553 matches found
DEBIAN-CVE-2018-7755
An issue was discovered in the fdlockedioctl function in drivers/block/floppy.c in the Linux kernel through 4.15.7. The floppy driver will copy a kernel pointer to user memory in response to the FDGETPRM ioctl. An attacker can send the FDGETPRM ioctl and use the obtained kernel pointer to discove...
CVE-2018-7755
An issue was discovered in the fdlockedioctl function in drivers/block/floppy.c in the Linux kernel through 4.15.7. The floppy driver will copy a kernel pointer to user memory in response to the FDGETPRM ioctl. An attacker can send the FDGETPRM ioctl and use the obtained kernel pointer to discove...
CVE-2018-7755
CVE-2018-7755 affects the Linux kernel floppy driver: the fd_locked_ioctl path in drivers/block/floppy.c copies a kernel pointer to user memory in response to FDGETPRM, enabling a local attacker with floppy access to discover kernel code/data locations and bypass KASLR. The issue is in kernel ver...
Linux Kernel 'drivers/block/floppy.c' Security Restriction Bypass Vulnerability
The Linux Kernel is the kernel of the Linux operating system. Linux kernel 4.15.4 and earlier versions have a security vulnerability in their implementation that, when successfully exploited, could allow an attacker to gain access to sensitive information...
UBUNTU-CVE-2018-7755
An issue was discovered in the fdlockedioctl function in drivers/block/floppy.c in the Linux kernel through 4.15.7. The floppy driver will copy a kernel pointer to user memory in response to the FDGETPRM ioctl. An attacker can send the FDGETPRM ioctl and use the obtained kernel pointer to discove...
CVE-2018-7755
An issue was discovered in the fdlockedioctl function in drivers/block/floppy.c in the Linux kernel through 4.15.7. The floppy driver will copy a kernel pointer to user memory in response to the FDGETPRM ioctl. An attacker can send the FDGETPRM ioctl and use the obtained kernel pointer to discove...
PT-2018-3026 · Linux +5 · Linux Kernel +5
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.15.8 Description: The issue is related to the fd locked ioctl function in the Linux kernel, specifically in the floppy driver. It allows an attacker to obtain a kernel pointer by sending the FDGETPRM ioctl,...
Code injection
In the Linux kernel through 4.15.4, the floppy driver reveals the addresses of kernel functions and global variables using printk calls within the function showfloppy in drivers/block/floppy.c. An attacker can read this information from dmesg and use the addresses to find the locations of kernel...
DEBIAN-CVE-2018-7273
In the Linux kernel through 4.15.4, the floppy driver reveals the addresses of kernel functions and global variables using printk calls within the function showfloppy in drivers/block/floppy.c. An attacker can read this information from dmesg and use the addresses to find the locations of kernel...
CVE-2018-7273
In the Linux kernel through 4.15.4, the floppy driver reveals the addresses of kernel functions and global variables using printk calls within the function showfloppy in drivers/block/floppy.c. An attacker can read this information from dmesg and use the addresses to find the locations of kernel...
CVE-2018-7273
In the Linux kernel through 4.15.4, the floppy driver reveals the addresses of kernel functions and global variables using printk calls within the function showfloppy in drivers/block/floppy.c. An attacker can read this information from dmesg and use the addresses to find the locations of kernel...
CVE-2018-7273
In the Linux kernel through 4.15.4, the floppy driver reveals the addresses of kernel functions and global variables using printk calls within the function showfloppy in drivers/block/floppy.c. An attacker can read this information from dmesg and use the addresses to find the locations of kernel...
CVE-2018-7273
CVE-2018-7273 affects the Linux kernel floppy driver. The show_floppy path in drivers/block/floppy.c prints kernel addresses via printk, enabling local attackers to read addresses from dmesg and locate kernel code/data, potentially bypassing KASLR. The vulnerability is described for Linux kernels...
CVE-2018-7273
In the Linux kernel through 4.15.4, the floppy driver reveals the addresses of kernel functions and global variables using printk calls within the function showfloppy in drivers/block/floppy.c. An attacker can read this information from dmesg and use the addresses to find the locations of kernel...
Product update: Virtuozzo Automator 7.0 Update 2 Hotfix 3 (VA MN: 7.0.2-510, VA Agent: 7.0.2-258)
This hotfix for Virtuozzo Automator 7.0.2 provides new features as well as stability and usability bug fixes. Vulnerability id: PVA-34527 Alert reason would not be shown on clicking the alert icon on the virtual environment or hardware node summary page if the corresponding event had already been...
Venom
Lenovo Security Advisory: LEN-2015-046 Potential Impact: Escalation of Privileges Severity: High Summary: A buffer overflow vulnerability affecting the Floppy Disk Controller FDC emulation implemented in the QEMU component has been identified in the KVM/QEMU and Xen hypervisors. This vulnerabilit...
Venom - Lenovo Support US
No description provided...
The vulnerability of the Linux operating system, which allows a malicious individual to gain access to protected information
The rawcmdcopyout function in the file /drivers/block/floppy.c has a bug in its handling of permissions for accessing memory pointers during the execution of the system call FDRAWCMD. This allows malicious actors to gain access to information stored in the dynamic memory of the operating system’s...
The vulnerability of the Linux operating system, which allows a malicious individual to gain access to protected information
The function rawcmdcopyout in the file /drivers/block/floppy.c contains an error in the handling of permissions for accessing memory pointers during the execution of the system call FDRAWCMD. This allows a malicious individual to gain access to information stored in the dynamic memory of the...
The vulnerability of the Linux operating system, which allows a malicious individual to increase their privileges
The function rawcmdcopyin in the file drivers/block/floppy.c incorrectly handles the system call FDRAWCMD, allowing users to increase their privileges...