CVE-2017-7875

In wallpaper.c in feh before v2.18.3, if a malicious client pretends to be the E17 window manager, it is possible to trigger an out-of-boundary heap write while receiving an IPC message. An integer overflow leads to a buffer overflow and/or a double free...

CVE-2017-7875

CVE-2017-7875 affects feh (wallpaper.c). A malicious IPC message spoofing the E17 window manager can trigger an out-of-bounds heap write due to an integer overflow, leading to a buffer overflow and/or double free. The issue is triggered by certain IPC interactions and is associated with versions ...

CVE-2017-7875: Out-of-bounds Write

In wallpaper.c in feh before v2.18.3, if a malicious client pretends to be the E17 window manager, it is possible to trigger an out-of-boundary heap write while receiving an IPC message. An integer overflow leads to a buffer overflow and/or a double free...

PT-2017-17966

Name of the Vulnerable Software and Affected Versions feh versions prior to 2.18.3 Description The issue arises from an integer overflow in the wallpaper.c file of feh, which can lead to a buffer overflow and/or a double free when receiving an IPC message from a malicious client pretending to be...

CVE-2016-5870

The msmipcrouterclose function in net/ipcrouter/ipcroutersocket.c in the ipcrouter component for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allow attackers to cause a denial of service NULL pointer dereference or...

Remote Code Execution (RCE)

nightmare is vulnerable to a remote code execution RCE vulnerability. This is because the nightmare object is set on the window object. This gives access to the core electron features to every website. This could be leveraged to perform man-in-the-middle MitM attacks and RCE attacks through its I...

Solare Datensysteme Solar-Log Devices 2.8.4-56 / 3.5.2-85 - Multiple Vulnerabilities

Solare Datensysteme GmbH Solar-Log versions 250, 300, 500, 800e, 1000, 1000 PM+, 1200, and 2000 suffer from cross site request forgery, cross site scripting, file upload, information disclosure, and denial of service vulnerabilities title: Multiple vulnerabilities product: Solare Datensysteme Gmb...

Solare Datensysteme Solar-Log Devices 2.8.4-563.5.2-85 - Multiple Vulnerabilities

Solare Datensysteme Solar-Log Devices 2.8.4-563.5.2-85 - Multiple Vulnerabilities SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple vulnerabilities product: Solare Datensysteme GmbH Solar-Log...

CVE-2017-0050: Undefined Security Weakness

The kernel API in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7; Windows 8; Windows 10 Gold, 1511, and 1607; Windows RT 8.1; Windows Server 2012 Gold and R2; and Windows Server 2016 does not properly enforce permissions, which allows local users to spoof processes,...

kernel security, bug fix, and enhancement update

3.10.0-514.6.10.0.1.el7 - ipc ipc/sem.c: bugfix for semctl,,GETZCNT Manfred Spraul orabug 22552377 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey bug 24817676...

Linux kernel local security bypass vulnerability (CNVD-2017-02602)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A security vulnerability exists in the 'doshmat' function in the ipc/shm.c file in Linux kernel versions 4.9.12 and earlier. A local attacker can exploit this vulnerability to...

DEBIAN-CVE-2017-5669

The doshmat function in ipc/shm.c in the Linux kernel through 4.9.12 does not restrict the address calculated by a certain rounding operation, which allows local users to map page zero, and consequently bypass a protection mechanism that exists for the mmap system call, by making crafted shmget a...

CVE-2017-5669

The doshmat function in ipc/shm.c in the Linux kernel through 4.9.12 does not restrict the address calculated by a certain rounding operation, which allows local users to map page zero, and consequently bypass a protection mechanism that exists for the mmap system call, by making crafted shmget a...

CVE-2017-5669: Undefined Security Weakness

The doshmat function in ipc/shm.c in the Linux kernel through 4.9.12 does not restrict the address calculated by a certain rounding operation, which allows local users to map page zero, and consequently bypass a protection mechanism that exists for the mmap system call, by making crafted shmget a...

PT-2017-4169

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.9.12 Description The issue is related to the do shmat function in ipc/shm.c in the Linux kernel, which does not properly restrict the address calculated by a certain rounding operation. This allows local users ...

Windows Botnet Spreading Mirai Variant

A Chinese-speaking attacker is spreading a Mirai variant from a repurposed Windows-based botnet. Researchers at Kaspersky Lab published a report today, and said the code was written by an experienced developer who also built in the capability to spread the IoT malware to Linux machines under...

Cimetrics BACstac Routing Service 6.2f Local Privilege Escalation

Cimetrics BACstac Routing Service 6.2f Local Privilege Escalation Vendor: Cimetrics, Inc. Product web page: https://www.cimetrics.com Affected version: 6.2f Summary: BACstac belongs to product BACstacTM Networking Software and was developed by company Cimetrics Inc. Cimetrics is excited to announ...

Cimetrics BACstac 6.2f - Privilege Escalation Vulnerability

Exploit for windows platform in category local exploits Cimetrics BACstac Routing Service 6.2f Local Privilege Escalation Vendor: Cimetrics, Inc. Product web page: https://www.cimetrics.com Affected version: 6.2f Summary: BACstac belongs to product BACstacTM Networking Software and was developed ...

Cimetrics BACstac 6.2f - Local Privilege Escalation

Cimetrics BACstac 6.2f - Local Privilege Escalation Cimetrics BACstac Routing Service 6.2f Local Privilege Escalation Vendor: Cimetrics, Inc. Product web page: https://www.cimetrics.com Affected version: 6.2f Summary: BACstac belongs to product BACstacTM Networking Software and was developed by...

Cimetrics BACstac Routing Service 6.2f Local Privilege Escalation

Summary BACstac belongs to product BACstacTM Networking Software and was developed by company Cimetrics Inc. Cimetrics is excited to announce a new version of our industry-leading BACnet protocol stack: BACstac 6.8. The Cimetrics BACstac saves man-years of development when your company needs to...