5302 matches found
Design/Logic Flaw
The Gentoo init script for webfs uses world-readable permissions for /var/log/webfsd.log, which allows local users to have unspecified impact by reading the file...
CVE-2013-0347
The CVE-2013-0347 entry concerns the Gentoo init script for webfs, where /var/log/webfsd.log is world-readable. This permission setting allows local users to read the log file, with unspecified impact described in the public description. Connected sources (NVD, OSV, OSV UBUNTU/DEBIAN/UBUNTU entri...
CVE-2013-0347
The Gentoo init script for webfs uses world-readable permissions for /var/log/webfsd.log, which allows local users to have unspecified impact by reading the file...
CVE-2013-0347
The Gentoo init script for webfs uses world-readable permissions for /var/log/webfsd.log, which allows local users to have unspecified impact by reading the file...
PT-2014-8307 · Qemu +5 · Qemu +5
Name of the Vulnerable Software and Affected Versions: QEMU affected versions not specified Description: The issue allows remote attackers to execute arbitrary code via a crafted offset or length value in savevm data, specifically in the host from stream offset function in arch init.c when loadin...
kernel security and bug fix update
2.6.32-504.1.3 - Revert: net revert 'bridge: Set vlanfeatures to allow offloads on vlans' Vlad Yasevich 1144442 1121991 2.6.32-504.1.2 - x86 kvm: fix PIT timer race condition mguzik 1149592 1149593 CVE-2014-3611 - x86 kvm: vmx: handle invept and invvpid vm exits gracefull mguzik 1144826 1144837...
RHEL 6 : kernel (RHSA-2013:0662)
Updated kernel packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 6.3 Extended Update Support. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, whi...
Kernel: net: SCTP: fix a NULL pointer dereference during INIT collisions
A NULL pointer dereference flaw was found in the way the Linux kernel's Stream Control Transmission Protocol SCTP implementation handled simultaneous connections between the same hosts. A remote attacker could use this flaw to crash the system...
Kernel: net: SCTP: fix a NULL pointer dereference during INIT collisions
A NULL pointer dereference flaw was found in the way the Linux kernel's Stream Control Transmission Protocol SCTP implementation handled simultaneous connections between the same hosts. A remote attacker could use this flaw to crash the system...
Kernel: net: SCTP: fix a NULL pointer dereference during INIT collisions
A NULL pointer dereference flaw was found in the way the Linux kernel's Stream Control Transmission Protocol SCTP implementation handled simultaneous connections between the same hosts. A remote attacker could use this flaw to crash the system...
CVE-2013-6124
The CVE-2013-6124 entry describes a local privilege escalation in Code Aurora Forum (CAF) Android 4.1.x–4.4.x where Qualcomm Innovation Center (QuIC) init scripts allow a symlink attack to modify file metadata. Specifically, during device startup, init shell scripts run with root privileges and m...
PT-2018-3823 · Linux +5 · Linux Kernel +5
Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 3.16 Description: The issue is related to insecure privilege management in the inode init owner function of the Linux kernel. This allows an attacker to access confidential data, compromise its integrity, and cau...
kernel: net: ping: refcount issue in ping_init_sock() function
A use-after-free flaw was found in the way the pinginitsock function of the Linux kernel handled the groupinfo reference counter. A local, unprivileged user could use this flaw to crash the system or, potentially, escalate their privileges on the system...
USN-2319-2 openjdk-7 regression
USN-2319-1 fixed vulnerabilities in OpenJDK 7. Due to an upstream regression, verifying of the init method call would fail when it was done from inside a branch when stack frames are activated. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Several...
Kernel: net: SCTP: fix a NULL pointer dereference during INIT collisions
A NULL pointer dereference flaw was found in the way the Linux kernel's Stream Control Transmission Protocol SCTP implementation handled simultaneous connections between the same hosts. A remote attacker could use this flaw to crash the system...
CVE-2014-5077
The sctpassocupdate function in net/sctp/associola.c in the Linux kernel through 3.15.8, when SCTP authentication is enabled, allows remote attackers to cause a denial of service NULL pointer dereference and OOPS by starting to establish an association between two endpoints immediately after an...
kernel: net: ping: refcount issue in ping_init_sock() function
A use-after-free flaw was found in the way the pinginitsock function of the Linux kernel handled the groupinfo reference counter. A local, unprivileged user could use this flaw to crash the system or, potentially, escalate their privileges on the system...
Moderate: Red Hat Security Advisory: openstack-neutron security, bug fix, and enhancement update
Updated openstack-neutron packages that fix two security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux OpenStack Platform 4.0. The Red Hat Security Response Team has rated this update as having Moderate security impact. A Common Vulnerability...
GNU Emacs 22.1 Local Variable Handling Code Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26327/info Emacs is prone to a vulnerability that lets attackers execute arbitrary code. Due to a design error, the application ignores certain security settings and modifies local variables. By supplying a malicious file...
Linux Kernel <= 2.6.33.3 SCTP INIT Remote DoS
No description provided by source. From: http://jon.oberheide.org/files/sctp-boom.py !/usr/bin/env python ''' sctp-boom.py Linux Kernel = 2.6.33.3 SCTP INIT Remote DoS Jon Oberheide [email protected] http://jon.oberheide.org Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1173...