3627 matches found
Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-5016-1)
The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5016-1 advisory. It was discovered that the virtual file system implementation in the Linux kernel contained an unsigned to signed integer conversion error. A local...
CVE-2021-33909
fs/seqfile.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, leading to an integer overflow, an Out-of-bounds Write, and escalation to root by an unprivileged user, aka CID-8cae8cd89f05...
CVE-2021-33909: Integer Overflow or Wraparound
fs/seqfile.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, leading to an integer overflow, an Out-of-bounds Write, and escalation to root by an unprivileged user, aka CID-8cae8cd89f05...
CVE-2021-34461
Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability...
CVE-2021-34461
Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability...
Privilege escalation
Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability...
CVE-2021-34461
CVE-2021-34461 is an elevation of privilege vulnerability in the Windows Container Isolation FS Filter Driver. The available connected materials identify the issue as a local privilege escalation within the FS filter component used for container isolation, enabling an attacker with local access t...
CVE-2021-34461: Improper Privilege Management
Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability...
Docker Engine before 1.6.1 uses weak permissions for (1) /proc/asound (2) /proc/timer_stats (3) /proc/latency_stats and (4) /proc/fs which allows local users to modify the host obtain sensitive information and perform protocol downgrade attacks via a crafted image.
...
USN-5010-1: QEMU vulnerabilities
Lei Sun discovered that QEMU incorrectly handled certain MMIO operations. An attacker inside the guest could possibly use this issue to cause QEMU to crash, resulting in a denial of service. CVE-2020-15469 Wenxiang Qian discovered that QEMU incorrectly handled certain ATAPI commands. An attacker...
CVE-2021-33779
Windows AD FS Security Feature Bypass Vulnerability...
Security feature bypass
Windows AD FS Security Feature Bypass Vulnerability...
CVE-2021-33779 Windows AD FS Security Feature Bypass Vulnerability
...
CVE-2021-33779: Undefined Security Weakness
Windows AD FS Security Feature Bypass Vulnerability...
Windows AD FS Security Feature Bypass Vulnerability
...
Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability
...
PT-2021-4120
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.13.4 Description The issue is related to a denial of service caused by an out-of-bounds read in the strlen function within the fs/nfsd/trace.h component of the Linux kernel. This can be exploited by remote...
PT-2021-28324
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-use-after-free READ 8 crash has been reported. The crash involves the functions tsk fs attr set run, fatfs make data runs, and tsk fs file attr...
Microsoft finds new NETGEAR firmware vulnerabilities that could lead to identity theft and full system compromise
The continuous improvement of security solutions has forced attackers to explore alternative ways to compromise systems. The rising number of firmware attacks and ransomware attacks via VPN devices and other internet-facing systems are examples of attacks initiated outside and below the operating...
CVE-2021-29157
Dovecot before 2.3.15 allows ../ Path Traversal. An attacker with access to the local filesystem can trick OAuth2 authentication into using an HS256 validation key from an attacker-controlled location. This occurs during use of local JWT validation with the posix fs driver...