CVE-2014-9862

Integer signedness error in bspatch.c in bspatch in bsdiff, as used in Apple OS X before 10.11.6 and other products, allows remote attackers to execute arbitrary code or cause a denial of service heap-based buffer overflow via a crafted patch file...

CVE-2014-9862

Integer signedness error in bspatch.c in bspatch in bsdiff, as used in Apple OS X before 10.11.6 and other products, allows remote attackers to execute arbitrary code or cause a denial of service heap-based buffer overflow via a crafted patch file...

The vulnerability of the Kubernetes cluster management software allows a hacker to gain access to protected information.

The vulnerability of the software interface of the Kubernetes cluster management server is related to lack of access control. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to protected information using a specially created patch...

PT-2016-1271 · Kubernetes · Kubernetes

Name of the Vulnerable Software and Affected Versions: Kubernetes affected versions not specified Description: The issue is related to insufficient access control in the Kubernetes API server, allowing remote authenticated users to access additional resources by crafting a patched object. This ca...

OpenBSD patch arbitrary command execution vulnerability

OpenBSD is a BSD-based operating system. OpenBSD fails to properly filter filter input patch streams, allowing a remote attacker to create specially crafted patch files that the target user processes and can run arbitrary commands...

patch: multiple issues

CVE-2015-1196 directory traversal A directory traversal flaw was discovered that allows remote attackers to write to arbitrary files via a symlink attack in a patch file. This could allow an attacker to overwrite arbitrary files by applying a specially crafted patch, with the privileges of the...