13948 matches found
Denial Of Service (DoS)
krb5 is vulnerable to denial of service DoS attacks. The vulnerability exists as the pkinitserverreturnpadata function in plugins/preauth/pkinit/pkinitsrv.c in the PKINIT implementation in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 before 1.10.4 attempts to find an agility KDF...
Privilege Escalation
modwsgi is vulnerable to privilege escalation attacks. The vulnerability exists as the modwsgi module before 3.5 for Apache, when daemon mode is enabled, does not properly handle error codes returned by setuid when run on certain Linux kernels, which allows local users to gain privileges via...
Denial Of Service (Dos)
httpd is vulnerable to denial of service. Whitespace characters from CDATA sections are not properly removed in the davxmlgetcdata function in main/util.c, which would allow remote attackers to crash the daemon via a malicious DAV WRITE request...
Remote Code Execution (RCE)
openswan is vulnerable to remote code execution RCE attacks. The vulnerability exists through a buffer overflow issue in the atodn function in Openswan before 2.6.39, when Opportunistic Encryption is enabled and an RSA key is being used, allows remote attackers to cause a denial of service pluto...
Denial Of Service (Dos)
openldap is vulnerable to denial of service. An assertion failure and daemon exit occurs in slapd when an LDAP search query with attrsOnly set to true returns empty attributes. This allows a remote attacker to exploit the vulnerability to crash the process...
Information Disclosure
qemu-kvm-rhev is vulnerable to information disclosure attacks. The vulnerability exists as qemu guest agent in Qemu 1.4.1 and earlier, as used by Xen, when started in daemon mode, uses weak permissions for certain files, which allows local users to read and write to these files...
Junos OS: pd crash on VPLS PE upon receipt of specific BGP message (JSA10912)
According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability which allows an attacker to craft a specific BGP message to cause the routing protocol daemon rpd process to crash and restart. While rpd restarts after a crash, repeate...
ALPINE-CVE-2018-20679
An issue was discovered in BusyBox before 1.30.0. An out of bounds read in udhcp components consumed by the DHCP server, client, and relay allows a remote attacker to leak sensitive information from the stack by sending a crafted DHCP message. This is related to verification in udhcpgetoption in...
Command injection
The server in Core FTP 2.0 build 653 on 32-bit platforms allows remote attackers to cause a denial of service daemon crash via a crafted XRMD command...
CVE-2018-20658
The server in Core FTP 2.0 build 653 on 32-bit platforms allows remote attackers to cause a denial of service daemon crash via a crafted XRMD command...
CVE-2018-20658
CVE-2018-20658 affects Core FTP 2.0 build 653 on 32-bit platforms. The vulnerability allows remote attackers to cause a denial of service (daemon crash) by sending a crafted XRMD command. The Red Hat, CNVD, CNVD-like records corroborate the same description, confirming a DoS outcome but do not pr...
Deepin Linux 15 - lastore-daemon Local Privilege Escalation
Deepin Linux 15 - lastore-daemon Local Privilege Escalation !/bin/bash Deepin Linux 15.5 lastore-daemon D-Bus Local Root Exploit The lastore-daemon D-Bus configuration on Deepin Linux 15.5 permits any user in the sudo group to install arbitrary packages without providing a password, resulting in...
Deepin Linux 15 - 'lastore-daemon' Local Privilege Escalation
!/bin/bash Deepin Linux 15.5 lastore-daemon D-Bus Local Root Exploit The lastore-daemon D-Bus configuration on Deepin Linux 15.5 permits any user in the sudo group to install arbitrary packages without providing a password, resulting in code execution as root. By default, the first user created o...
CVE-2018-17539
The BGP daemon bgpd in all IP Infusion ZebOS versions to 7.10.6 and all OcNOS versions to 1.3.3.145 allow remote attackers to cause a denial of service attack via an autonomous system AS path containing 8 or more autonomous system number ASN elements...
CVE-2018-17539
The BGP daemon bgpd in all IP Infusion ZebOS versions to 7.10.6 and all OcNOS versions to 1.3.3.145 allow remote attackers to cause a denial of service attack via an autonomous system AS path containing 8 or more autonomous system number ASN elements...
Design/Logic Flaw
The BGP daemon bgpd in all IP Infusion ZebOS versions to 7.10.6 and all OcNOS versions to 1.3.3.145 allow remote attackers to cause a denial of service attack via an autonomous system AS path containing 8 or more autonomous system number ASN elements...
CVE-2018-17539
The CVE-2018-17539 issue affects ZebOS/bgpd and OcNOS/bgpd, with vulnerable versions up to ZebOS 7.10.6 and OcNOS 1.3.3.145. An attacker can cause a denial of service by sending an AS path containing 8 or more ASN elements, disrupting dynamic routing as the bgpd process restarts. F5 advisory (K17...
CVE-2018-17539
The BGP daemon bgpd in all IP Infusion ZebOS versions to 7.10.6 and all OcNOS versions to 1.3.3.145 allow remote attackers to cause a denial of service attack via an autonomous system AS path containing 8 or more autonomous system number ASN elements...
CVE-2018-1000845
REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultID: CVE-2017-6519. Reason: This candidate is a duplicate of CVE-2017-6519. Notes: All CVE users should reference CVE-2017-6519 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage...
Erlang - Port Mapper Daemon Cookie Remote Code Execution (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Erlang Port Mapper Daemon Cookie RCE', 'Description' = %q The erlang port mapper daemon is used to coordinate distributed erlang instances. Shoul...