65 matches found
DEBIAN-CVE-2015-1339
Memory leak in the cusechannelrelease function in fs/fuse/cuse.c in the Linux kernel before 4.4 allows local users to cause a denial of service memory consumption or possibly have unspecified other impact by opening /dev/cuse many times...
CVE-2015-1339
Memory leak in the cusechannelrelease function in fs/fuse/cuse.c in the Linux kernel before 4.4 allows local users to cause a denial of service memory consumption or possibly have unspecified other impact by opening /dev/cuse many times...
Linux kernel CUSE Driver Component Denial of Service Vulnerability
The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A denial-of-service vulnerability exists in the CUSE Driver component of Linux kernel version 4.2, which can be exploited by a local attacker to affect availability...
CVE-2016-1233
An unspecified udev rule in the Debian fuse package in jessie before 2.9.3-15+deb8u2, in stretch before 2.9.5-1, and in sid before 2.9.5-1 sets world-writable permissions for the /dev/cuse character device, which allows local users to gain privileges via a character device in /dev, related to an...
DEBIAN-CVE-2016-1233
An unspecified udev rule in the Debian fuse package in jessie before 2.9.3-15+deb8u2, in stretch before 2.9.5-1, and in sid before 2.9.5-1 sets world-writable permissions for the /dev/cuse character device, which allows local users to gain privileges via a character device in /dev, related to an...
CVE-2016-1233
An unspecified udev rule in the Debian fuse package in jessie before 2.9.3-15+deb8u2, in stretch before 2.9.5-1, and in sid before 2.9.5-1 sets world-writable permissions for the /dev/cuse character device, which allows local users to gain privileges via a character device in /dev, related to an...
Design/Logic Flaw
An unspecified udev rule in the Debian fuse package in jessie before 2.9.3-15+deb8u2, in stretch before 2.9.5-1, and in sid before 2.9.5-1 sets world-writable permissions for the /dev/cuse character device, which allows local users to gain privileges via a character device in /dev, related to an...
CVE-2016-1233
CVE-2016-1233 describes a privilege-escalation in the Debian fuse package: an unspecified udev rule makes the /dev/cuse device world-writable, enabling a local unprivileged user to create or interact with devices via ioctl and potentially modify memory of processes opening the device. Affected ar...
CVE-2016-1233: Undefined Security Weakness
An unspecified udev rule in the Debian fuse package in jessie before 2.9.3-15+deb8u2, in stretch before 2.9.5-1, and in sid before 2.9.5-1 sets world-writable permissions for the /dev/cuse character device, which allows local users to gain privileges via a character device in /dev, related to an...
Debian DSA-3451-1 : fuse - security update
Jann Horn discovered a vulnerability in the fuse Filesystem in Userspace package in Debian. The fuse package ships an udev rule adjusting permissions on the related /dev/cuse character device, making it world writable. This permits a local, unprivileged attacker to create an arbitrarily-named...
PT-2016-4658
Name of the Vulnerable Software and Affected Versions fuse versions prior to 2.9.3-15+deb8u2 in jessie fuse versions prior to 2.9.5-1 in stretch fuse versions prior to 2.9.5-1 in sid Description The issue is related to an unspecified udev rule in the Debian fuse package that sets world-writable...
PT-2016-3582
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.4 Description A memory leak issue exists in the cuse channel release function, located in fs/fuse/cuse.c, allowing local users to cause a denial of service due to memory consumption by repeatedly opening...
CVE-2010-4650
Buffer overflow in the fusedoioctl function in fs/fuse/file.c in the Linux kernel before 2.6.37 allows local users to cause a denial of service or possibly have unspecified other impact by leveraging the ability to operate a CUSE server...
Buffer overflow
Buffer overflow in the fusedoioctl function in fs/fuse/file.c in the Linux kernel before 2.6.37 allows local users to cause a denial of service or possibly have unspecified other impact by leveraging the ability to operate a CUSE server...
CVE-2010-4650
Buffer overflow in the fusedoioctl function in fs/fuse/file.c in the Linux kernel before 2.6.37 allows local users to cause a denial of service or possibly have unspecified other impact by leveraging the ability to operate a CUSE server...
CVE-2010-4650
Buffer overflow in the fusedoioctl function in fs/fuse/file.c in the Linux kernel before 2.6.37 allows local users to cause a denial of service or possibly have unspecified other impact by leveraging the ability to operate a CUSE server...
CVE-2010-4650: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in the fusedoioctl function in fs/fuse/file.c in the Linux kernel before 2.6.37 allows local users to cause a denial of service or possibly have unspecified other impact by leveraging the ability to operate a CUSE server...
Ubuntu: Security Advisory (USN-1394-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu Update for linux-ti-omap4 USN-1394-1
Ubuntu Update for Linux kernel vulnerabilities USN-1394-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN13941.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for linux-ti-omap4 USN-1394-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.n...
USN-1394-1 : Linux kernel (OMAP4) vulnerabilities
Aristide Fattori and Roberto Paleari reported a flaw in the Linux kernel's handling of IPv4 icmp packets. A remote user could exploit this to cause a denial of service. CVE-2011-1927 Vegard Nossum discovered a leak in the kernel's inotifyinit system call. A local, unprivileged user could exploit...