CVE-2015-4692: Undefined Security Weakness

The kvmapichasevents function in arch/x86/kvm/lapic.h in the Linux kernel through 4.1.3 allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact by leveraging /dev/kvm access for an ioctl call...

AVG Internet Security 2013.x < 2013.3495 / 2015.x < 2015.5557 Local Privilege Escalation

The remote Windows host has a version of AVG Internet Security installed that is 2013.x prior to 2013.3495 or 2015.x prior to 2015.5557. It is, therefore, affected by a local privilege escalation vulnerability due to a flaw in the TDI driver avgtdix.sys that occurs when handling 0x830020f8 IOCTL...

CVE-2015-4692

The kvmapichasevents function in arch/x86/kvm/lapic.h in the Linux kernel through 4.1.3 allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact by leveraging /dev/kvm access for an ioctl call...

PT-2015-6671

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 4.1.3 Description The issue allows local users to cause a denial of service, resulting in a system crash due to a NULL pointer dereference. This is achieved by leveraging access to /dev/kvm for an ioctl call,...

openSUSE Security Update : fuse (openSUSE-2015-401)

Update to version 2.9.4 - fix exec environment for mount and umount bsc931452, CVE-2015-3202 - properly restore the default signal handler - fix directory file handle passed toioctl method. - fix for uids/gids larger than 2147483647 - initialize stat buffer passed to getattr and fgetattr...

PT-2016-4995

Name of the Vulnerable Software and Affected Versions Linux kernel versions 3.x Description The issue is related to an integer signedness error in the MSM QDSP6 audio driver. This error can be exploited by attackers to gain privileges or cause a denial of service, resulting in memory corruption...

PT-2016-4994

Name of the Vulnerable Software and Affected Versions Linux kernel versions 3.x Description The issue allows attackers to cause a denial of service or possibly have other impact via a crafted application. This is achieved by making an ioctl call specifying many commands, which can lead to a buffe...

PT-2016-2703

Name of the Vulnerable Software and Affected Versions Linux kernel versions 3.x Description The issue is related to the sound/soc/msm/qdsp6v2/msm-audio-effects-q6-v2.c file in the MSM QDSP6 audio driver for the Linux kernel. It involves reading data beyond a specified buffer, which can be exploit...

PT-2016-3561

Name of the Vulnerable Software and Affected Versions Linux kernel versions 3.x Description The issue is related to multiple race conditions in the ADSPRPC driver, specifically in the drivers/char/adsprpc.c and drivers/char/adsprpc compat.c files. This can be exploited by attackers to cause a...

PT-2016-2705

Name of the Vulnerable Software and Affected Versions Linux kernel versions 3.x Description The issue is related to the TSC driver in the Linux kernel, specifically the drivers/media/platform/msm/broadcast/tsc.c file. It allows attackers to cause a denial of service or possibly have other impacts...

PT-2016-3503

Name of the Vulnerable Software and Affected Versions Linux kernel versions 3.x Description The issue concerns a function in the MSM-VFE31 driver that does not properly validate a certain id value. This allows attackers to potentially gain privileges or cause a denial of service, resulting in...

PonyOS 3.0 tty ioctl() Privilege Escalation

Exploit Title: PonyOS include include int main struct winsize ws; printf"+ PonyOS = 3.0 ioctl local root exploit\n"; memcpy&ws,"\x90\x90\x90\x90\x8b\x45\x08\x89",8; ioctl0, TIOCSWINSZ, &ws; ioctl0, TIOCGWINSZ, void 0x0010f101; printf"- patched syssetuid\n"; asm"movl $0x18,%eax"; asm"xorl...

Linux Kernel (PonyOS 3.0) - TTY ioctl() Local Privilege Escalation

Linux Kernel PonyOS 3.0 - TTY ioctl Local Privilege Escalation / Exploit Title: PonyOS include include int main struct winsize ws; printf"+ PonyOS = 3.0 ioctl local root exploit\n"; memcpy&ws,"\x90\x90\x90\x90\x8b\x45\x08\x89",8; ioctl0, TIOCSWINSZ, &ws; ioctl0, TIOCGWINSZ, void 0x0010f101;...

Linux Kernel (PonyOS 3.0) - TTY 'ioctl()' Local Privilege Escalation

/ Exploit Title: PonyOS include include int main struct winsize ws; printf"+ PonyOS = 3.0 ioctl local root exploit\n"; memcpy&ws,"\x90\x90\x90\x90\x8b\x45\x08\x89",8; ioctl0, TIOCSWINSZ, &ws; ioctl0, TIOCGWINSZ, void 0x0010f101; printf"- patched syssetuid\n"; asm"movl $0x18,%eax"; asm"xorl...

Windows - CNG.SYS Kernel Security Feature Bypass PoC (MS15-052)

Exploit for windows platform in category local exploits // Source: http://www.binvul.com/viewthread.php?tid=508 // Source: https://twitter.com/NTarakanov/status/598370525132423168 include include include pragma commentlib, "ntdll.lib" int mainint argc, CHAR argv typedef NTSTATUS stdcall...

CVE-2015-4036

Array index error in the tcmvhostmaketpg function in drivers/vhost/scsi.c in the Linux kernel before 4.0 might allow guest OS users to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted VHOSTSCSISETENDPOINT ioctl call. NOTE: the affected function w...

kernel security and bug fix update

2.6.32-504.16.2 - infiniband core: Prevent integer overflow in ibumemget address arithmetic Doug Ledford 1181173 1179327 CVE-2014-8159 2.6.32-504.16.1 - fs gfs2: Move gfs2filesplicewrite outside of ifdef Robert S Peterson 1198329 1193559 - security keys: close race between key lookup and freeing...

Memory corruption

The mmfslinux kernel module in IBM General Parallel File System GPFS 3.4 before 3.4.0.32, 3.5 before 3.5.0.24, and 4.1 before 4.1.0.7 allows local users to cause a denial of service memory corruption via unspecified character-device ioctl calls...

PT-2015-4522

Name of the Vulnerable Software and Affected Versions IBM General Parallel File System GPFS versions 3.4 before 3.4.0.32 IBM General Parallel File System GPFS versions 3.5 before 3.5.0.24 IBM General Parallel File System GPFS versions 4.1 before 4.1.0.7 Description The issue allows local users to...

CVE-2015-0199: Undefined Security Weakness

The mmfslinux kernel module in IBM General Parallel File System GPFS 3.4 before 3.4.0.32, 3.5 before 3.5.0.24, and 4.1 before 4.1.0.7 allows local users to cause a denial of service memory corruption via unspecified character-device ioctl calls...