Серьезная локальная DoS-атака против *BSD

Недокументированный системный вызов, используемый в ipcs, неиспользующий проверку ACL позволяет любому пользователю заблокировать выход приложений...

FreeBSD-SA-00:19.semconfig

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:19 Security Advisory FreeBSD, Inc. Topic: local users can prevent all processes from exiting Category: core Module: kernel Announced: 2000-05-23 Credits: Peter Wemm...

mail.local.diff

688a689,698 define MAXMSGLEN 65536 / Make sure message is less than MAXMSGLEN / if ftellfp MAXMSGLEN syslogLOGDEBUG,"Message too long - %i bytes limit is %i\n", ftellfp,MAXMSGLEN; exit1;...

ROS-2-1561

2.1561 Multiple vulnerabilities in libwebp 1. Vulnerability description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...