1095 matches found
DEBIAN-CVE-2016-7917
The nfnetlinkrcvbatch function in net/netfilter/nfnetlink.c in the Linux kernel before 4.5 does not check whether a batch message's length field is large enough, which allows local users to obtain sensitive information from kernel memory or cause a denial of service infinite loop or out-of-bounds...
kernel security and bug fix update
3.10.0-327.18.2.OL7 - Oracle Linux certificates Alexey Petrenko 3.10.0-327.18.2 - lib keys: Fix ASN.1 indefinite length object parsing David Howells 1308814 1308815 CVE-2016-0758 3.10.0-327.18.1 - scsi bnx2fc: Fix FCP RSP residual parsing Maurizio Lombardi 1322279 1306342 - mm madvise: fix...
UBUNTU-CVE-2015-1573
The nftflushtable function in net/netfilter/nftablesapi.c in the Linux kernel before 3.18.5 mishandles the interaction between cross-chain jumps and ruleset flushes, which allows local users to cause a denial of service panic by leveraging the CAPNETADMIN capability...
Hexchat IRC Client 2.11.0 - CAP LS Handling Buffer Overflow
Hexchat IRC Client 2.11.0 - CAP LS Handling Buffer Overflow !/usr/bin/python Meta information Exploit Title: Hexchat IRC client - CAP LS Handling Stack Buffer Overflow Date: 2016-02-07 Exploit Author: PizzaHatHacker Vendor Homepage: https://hexchat.github.io/index.html Software Link:...
Hexchat IRC Client 2.11.0 - CAP LS Handling Buffer Overflow
!/usr/bin/python Meta information Exploit Title: Hexchat IRC client - CAP LS Handling Stack Buffer Overflow Date: 2016-02-07 Exploit Author: PizzaHatHacker Vendor Homepage: https://hexchat.github.io/index.html Software Link: https://hexchat.github.io/downloads.html Version: 2.11.0 Tested on:...
PT-2016-7432
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.5 Description The issue allows local users to obtain sensitive information from kernel memory or cause a denial of service by leveraging the CAP NET ADMIN capability. This is due to the nfnetlink rcv batch...
cap-and-action.be XSS vulnerability
Vulnerable URL: http://www.cap-and-action.be//search/site/?q= Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 20:16 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 V...
PT-2016-3585
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.18.5 Description The issue is related to the interaction between cross-chain jumps and ruleset flushes in the Linux kernel, specifically in the nft flush table function. This can be exploited by local users wit...
openstack-glance: Glance store disk space exhaustion
It was discovered that the imagesizecap configuration option in glance was not honored. An authenticated user could use this flaw to upload an image to glance and consume all available storage space, resulting in a denial of service...
openstack-glance: Glance store disk space exhaustion
It was discovered that the imagesizecap configuration option in glance was not honored. An authenticated user could use this flaw to upload an image to glance and consume all available storage space, resulting in a denial of service...
CVE-2014-5356
OpenStack Image Registry and Delivery Service Glance before 2013.2.4, 2014.x before 2014.1.3, and Juno before Juno-3, when using the V2 API, does not properly enforce the imagesizecap configuration option, which allows remote authenticated users to cause a denial of service disk consumption by...
DEBIAN-CVE-2014-5356
OpenStack Image Registry and Delivery Service Glance before 2013.2.4, 2014.x before 2014.1.3, and Juno before Juno-3, when using the V2 API, does not properly enforce the imagesizecap configuration option, which allows remote authenticated users to cause a denial of service disk consumption by...
USN-2322-1: OpenStack Glance vulnerability
Thomas Leaman and Stuart McLaren discovered that OpenStack Glance did not properly honor the imagesizecap configuration option. A remote authenticated attacker could exploit this to cause a denial of service via disk consumption...
USN-2322-1 glance vulnerability
Thomas Leaman and Stuart McLaren discovered that OpenStack Glance did not properly honor the imagesizecap configuration option. A remote authenticated attacker could exploit this to cause a denial of service via disk consumption...
PT-2014-6432
Name of the Vulnerable Software and Affected Versions OpenStack Image Registry and Delivery Service Glance versions prior to 2013.2.4 OpenStack Image Registry and Delivery Service Glance versions 2014.x prior to 2014.1.3 OpenStack Image Registry and Delivery Service Glance versions prior to Juno-...
UBUNTU-CVE-2014-5356
OpenStack Image Registry and Delivery Service Glance before 2013.2.4, 2014.x before 2014.1.3, and Juno before Juno-3, when using the V2 API, does not properly enforce the imagesizecap configuration option, which allows remote authenticated users to cause a denial of service disk consumption by...
cap-strap Gem for Ruby Process Table Local Plaintext Credential Disclosure
cap-strap Gem for Ruby contains a flaw that is due to the application exposing credential information in plaintext in the process table listing. This may allow a local attacker to gain access to credential information...
PT-2018-4212
Name of the Vulnerable Software and Affected Versions vzkernel versions prior to 042stab090.5 Description The issue is related to the open by handle at function in the vzkernel when using simfs. It might allow local container users with CAP DAC READ SEARCH capability to bypass an intended contain...
CVE-2014-2610
CVE-2014-2610 affects HP Executive Scorecard (CAP) in versions 9.40 and 9.41. The underlying issue is a directory-traversal flaw in the Content Acceleration Pack web application that allows an authenticated user to upload an executable file, enabling remote code execution. The ZDI advisory confir...
