Lucene search
+L

2191 matches found

seebug.org
seebug.org
added 2017/04/14 12:0 a.m.356 views

Linux kernel 'udp. c' remote code execution vulnerability(CVE-2016-10229)

The Linux kernel allows remote attackers to execute arbitrary code via UDP traffic that triggers an unsafe second checksum calculation during execution of a recv system call with the MSGPEEK flag. This may create a kernel panic or memory corruption leading to privilege escalation...

10CVSS9.5AI score0.12791EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2017/04/13 12:0 a.m.18 views

RedHat Update for 389-ds-base RHSA-2017:0920-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.5AI score0.02627EPSS
SaveExploits0References2
OSV
OSV
added 2017/04/12 11:59 p.m.4 views

UBUNTU-CVE-2017-7703

In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the IMAP dissector could crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-imap.c by calculating a line's end correctly...

7.5CVSS7.1AI score0.03284EPSS
SaveExploits0References5
NVD
NVD
added 2017/04/04 5:59 a.m.26 views

CVE-2016-10229

udp.c in the Linux kernel before 4.5 allows remote attackers to execute arbitrary code via UDP traffic that triggers an unsafe second checksum calculation during execution of a recv system call with the MSGPEEK flag...

10CVSS9.5AI score0.12791EPSS
SaveExploits1References7
Prion
Prion
added 2017/04/04 5:59 a.m.27 views

Code injection

udp.c in the Linux kernel before 4.5 allows remote attackers to execute arbitrary code via UDP traffic that triggers an unsafe second checksum calculation during execution of a recv system call with the MSGPEEK flag...

10CVSS8AI score0.12791EPSS
SaveExploits1References6Affected Software2
AlpineLinux
AlpineLinux
added 2017/04/04 4:54 a.m.49 views

CVE-2016-10229

udp.c in the Linux kernel before 4.5 allows remote attackers to execute arbitrary code via UDP traffic that triggers an unsafe second checksum calculation during execution of a recv system call with the MSGPEEK flag...

10CVSS9.5AI score0.12791EPSS
SaveExploits1
Cvelist
Cvelist
added 2017/04/04 4:54 a.m.28 views

CVE-2016-10229

udp.c in the Linux kernel before 4.5 allows remote attackers to execute arbitrary code via UDP traffic that triggers an unsafe second checksum calculation during execution of a recv system call with the MSGPEEK flag...

9.4AI score0.12791EPSS
SaveExploits1References6
Debian CVE
Debian CVE
added 2017/04/04 4:54 a.m.46 views

CVE-2016-10229

udp.c in the Linux kernel before 4.5 allows remote attackers to execute arbitrary code via UDP traffic that triggers an unsafe second checksum calculation during execution of a recv system call with the MSGPEEK flag...

10CVSS8AI score0.12791EPSS
SaveExploits1
android
android
added 2017/04/01 12:0 a.m.45 views

CVE-2016-10229

udp.c in the Linux kernel before 4.5 allows remote attackers to execute arbitrary code via UDP traffic that triggers an unsafe second checksum calculation during execution of a recv system call with the MSGPEEK flag...

10CVSS8.2AI score0.12791EPSS
SaveExploits1References3
Broadcom
Broadcom
added 2017/03/31 12:0 a.m.25 views

BSA-2017-227

Security Advisory ID : BSA-2017-227 Component : ntp Revision : 1.0: Interim Bug 2085 described a condition where the root delay was included twice, causing the jitter value to be higher than expected. Due to a misinterpretation of a small-print variable in The Book, the fix for this problem was...

5.3CVSS7.9AI score0.09841EPSS
SaveExploits0
NVD
NVD
added 2017/03/23 6:59 a.m.24 views

CVE-2016-9167

NDSD in Novell eDirectory before 9.0.2 did not calculate ACLs on LDAP objects across partition boundaries correctly, which could lead to a privilege escalation by modifying user attributes that would otherwise be filtered by an ACL...

7.5CVSS7.7AI score0.01244EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2017/03/23 6:36 a.m.33 views

CVE-2016-9167

NDSD in Novell eDirectory before 9.0.2 did not calculate ACLs on LDAP objects across partition boundaries correctly, which could lead to a privilege escalation by modifying user attributes that would otherwise be filtered by an ACL...

7.7AI score0.01244EPSS
SaveExploits0References2
OSV
OSV
added 2017/02/24 10:59 p.m.8 views

CVE-2017-2791

JustSystems Ichitaro 2016 Trial contains a vulnerability that exists when trying to open a specially crafted PowerPoint file. Due to the application incorrectly handling the error case for a function's result, the application will use this result in a pointer calculation for reading file data int...

7.8CVSS6.2AI score0.01153EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2017/02/24 10:0 p.m.27 views

CVE-2017-2791

JustSystems Ichitaro 2016 Trial contains a vulnerability that exists when trying to open a specially crafted PowerPoint file. Due to the application incorrectly handling the error case for a function's result, the application will use this result in a pointer calculation for reading file data int...

7.5CVSS7.7AI score0.01153EPSS
SaveExploits1References2
FreeBSD
FreeBSD
added 2017/02/18 12:0 a.m.23 views

MPD -- buffer overflows in http output

The MPD project reports: httpd: fix two buffer overflows in IcyMetaData length calculation...

1.1AI score
SaveExploits0References1
NVD
NVD
added 2017/02/15 11:59 p.m.25 views

CVE-2017-0308

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape where untrusted input is used for buffer size calculation leading to denial of service or escalation of privileges...

8.8CVSS8.7AI score0.00332EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2017/02/15 11:0 p.m.36 views

CVE-2017-0308

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape where untrusted input is used for buffer size calculation leading to denial of service or escalation of privileges...

8.8AI score0.00332EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2017/02/09 2:30 p.m.36 views

EGESPLOIT - A Golang Library For Malware Development

EGESPLOIT is a golang library for malware development, it has few unique functions for meterpreter integration. DOCUMENTATION CalculateChecksumx : Function calculates x digit 8 bit checksum for reverse HTTP/HTTPS meterpreter connections, returns the calculated checksum as string...

7.4AI score
SaveExploits0References1
Oracle linux
Oracle linux
added 2017/02/06 12:0 a.m.96 views

ntp security update

4.2.6p5-25.0.1.el73.1 - Bump release to avoid ULN conflict with Oracle modified errata. 4.2.6p5-25.el73.1 - don't limit rate of packets from sources CVE-2016-7426 - don't change interface from received packets CVE-2016-7429 - fix calculation of root distance again CVE-2016-7433 - require...

7.5CVSS3.7AI score0.12466EPSS
SaveExploits2
ArchLinux
ArchLinux
added 2017/01/28 12:0 a.m.80 views

[ASA-201701-37] openssl: multiple issues

Arch Linux Security Advisory ASA-201701-37 ========================================== Severity: Medium Date : 2017-01-28 CVE-ID : CVE-2016-7055 CVE-2017-3731 CVE-2017-3732 Package : openssl Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-154 Summary ======= The packa...

7.5CVSS7.6AI score0.57595EPSS
SaveExploits1References7
Rows per page
Query Builder