CVE-2016-1233: Undefined Security Weakness

An unspecified udev rule in the Debian fuse package in jessie before 2.9.3-15+deb8u2, in stretch before 2.9.5-1, and in sid before 2.9.5-1 sets world-writable permissions for the /dev/cuse character device, which allows local users to gain privileges via a character device in /dev, related to an...

Linux Kernel prima WLAN Driver Heap Overflow

/ Coder: Shawn the R0ck, [email protected] Co-worker: Pray3r, [email protected] Compile: arm-linux-androideabi-gcc wextpoc.c --sysroot=$SYSROOT -pie ./a.out wlan0 Boom......shit happens as always;- / include include include include include include include include typedef unsigned char vU8t; defin...

PT-2016-3438

Name of the Vulnerable Software and Affected Versions pkexec versions affected versions not specified Description The issue allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer. This is related to the use of...

Huawei Mate 7 - devhifi_misc Privilege Escalation

Huawei Mate 7 - devhifimisc Privilege Escalation / HuaWei Mate7 hifi driver Poc Writen by pray3r, / include include include include include include define HIFIMISCIOCTLWRITEPARAMS IOWR'A', 0x75, struct misciosyncparam struct misciosyncparam void parain; unsigned int parasizein; void paraout;...

Huawei Mate 7 - '/dev/hifi_misc' Privilege Escalation

/ HuaWei Mate7 hifi driver Poc Writen by pray3r, / include include include include include include define HIFIMISCIOCTLWRITEPARAMS IOWR'A', 0x75, struct misciosyncparam struct misciosyncparam void parain; unsigned int parasizein; void paraout; unsigned int parasizeout; ; int mainint arg, char arg...

PT-2016-4658

Name of the Vulnerable Software and Affected Versions fuse versions prior to 2.9.3-15+deb8u2 in jessie fuse versions prior to 2.9.5-1 in stretch fuse versions prior to 2.9.5-1 in sid Description The issue is related to an unspecified udev rule in the Debian fuse package that sets world-writable...

PT-2016-4389

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.4.1 Description A race condition in the tty ioctl function in drivers/tty/tty io.c may allow local users to obtain sensitive information from kernel memory or cause a denial of service, such as a use-after-free...

PT-2016-5201

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.4.1 Description The issue allows local users to cause a denial of service deadlock via a crafted ioctl call due to the lack of prevention of recursive callback access in sound/core/hrtimer.c. This problem is no...

PT-2016-5199

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.4.1 Description The issue allows local users to cause a denial of service, resulting in a race condition, use-after-free, and system crash via a crafted ioctl call. This is due to a locking approach in...

PT-2016-5198

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.4.1 Description The issue is related to the use of an incorrect type of mutex in the sound/core/timer.c file, which can be exploited by local users to cause a denial of service. This can be achieved through a...

PT-2016-5196

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.4.1 Description The issue is related to a race condition in the queue delete function, which can be exploited by local users to cause a denial of service. This can result in a use-after-free condition and...

PT-2016-5195

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.4.1 Description The issue allows local users to cause a denial of service via a crafted ioctl call. This is due to the snd seq ioctl remove events function not verifying FIFO assignment before proceeding with...

PT-2016-5197

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.4.1 Description The issue is related to the snd timer interrupt function in sound/core/timer.c, which does not properly maintain a certain linked list. This allows local users to cause a denial of service,...

PT-2016-5200

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.4.1 Description The issue allows local users to cause a denial of service, resulting in a system crash, via a crafted ioctl call. This is related to the snd timer close and snd timer stop functions in the...

CVE-2015-6856

Dell Pre-Boot Authentication Driver PBADRV.sys 1.0.1.5 allows local users to write to arbitrary physical memory locations and gain privileges via a 0x0022201c IOCTL call...

Authentication flaw

Dell Pre-Boot Authentication Driver PBADRV.sys 1.0.1.5 allows local users to write to arbitrary physical memory locations and gain privileges via a 0x0022201c IOCTL call...

PT-2016-3725

Name of the Vulnerable Software and Affected Versions Dell Pre-Boot Authentication Driver version 1.0.1.5 Description The issue allows local users to gain privileges by writing to arbitrary physical memory locations. This is achieved via a specific IOCTL call, 0x0022201c. Recommendations For...

CVE-2015-6856: Undefined Security Weakness

Dell Pre-Boot Authentication Driver PBADRV.sys 1.0.1.5 allows local users to write to arbitrary physical memory locations and gain privileges via a 0x0022201c IOCTL call...

PT-2015-7559

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.4 Description The issue allows guest OS users to cause a denial of service, resulting in a divide-by-zero error and host OS crash, by setting a zero value. This is related to the kvm vm ioctl set pit and kvm vm...

DEBIAN-CVE-2015-7885

The dgncmgmtioctl function in drivers/staging/dgnc/dgncmgmt.c in the Linux kernel through 4.3.3 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel memory via a crafted application...