Design/Logic Flaw

Incorrect access control in zam64.sys, zam32.sys in MalwareFox AntiMalware 2.74.0.150 allows a non-privileged process to open a handle to .\ZemanaAntiMalware, register itself with the driver by sending IOCTL 0x80002010, allocate executable memory using a flaw in IOCTL 0x80002040, install a hook...

CVE-2021-31727

MalwareFox AntiMalware 2.74.0.150 is affected by CVEs CVE-2021-31727 and CVE-2021-31728. The vulnerability stems from incorrect access control in zam64.sys and zam32.sys, enabling a non-privileged process to obtain a handle to \.\ZemanaAntiMalware and issue IOCTLs (notably 0x80002010, 0x80002014,...

CVE-2021-31727

Incorrect access control in zam64.sys, zam32.sys in MalwareFox AntiMalware 2.74.0.150 where IOCTL's 0x80002014, 0x80002018 expose unrestricted disk read/write capabilities respectively. A non-privileged process can open a handle to .\ZemanaAntiMalware, register with the driver using IOCTL...

CVE-2021-31727: Undefined Security Weakness

Incorrect access control in zam64.sys, zam32.sys in MalwareFox AntiMalware 2.74.0.150 where IOCTL's 0x80002014, 0x80002018 expose unrestricted disk read/write capabilities respectively. A non-privileged process can open a handle to .\ZemanaAntiMalware, register with the driver using IOCTL...

Dell DBUtil_2_3.sys IOCTL Memory Read / Write Exploit

The DBUtil23.sys driver distributed by Dell exposes an unprotected IOCTL interface that can be abused by an attacker to read and write kernel-mode memory. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...

McAfee Total Protection Elevation of Privilege Vulnerability (CNVD-2021-38090)

McAfee Total Protection MTP is a one-stop security suite. An elevation of privilege vulnerability exists in the File Lock component of McAfee Total Protection prior to version 16.0.32. An attacker could use this vulnerability to elevate privileges by manipulating symbolic links in the IOCTL...

CVE-2021-23872

Privilege Escalation vulnerability in the File Lock component of McAfee Total Protection MTP prior to 16.0.32 allows a local user to gain elevated privileges by manipulating a symbolic link in the IOCTL interface...

CVE-2021-23872: Improper Link Resolution Before File Access

Privilege Escalation vulnerability in the File Lock component of McAfee Total Protection MTP prior to 16.0.32 allows a local user to gain elevated privileges by manipulating a symbolic link in the IOCTL interface...

PT-2021-15576

Name of the Vulnerable Software and Affected Versions: McAfee Total Protection versions prior to 16.0.32 Description: The issue allows a local user to gain elevated privileges by manipulating a symbolic link in the IOCTL interface. This is related to the File Lock component. Recommendations: For...

PT-2024-11088 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the removal of ioctl handlers in the Linux kernel. Currently, ioctl handlers are removed twice, which leads to a double free and results in a kernel panic. This...

PT-2021-7811

Name of the Vulnerable Software and Affected Versions MalwareFox AntiMalware version 2.74.0.150 Description The issue is related to incorrect access control in the zam64.sys and zam32.sys drivers of MalwareFox AntiMalware, allowing a non-privileged process to escalate privileges. This can be...

NewStart CGSL CORE 5.04 / MAIN 5.04 : kernel Multiple Vulnerabilities (NS-SA-2021-0025)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has kernel packages installed that are affected by multiple vulnerabilities: - An issue was discovered in the Linux kernel before 5.2.3. There is a NULL pointer dereference caused by a malicious USB device in the...

CVE-2021-31916

An out-of-bounds OOB memory write flaw was found in listdevices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux kernel before 5.12. A bound check failure allows an attacker with special user CAPSYSADMIN privilege to gain access to out-of-bounds memory leading to a system...

CVE-2021-21551: Exposed IOCTL with Insufficient Access Control

Dell dbutil23.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or information disclosure. Local authenticated user access is required...

Dell DBUtil_2_3.sys IOCTL memmove

The DBUtil23.sys driver distributed by Dell exposes an unprotected IOCTL interface that can be abused by an attacker read and write kernel-mode memory. Module Options msf use exploit/windows/local/cve/202121551dbutilmemmove msf undefined202121551dbutilmemmove show actions ...actions... msf...

PT-2021-13606

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.3 Security Update 2021-002 Catalina Security Update 2021-003 Mojave Description: An out-of-bounds write issue was addressed with improved bounds checking, allowing a malicious application to potentially execute...

Microsoft Azure Sphere Kernel pwm_ioctl_apply_state kfree() code execution vulnerability

Summary A code execution vulnerability exists in the kernel pwmioctlapplystate functionality of Microsoft Azure Sphere 21.01. A specially crafted ioctl can lead to arbitrary kfree. An attacker can issue an ioctl to trigger this vulnerability. Tested Versions Microsoft Azure Sphere 21.01 Product...

Linux Kernel Resource Management Vulnerability

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel has a security vulnerability that can be exploited by an attacker who can force the use of a freed memory area via the noisy Linux kernel's ioctl to trigger a deni...

CVE-2021-30002

A flaw memory leak in the Linux kernel webcam device functionality was found in the way user calls ioctl that triggers videousercopy function. The highest threat from this vulnerability is to system availability. Mitigation To mitigate this issue, prevent the module v4l2-common from being loaded...

DEBIAN-CVE-2021-30002

An issue was discovered in the Linux kernel before 5.11.3 when a webcam device exists. videousercopy in drivers/media/v4l2-core/v4l2-ioctl.c has a memory leak for large arguments, aka CID-fb18802a338b...