6660 matches found
glusterfs: Unsanitized file names in debug/io-stats translator can allow remote attackers to execute arbitrary code
It was found that glusterfs server does not properly sanitize file paths in the "trusted.io-stats-dump" extended attribute which is used by the "debug/io-stats" translator. An attacker can use this flaw to create files and execute arbitrary code. To exploit this, the attacker would require...
[SECURITY] Fedora 28 Update: blktrace-1.2.0-6.fc28
blktrace is a block layer IO tracing mechanism which provides detailed information about request queue operations to user space. This package includes both blktrace, a utility which gathers event traces from the kerne l; and blkparse, a utility which formats trace data collected by blktrace. You...
[SECURITY] Fedora 27 Update: blktrace-1.2.0-6.fc27
blktrace is a block layer IO tracing mechanism which provides detailed information about request queue operations to user space. This package includes both blktrace, a utility which gathers event traces from the kerne l; and blkparse, a utility which formats trace data collected by blktrace. You...
Denial Of Service (DoS) Through Integer Underflow
libgdkpixbuf-2.0.so is vulnerable to denial of service DoS attacks. A malicious user can pass an ICO file to the loadresources function in io-icns.c to cause an integer underflow, crashing the application...
Remote Control Command Vulnerability in omron PLC SYSMAC CP1L
The omron PLC SYSMAC CP1L is a PLC from Omron. A remote control command vulnerability exists in the omron PLC SYSMAC CP1L, which can be exploited by an attacker to switch the PLC to monitor mode and then set and force writes to the PLC, as well as operate I/O points and auxiliary relays, and modi...
CVE-2018-5953
The swiotlbprintinfo function in lib/swiotlb.c in the Linux kernel through 4.14.14 allows local users to obtain sensitive address information by reading dmesg data from a "software IO TLB" printk call...
CVE-2018-5953
The swiotlbprintinfo function in lib/swiotlb.c in the Linux kernel through 4.14.14 allows local users to obtain sensitive address information by reading dmesg data from a "software IO TLB" printk call...
Design/Logic Flaw
The swiotlbprintinfo function in lib/swiotlb.c in the Linux kernel through 4.14.14 allows local users to obtain sensitive address information by reading dmesg data from a "software IO TLB" printk call...
CVE-2018-5953
CVE-2018-5953 concerns the Linux kernel vulnerability where the function swiotlb_print_info (lib/swiotlb.c) in kernels up to 4.14.14 can leak sensitive address information via a software IO TLB printk in dmesg, exploitable by a local attacker. The connected Nessus entries for Unity Linux 20.x (ke...
CVE-2018-5953
The swiotlbprintinfo function in lib/swiotlb.c in the Linux kernel through 4.14.14 allows local users to obtain sensitive address information by reading dmesg data from a "software IO TLB" printk call...
CVE-2018-5953
The swiotlbprintinfo function in lib/swiotlb.c in the Linux kernel through 4.14.14 allows local users to obtain sensitive address information by reading dmesg data from a "software IO TLB" printk call...
CVE-2017-2670
It was found in Undertow before 1.3.28 that with non-clean TCP close, the Websocket server gets into infinite loop on every IO thread, effectively causing DoS...
The vulnerability of the console-io command shell in Node.js, related to authentication process flaws, allows attackers to execute arbitrary code.
The vulnerability of the console-io command shell for Node.js is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by connecting to the console using websocket...
Heap Overflow
libgdkpixbuf-2.0.so is vulnerable to heap overflows. A malicious user can pass a jpeg file to the gdkpixbufjpegimageloadincrement function in io-jpeg.c, causing a heap overflow that can crash the application or cause arbitrary code to be executed...
CVE-2018-11451
A vulnerability has been identified in Firmware variant IEC 61850 for EN100 Ethernet module All versions V4.33, Firmware variant PROFINET IO for EN100 Ethernet module All versions, Firmware variant Modbus TCP for EN100 Ethernet module All versions, Firmware variant DNP3 TCP for EN100 Ethernet...
Design/Logic Flaw
A vulnerability has been identified in Firmware variant IEC 61850 for EN100 Ethernet module All versions V4.33, Firmware variant PROFINET IO for EN100 Ethernet module All versions, Firmware variant Modbus TCP for EN100 Ethernet module All versions, Firmware variant DNP3 TCP for EN100 Ethernet...
CVE-2018-11451
CVE-2018-11451 affects Siemens EN100 Ethernet Module and SIPROTEC 5 relays and is due to improper input validation. A specially crafted packet sent to port 102/tcp can cause a denial-of-service condition, affecting network availability. A manual restart is required to restore EN100 module functio...
CVE-2018-11452
CVE-2018-11452 affects Siemens EN100 Ethernet Module firmware variants (IEC 61850, PROFINET IO, Modbus TCP, DNP3 TCP, IEC104). The root cause is an improper handling of crafted packets to port 102/TCP that can trigger a Denial-of-Service condition when oscillographs are running, compromising avai...
