CVE-2018-7273

In the Linux kernel through 4.15.4, the floppy driver reveals the addresses of kernel functions and global variables using printk calls within the function showfloppy in drivers/block/floppy.c. An attacker can read this information from dmesg and use the addresses to find the locations of kernel...

Code injection

In the Linux kernel through 4.15.4, the floppy driver reveals the addresses of kernel functions and global variables using printk calls within the function showfloppy in drivers/block/floppy.c. An attacker can read this information from dmesg and use the addresses to find the locations of kernel...

CVE-2018-7273

In the Linux kernel through 4.15.4, the floppy driver reveals the addresses of kernel functions and global variables using printk calls within the function showfloppy in drivers/block/floppy.c. An attacker can read this information from dmesg and use the addresses to find the locations of kernel...

DEBIAN-CVE-2018-7273

In the Linux kernel through 4.15.4, the floppy driver reveals the addresses of kernel functions and global variables using printk calls within the function showfloppy in drivers/block/floppy.c. An attacker can read this information from dmesg and use the addresses to find the locations of kernel...

CVE-2018-7273

In the Linux kernel through 4.15.4, the floppy driver reveals the addresses of kernel functions and global variables using printk calls within the function showfloppy in drivers/block/floppy.c. An attacker can read this information from dmesg and use the addresses to find the locations of kernel...

CVE-2018-7273

CVE-2018-7273 affects the Linux kernel floppy driver. The show_floppy path in drivers/block/floppy.c prints kernel addresses via printk, enabling local attackers to read addresses from dmesg and locate kernel code/data, potentially bypassing KASLR. The vulnerability is described for Linux kernels...

CVE-2018-7273

In the Linux kernel through 4.15.4, the floppy driver reveals the addresses of kernel functions and global variables using printk calls within the function showfloppy in drivers/block/floppy.c. An attacker can read this information from dmesg and use the addresses to find the locations of kernel...

Product update: Virtuozzo Automator 7.0 Update 2 Hotfix 3 (VA MN: 7.0.2-510, VA Agent: 7.0.2-258)

This hotfix for Virtuozzo Automator 7.0.2 provides new features as well as stability and usability bug fixes. Vulnerability id: PVA-34527 Alert reason would not be shown on clicking the alert icon on the virtual environment or hardware node summary page if the corresponding event had already been...

Venom - Lenovo Support US

No description provided...

Venom

Lenovo Security Advisory: LEN-2015-046 Potential Impact: Escalation of Privileges Severity: High Summary: A buffer overflow vulnerability affecting the Floppy Disk Controller FDC emulation implemented in the QEMU component has been identified in the KVM/QEMU and Xen hypervisors. This vulnerabilit...

The vulnerability of the Linux operating system, which allows a malicious individual to increase their privileges

The function rawcmdcopyin in the file drivers/block/floppy.c incorrectly handles the system call FDRAWCMD, allowing users to increase their privileges...

The vulnerability of the Linux operating system, which allows a malicious individual to gain access to protected information

The function rawcmdcopyout in the file /drivers/block/floppy.c contains an error in the handling of permissions for accessing memory pointers during the execution of the system call FDRAWCMD. This allows a malicious individual to gain access to information stored in the dynamic memory of the...

The vulnerability of the Linux operating system, which allows a malicious individual to gain access to protected information

The rawcmdcopyout function in the file /drivers/block/floppy.c has a bug in its handling of permissions for accessing memory pointers during the execution of the system call FDRAWCMD. This allows malicious actors to gain access to information stored in the dynamic memory of the operating system’s...

VMware ESX / ESXi Multiple Vulnerabilities (VMSA-2012-0009) (remote check)

The remote VMware ESX / ESXi host is affected by multiple vulnerabilities : - Multiple privilege escalation vulnerabilities exist due to improper handling of RPC commands. A local attacker guest user can exploit these to manipulate data and function pointers, resulting in a denial of service...

UltraIso v 9.6.5 - Buffer Overflow Vulnerability

Exploit for windows platform in category dos / poc !/usr/bin/perl Title : UltraIso v 9.6.5 - Buffer Overflow Vulnerability Author : ZwX Date : 24/10/2015 Vendor : https://www.ezbsystems.com/ Download : http://www.ezbsystems.com/ultraiso/download.htm Tested Os : Windows 7 steps to reproduce the...

Oracle: Security Advisory (ELSA-2014-3042)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DLA-268-1 virtualbox-ose - security update

Bulletin has no description...

Debian DLA-249-1 : qemu-kvm security update (Venom)

A vulnerability was discovered in the qemu virtualisation solution : CVE-2015-3456 Jason Geffner discovered a buffer overflow in the emulated floppy disk drive, resulting in the potential execution of arbitrary code. Despite the end-of-life of qemu-kvm support in the old-oldstable distribution...

Debian DLA-248-1 : qemu security update (Venom)

A vulnerability was discovered in the qemu virtualisation solution : CVE-2015-3456 Jason Geffner discovered a buffer overflow in the emulated floppy disk drive, resulting in the potential execution of arbitrary code. Despite the end-of-life of qemu support in the old-oldstable distribution...

DLA-249-1 qemu-kvm - security update

Bulletin has no description...