EulerOS Virtualization 2.5.1 : kernel (EulerOS-SA-2018-1280)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In the Linux kernel before 4.13.5, a local user could create keyrings for other users via keyctl commands, setting unwanted...

Advantech WebAccess webvrpcs Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Advantech WebAccess. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the 0x2711 IOCTL in the webvrpcs process. The issue results...

MalwareFox AntiMalware v2.74.206.150 suffers from a denial of service vulnerability

MalwareFox AntiMalware is a suite of malware removal tools. The tool automatically detects and removes malware, cleans browsers, repairs files corrupted by rootkits and protects against virus infections in real time. A denial of service vulnerability exists in the zam32.sys driver in MalwareFox...

Design/Logic Flaw

An exploitable denial of service exists in the the Joyent SmartOS OS 20161110T013148Z Hyprlofs file system. The vulnerability is present in the Ioctl system call with the command HYPRLOFSADDENTRIES when used with a 32 bit model. An attacker can cause a buffer to be allocated and never freed. When...

CVE-2016-9040

An exploitable denial of service exists in the the Joyent SmartOS OS 20161110T013148Z Hyprlofs file system. The vulnerability is present in the Ioctl system call with the command HYPRLOFSADDENTRIES when used with a 32 bit model. An attacker can cause a buffer to be allocated and never freed. When...

CVE-2016-9040

An exploitable denial of service exists in the the Joyent SmartOS OS 20161110T013148Z Hyprlofs file system. The vulnerability is present in the Ioctl system call with the command HYPRLOFSADDENTRIES when used with a 32 bit model. An attacker can cause a buffer to be allocated and never freed. When...

PT-2018-5058 · Joyent · Smartos

Name of the Vulnerable Software and Affected Versions: Joyent SmartOS OS version 20161110T013148Z Description: The issue is related to a denial of service in the Hyprlofs file system. It is present in the Ioctl system call with the command HYPRLOFSADDENTRIES when used with a 32-bit model. An...

Denial of Service Vulnerability in Baidu Antivirus (CNVD-2018-19311)

Baidu Antivirus is a new professional antivirus software from Baidu, which combines Baidu's powerful cloud computing, massive data learning capabilities and Baidu's self-developed anti-virus engine expertise. Baidu antivirus software BdSanBbox.sys driver has a denial of service vulnerability, the...

Denial of Service Vulnerability in Baidu Antivirus (CNVD-2018-19312)

Baidu Antivirus is a new professional antivirus software from Baidu, which combines Baidu's powerful cloud computing, massive data learning capabilities and Baidu's self-developed anti-virus engine expertise. Baidu antivirus software BdSanBbox.sys driver has a denial of service vulnerability, the...

CVE-2018-10902

It was found that the raw midi kernel driver does not protect against concurrent access which leads to a double realloc double free in sndrawmidiinputparams and sndrawmidioutputstatus which are part of sndrawmidiioctl handler in rawmidi.c file. A malicious local attacker could possibly use this f...

DEBIAN-CVE-2018-10902

It was found that the raw midi kernel driver does not protect against concurrent access which leads to a double realloc double free in sndrawmidiinputparams and sndrawmidioutputstatus which are part of sndrawmidiioctl handler in rawmidi.c file. A malicious local attacker could possibly use this f...

UBUNTU-CVE-2018-10902

It was found that the raw midi kernel driver does not protect against concurrent access which leads to a double realloc double free in sndrawmidiinputparams and sndrawmidioutputstatus which are part of sndrawmidiioctl handler in rawmidi.c file. A malicious local attacker could possibly use this f...

PT-2019-4157

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.18.0 Linux kernel versions 5.x.x Description The issue is related to a flaw in the Linux kernel's Bluetooth implementation for UART, which can be exploited to cause a system crash. An attacker with local access...

kernel: race condition in snd_seq_write() may lead to UAF or OOB-access

ALSA sequencer core initializes the event pool on demand by invoking sndseqpoolinit when the first write happens and the pool is empty. A user can reset the pool size manually via ioctl concurrently, and this may lead to UAF or out-of-bound access...

Security update for the Linux Kernel (important)

The openSUSE Leap 15 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-13406: An integer overflow in the uvesafbsetcmap function could have result in local attackers being able to crash the kernel or potentially elevate privileges...

CVE-2018-10098

In MicroWorld eScan Internet Security Suite ISS for Business 14.0.1400.2029, the driver econceal.sys allows a non-privileged user to send a 0x830020E0 IOCTL request to \.\econceal to cause a denial of service BSOD...

CVE-2018-10098: Improper Restriction of Operations within the Bounds of a Memory Buffer

In MicroWorld eScan Internet Security Suite ISS for Business 14.0.1400.2029, the driver econceal.sys allows a non-privileged user to send a 0x830020E0 IOCTL request to \.\econceal to cause a denial of service BSOD...

PT-2018-9679

Name of the Vulnerable Software and Affected Versions: MicroWorld eScan Internet Security Suite ISS for Business version 14.0.1400.2029 Description: The issue allows a non-privileged user to cause a denial of service, resulting in a Blue Screen of Death BSOD, by sending a specific IOCTL request t...

ISS For Business 14.0.1400.2029 Blue Screen Of Death Vulnerability

In MicroWorld eScan Internet Security Suite ISS for Business version 14.0.1400.2029, the driver econceal.sys allows a non-privileged user to send a 0x830020E0 IOCTL request to \.\econceal to cause a denial of service BSOD. ===== Tempest Security Intelligence - ADV-24/2018 === eScan ISS for...

CVE-2018-6857

Sophos SafeGuard Enterprise before 8.00.5, SafeGuard Easy before 7.00.3, and SafeGuard LAN Crypt before 3.95.2 are vulnerable to Local Privilege Escalation via IOCTL 0x802022E0. By crafting an input buffer we can control the execution path to the point where the constant 0x12 will be written to a...