
added 2018/01/16 12:0 a.m.42 views

glibc 2.26 - getcwd() Local Privilege Escalation

glibc 2.26 - getcwd Local Privilege Escalation / This software is provided by the copyright owner "as is" and any expressed or implied warranties, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose are disclaimed. In no event shall the...

0.6AI score
Exploits0
UbuntuCve
UbuntuCve
added 2018/01/11 12:0 a.m.33 views

CVE-2018-1000001

In glibc 2.26 and earlier there is confusion in the usage of getcwd by realpath which can be used to write before the destination buffer leading to a buffer underflow and potential code execution...

7.8CVSS7.3AI score0.13614EPSS
Exploits9References8
OSV
OSV
added 2018/01/11 12:0 a.m.1 views

UBUNTU-CVE-2018-1000001

In glibc 2.26 and earlier there is confusion in the usage of getcwd by realpath which can be used to write before the destination buffer leading to a buffer underflow and potential code execution...

7.8CVSS7.4AI score0.13614EPSS
Exploits9References9
RedhatCVE
RedhatCVE
added 2017/12/28 8:49 p.m.37 views

CVE-2017-17935

The Filereadline function in epan/wslua/wsluafile.c in Wireshark through 2.2.11 does not properly strip '\n' characters, which allows remote attackers to cause a denial of service buffer underflow and application crash via a crafted packet that triggers the attempted processing of an empty line...

7.5CVSS6AI score0.02958EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2017/12/28 12:0 a.m.39 views

Wireshark 'File_read_line' Function Denial of Service Vulnerability - Mac OS X

Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...

7.5CVSS7.5AI score0.02958EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2017/12/28 12:0 a.m.29 views

Wireshark 'File_read_line' Function Denial of Service Vulnerability - Windows

Wireshark is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"...

7.5CVSS7.5AI score0.02958EPSS
Exploits0References2
OSV
OSV
added 2017/12/27 5:8 p.m.0 views

DEBIAN-CVE-2017-17935

The Filereadline function in epan/wslua/wsluafile.c in Wireshark through 2.2.11 does not properly strip '\n' characters, which allows remote attackers to cause a denial of service buffer underflow and application crash via a crafted packet that triggers the attempted processing of an empty line...

7.5CVSS7.5AI score0.02958EPSS
Exploits0References1
OSV
OSV
added 2017/12/27 5:8 p.m.23 views

CVE-2017-17935

The Filereadline function in epan/wslua/wsluafile.c in Wireshark through 2.2.11 does not properly strip '\n' characters, which allows remote attackers to cause a denial of service buffer underflow and application crash via a crafted packet that triggers the attempted processing of an empty line...

7.5CVSS7.5AI score
Exploits0References5
UbuntuCve
UbuntuCve
added 2017/12/27 5:8 p.m.28 views

CVE-2017-17935

The Filereadline function in epan/wslua/wsluafile.c in Wireshark through 2.2.11 does not properly strip '\n' characters, which allows remote attackers to cause a denial of service buffer underflow and application crash via a crafted packet that triggers the attempted processing of an empty line...

7.5CVSS7.1AI score0.02958EPSS
Exploits0References4
Cvelist
Cvelist
added 2017/12/27 7:0 a.m.26 views

CVE-2017-17935

The Filereadline function in epan/wslua/wsluafile.c in Wireshark through 2.2.11 does not properly strip '\n' characters, which allows remote attackers to cause a denial of service buffer underflow and application crash via a crafted packet that triggers the attempted processing of an empty line...

6AI score0.02958EPSS
Exploits0References5
CVE
CVE
added 2017/12/27 7:0 a.m.96 views

CVE-2017-17935

Wireshark CVE-2017-17935 affects Wireshark up to version 2.2.11. The File_read_line function in epan/wslua/wslua_file.c does not strip trailing newline characters, allowing remote attackers to trigger processing of an empty line via a crafted packet, resulting in a denial of service through a buf...

7.5CVSS5.8AI score0.02958EPSS
Exploits0References5Affected Software1
RedHat Linux
RedHat Linux
added 2017/12/19 8:37 a.m.51 views

Moderate: Red Hat Security Advisory: rh-ruby24-ruby security, bug fix, and enhancement update

An update for rh-ruby24-ruby is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabilit...

9.8CVSS7.2AI score0.29442EPSS
Exploits8References10
UbuntuCve
UbuntuCve
added 2017/09/21 5:29 p.m.22 views

CVE-2017-14639

AP4VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.5.0-617 uses incorrect character data types, which causes a stack-based buffer underflow and out-of-bounds write, leading to denial of service application crash or possibly unspecified other impact...

8.8CVSS7.2AI score0.01705EPSS
Exploits1References4
NVD
NVD
added 2017/09/21 5:29 p.m.12 views

CVE-2017-14639

AP4VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.5.0-617 uses incorrect character data types, which causes a stack-based buffer underflow and out-of-bounds write, leading to denial of service application crash or possibly unspecified other impact...

8.8CVSS8.9AI score0.01705EPSS
Exploits1References3
Prion
Prion
added 2017/09/21 5:29 p.m.9 views

Stack overflow

AP4VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.5.0-617 uses incorrect character data types, which causes a stack-based buffer underflow and out-of-bounds write, leading to denial of service application crash or possibly unspecified other impact...

6.8CVSS8.8AI score0.01705EPSS
Exploits1References3Affected Software1
OSV
OSV
added 2017/09/21 5:29 p.m.0 views

UBUNTU-CVE-2017-14639

AP4VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.5.0-617 uses incorrect character data types, which causes a stack-based buffer underflow and out-of-bounds write, leading to denial of service application crash or possibly unspecified other impact...

8.8CVSS6.1AI score0.01705EPSS
Exploits1References5
OSV
OSV
added 2017/09/21 5:29 p.m.15 views

CVE-2017-14639

AP4VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.5.0-617 uses incorrect character data types, which causes a stack-based buffer underflow and out-of-bounds write, leading to denial of service application crash or possibly unspecified other impact...

8.8CVSS7.6AI score
Exploits0References3
Cvelist
Cvelist
added 2017/09/21 5:0 p.m.14 views

CVE-2017-14639

AP4VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.5.0-617 uses incorrect character data types, which causes a stack-based buffer underflow and out-of-bounds write, leading to denial of service application crash or possibly unspecified other impact...

8.9AI score0.01705EPSS
Exploits1References3
Rows per page
Query Builder