CVE-2016-4307

A denial of service vulnerability exists in the IOCTL handling functionality of Kaspersky Internet Security KL1 driver. A specially crafted IOCTL signal can cause an access violation in KL1 kernel driver resulting in local system denial of service. An attacker can run a program from user-mode to...

CVE-2016-4307

A denial of service vulnerability exists in the IOCTL handling functionality of Kaspersky Internet Security KL1 driver. A specially crafted IOCTL signal can cause an access violation in KL1 kernel driver resulting in local system denial of service. An attacker can run a program from user-mode to...

CVE-2016-9034

An exploitable buffer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system. The vulnerability is present in the Ioctl system call with the command HYPRLOFSADDENTRIES when dealing with 32-bit file systems. An attacker can craft an input that can cause a buffer overflow in th...

Bitdefender Antivirus Plus avc3 Kernel Driver Elevation of Privilege Vulnerability

Bitdefender Antivirus Plus is an antivirus plugin. Bitdefender Antivirus Plus suffers from a security vulnerability in the avc3 kernel driver handling IOCTL 0x002222f4. An attacker could exploit this vulnerability to execute arbitrary code on the target system...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the drivers/misc/qseecom.c file in Qualcomm’s Android operating system is related to the lack of checks for ioctl calls. Exploiting this vulnerability allows a remote attacker to increase their privileges through a specially created application...

CVE-2016-2064

sound/soc/msm/qdsp6v2/msm-audio-effects-q6-v2.c in the MSM QDSP6 audio driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allows attackers to cause a denial of service buffer over-read or possibly have unspecified...

The vulnerability of the Android operating system, which allows a hacker to bypass existing restrictions on system calls

The vulnerability of the socket subsystem in the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass existing restrictions on system calls by using a specially created application that generates ioctl calls...

kernel: infiniband: Unprivileged process can overwrite kernel memory using rdma_ucm.ko

A flaw was found in the way certain interfaces of the Linux kernel's Infiniband subsystem used write as bi-directional ioctl replacement, which could lead to insufficient memory security checks when being invoked using the splice system call. A local unprivileged user on a system with either...

UBUNTU-CVE-2016-2549

sound/core/hrtimer.c in the Linux kernel before 4.4.1 does not prevent recursive callback access, which allows local users to cause a denial of service deadlock via a crafted ioctl call...

NVIDIA Tegra Linux Kernel Competitive Conditions Vulnerability

The NVIDIA Tegra Linux Kernel is a Linux driver package for the Tegra mobile superchip from NVIDIA. A competitive condition vulnerability exists in NVIDIA Tegra Linux Kernel version 3.10 in NVMap. A local attacker can exploit this vulnerability to gain privileges via a specially crafted...

Arbitrary Write Privilege Elevation Vulnerability in Multiple BullGuard Products

BullGuard bdagent.sys is an antivirus program. An arbitrary write elevation of privilege vulnerability exists in several BullGuard products that allows local users to write data to arbitrary storage units and gain privileges via crafted 0x0022405c IOCTL calls...

Kernel: qeth: buffer overflow in snmp ioctl

Buffer overflow in the qethsnmpcommand function in drivers/s390/net/qethcoremain.c in the Linux kernel through 3.12.1 allows local users to cause a denial of service or possibly have unspecified other impact via an SNMP ioctl call with a length value that is incompatible with the command-buffer...

UBUNTU-CVE-2013-4738

Multiple stack-based buffer overflows in the MSM camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allow attackers to gain privileges via 1 a crafted VIDIOCMSMVPEDEQUEUESTREAMBUFFINFO ioctl call, related to...

Kernel: AACRAID Driver compat IOCTL missing capability check

The aaccompatioctl function in drivers/scsi/aacraid/linit.c in the Linux kernel before 3.11.8 does not require the CAPSYSRAWIO capability, which allows local users to bypass intended access restrictions via a crafted ioctl call...

DEBIAN-CVE-2013-6431

The fib6add function in net/ipv6/ip6fib.c in the Linux kernel before 3.11.5 does not properly implement error-code encoding, which allows local users to cause a denial of service NULL pointer dereference and system crash by leveraging the CAPNETADMIN capability for an IPv6 SIOCADDRT ioctl call...

DEBIAN-CVE-2013-6381

Buffer overflow in the qethsnmpcommand function in drivers/s390/net/qethcoremain.c in the Linux kernel through 3.12.1 allows local users to cause a denial of service or possibly have unspecified other impact via an SNMP ioctl call with a length value that is incompatible with the command-buffer...

kernel: block: default SCSI command filter does not accomodate commands overlap across device classes

block/scsiioctl.c in the Linux kernel through 3.8 does not properly consider the SCSI device class during authorization of SCSI commands, which allows local users to bypass intended access restrictions via an SGIO ioctl call that leverages overlapping opcodes...

kernel: possible privilege escalation via SG_IO ioctl

The Linux kernel before 3.2.2 does not properly restrict SGIO ioctl calls, which allows local users to bypass intended restrictions on disk read and write operations by sending a SCSI command to 1 a partition block device or 2 an LVM volume...

tty from web shell

эмулятор nc -l -s ADDR -p PORT ввод/вывод которого управляется через файлы in/out написан для получения tty из под веб-шелла tty from web shell с ним из веб шела можно юзать su, запускать эксплоиты и получать рута пример работы: Код: ./ttyServer.pl Server is ready at 127.0.0.1:43157 ./ttyClient.p...

kernel: agp: insufficient pg_start parameter checking in AGPIOC_BIND and AGPIOC_UNBIND ioctls

Integer overflow in the agpgenericinsertmemory function in drivers/char/agp/generic.c in the Linux kernel before 2.6.38.5 allows local users to gain privileges or cause a denial of service system crash via a crafted AGPIOCBIND agpioctl ioctl call...