1295 matches found
PT-2018-13032
Name of the Vulnerable Software and Affected Versions IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server versions 9.7 through 11.1 Description A buffer overflow issue may allow a local user to escalate privileges to the DB2 instance owner. Recommendations For versions 9.7 through 11....
CVE-2018-1450: Undefined Security Weakness
IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, and 11.1 contains a vulnerability that could allow a local user to overwrite arbitrary files owned by the DB2 instance owner. IBM X-Force ID: 140045...
CVE-2018-1451: Undefined Security Weakness
IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, and 11.1 contains a vulnerability that could allow a local user to overwrite arbitrary files owned by the DB2 instance owner. IBM X-Force ID: 140046...
PT-2018-12904
Name of the Vulnerable Software and Affected Versions IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server versions 10.5 and 11.1 Description The issue allows a local user to overflow a buffer, which may result in a privilege escalation to the DB2 instance owner under specific or unusu...
PT-2018-12600
Name of the Vulnerable Software and Affected Versions IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server versions 9.7 through 11.1 Description The issue is caused by improper bounds checking, leading to a stack-based buffer overflow. This could allow an attacker to execute arbitrary...
PT-2018-12777
Name of the Vulnerable Software and Affected Versions IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server versions 10.5 and 11.1 Description The issue is a buffer overflow that could allow an authenticated local attacker to execute arbitrary code on the system as root. Recommendations...
CVE-2018-1544: Improper Restriction of Operations within the Bounds of a Memory Buffer
IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, and 11.1 could allow a local user to overflow a buffer which may result in a privilege escalation to the DB2 instance owner. IBM X-Force ID: 142648...
PT-2018-16987
Name of the Vulnerable Software and Affected Versions NetApp OnCommand Unified Manager for Linux versions 7.2 through 7.3 Description The issue concerns the Java Management Extension Remote Method Invocation JMX RMI service, which is bound to the network in the affected versions, making them...
CVE-2018-5487: Improper Input Validation
NetApp OnCommand Unified Manager for Linux versions 7.2 through 7.3 ship with the Java Management Extension Remote Method Invocation JMX RMI service bound to the network, and are susceptible to unauthenticated remote code execution...
PT-2018-16986
Name of the Vulnerable Software and Affected Versions NetApp OnCommand Unified Manager for Linux versions 7.2 through 7.3 Description The issue allows unauthorized local attackers to execute arbitrary code due to the Java Debug Wire Protocol JDWP being enabled. Recommendations For versions 7.2...
CVE-2018-5486: Missing Authentication for Critical Function
NetApp OnCommand Unified Manager for Linux versions 7.2 though 7.3 ship with the Java Debug Wire Protocol JDWP enabled which allows unauthorized local attackers to execute arbitrary code...
kernel: v4l2: disabled memory access protection mechanism allowing privilege escalation
A bug in the 32-bit compatibility layer of the ioctl handling code of the v4l2 video driver in the Linux kernel has been found. A memory protection mechanism ensuring that user-provided buffers always point to a userspace memory were disabled, allowing destination address to be in a kernel space...
CVE-2018-3689: Undefined Security Weakness
AESM daemon in Intel Software Guard Extensions Platform Software Component for Linux before 2.1.102 can effectively be disabled by a local attacker creating a denial of services like remote attestation provided by the AESM...
CVE-2018-1427: Improper Restriction of Operations within the Bounds of a Memory Buffer
IBM GSKit IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1 contains several environment variables that a local attacker could overflow and cause a denial of service. IBM X-Force ID: 139072...
PT-2018-5982
Name of the Vulnerable Software and Affected Versions: IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server versions 9.7, 10.1, 10.5, and 11.1 Description: The issue is related to the use of weaker than expected cryptographic algorithms, which could allow an attacker to decrypt highly...
Microsoft Windows Subsystem for Linux - execve() Local Privilege Escalation
Microsoft Windows Subsystem for Linux - execve Local Privilege Escalation define GNUSOURCE include include include include include include include include include include include include include include include define RINGSIZE 0x2000000 define PIPESIZE 0xb8 define PTRSIZE 0x8 define STRHDRSIZE 0x...
Microsoft Windows Subsystem For Linux Local Privilege Escalation
define GNUSOURCE include include include include include include include include include include include include include include include define RINGSIZE 0x2000000 define PIPESIZE 0xb8 define PTRSIZE 0x8 define STRHDRSIZE 0x18 define LEAKOFFSET 0x68 define SHELLCODEOFFSET 0x200 define...
Microsoft Windows Subsystem for Linux - 'execve()' Local Privilege Escalation
define GNUSOURCE include include include include include include include include include include include include include include include define RINGSIZE 0x2000000 define PIPESIZE 0xb8 define PTRSIZE 0x8 define STRHDRSIZE 0x18 define LEAKOFFSET 0x68 define SHELLCODEOFFSET 0x200 define...
January 3, 2018âKB4056892 (OS Build 16299.192)
None None...
Microsoft Windows Subsystem for Linux Elevation of Privilege Vulnerability (CNVD-2018-00519)
Microsoft Windows 10 and Windows Server Version 1709 are both products of Microsoft Corporation.Microsoft Windows 10 is a cross-platform operating system for PCs and laptops, tablets, and cell phones.Windows Server Version 1709 is a server operating system. Microsoft Windows 10 is a cross-platfor...