Lucene search
+L

70 matches found

OSV
OSV
added 2020/05/09 9:15 p.m.4 views

UBUNTU-CVE-2019-20795

iproute2 before 5.1.0 has a use-after-free in getnetnsidfromname in ip/ipnetns.c. NOTE: security relevance may be limited to certain uses of setuid that, although not a default, are sometimes a configuration option offered to end users. Even when setuid is used, other factors such as C library...

4.4CVSS7.1AI score0.00403EPSS
SaveExploits0References4
CVE
CVE
added 2020/05/09 8:16 p.m.339 views

CVE-2019-20795

CVE-2019-20795 affects iproute2 up to version 5.0.x, with a use-after-free in get_netnsid_from_name() (ip/ipnetns.c). The issue is triggered in the net namespace handling and is the likely root cause of a local-use-after-free condition. The CVE describes the vulnerability as a use-after-free in g...

4.4CVSS4.8AI score0.00403EPSS
SaveExploits0References4Affected Software1
AlpineLinux
AlpineLinux
added 2020/05/09 8:16 p.m.79 views

CVE-2019-20795

iproute2 before 5.1.0 has a use-after-free in getnetnsidfromname in ip/ipnetns.c. NOTE: security relevance may be limited to certain uses of setuid that, although not a default, are sometimes a configuration option offered to end users. Even when setuid is used, other factors such as C library...

4.4CVSS5.1AI score0.00403EPSS
SaveExploits0
Cvelist
Cvelist
added 2020/05/09 8:16 p.m.39 views

CVE-2019-20795

iproute2 before 5.1.0 has a use-after-free in getnetnsidfromname in ip/ipnetns.c. NOTE: security relevance may be limited to certain uses of setuid that, although not a default, are sometimes a configuration option offered to end users. Even when setuid is used, other factors such as C library...

5AI score0.00403EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2020/05/09 8:16 p.m.71 views

CVE-2019-20795

iproute2 before 5.1.0 has a use-after-free in getnetnsidfromname in ip/ipnetns.c. NOTE: security relevance may be limited to certain uses of setuid that, although not a default, are sometimes a configuration option offered to end users. Even when setuid is used, other factors such as C library...

4.4CVSS5.1AI score0.00403EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2015/10/15 12:0 a.m.63 views

Mageia: Security Advisory (MGASA-2015-0386)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS7.1AI score0.00493EPSS
SaveExploits1References13
NVD
NVD
added 2014/02/15 2:57 p.m.10 views

CVE-2012-1088

iproute2 before 3.3.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file used by 1 configure or 2 examples/dhcp-client-script...

3.3CVSS6.1AI score0.00352EPSS
SaveExploits0References4
Prion
Prion
added 2014/02/15 2:57 p.m.13 views

Code injection

iproute2 before 3.3.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file used by 1 configure or 2 examples/dhcp-client-script...

3.3CVSS6.7AI score0.00352EPSS
SaveExploits0References4Affected Software1
UbuntuCve
UbuntuCve
added 2014/02/15 2:57 p.m.24 views

CVE-2012-1088

iproute2 before 3.3.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file used by 1 configure or 2 examples/dhcp-client-script...

3.3CVSS6AI score0.00352EPSS
SaveExploits0References1
OSV
OSV
added 2014/02/15 2:57 p.m.6 views

UBUNTU-CVE-2012-1088

iproute2 before 3.3.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file used by 1 configure or 2 examples/dhcp-client-script...

3.3CVSS5.9AI score0.00352EPSS
SaveExploits0References2
CVE
CVE
added 2014/02/15 11:0 a.m.68 views

CVE-2012-1088

CVE-2012-1088 affects iproute2 prior to 3.3.0. A local user can overwrite arbitrary files via a symlink attack on a temporary file used by either configure or the examples/dhcp-client-script. Root cause: insecure temporary file handling in iproute2. Impact: local privilege-concerned impact (file ...

3.3CVSS6.2AI score0.00352EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2014/02/15 11:0 a.m.28 views

CVE-2012-1088

iproute2 before 3.3.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file used by 1 configure or 2 examples/dhcp-client-script...

6AI score0.00352EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2014/02/15 12:0 a.m.6 views

PT-2014-2216 · Iproute2 · Iproute2

Name of the Vulnerable Software and Affected Versions: iproute2 versions prior to 3.3.0 Description: The issue allows local users to overwrite arbitrary files via a symlink attack on a temporary file used by certain scripts. This can be exploited through the configure script or the...

3.3CVSS6AI score0.00352EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2012/09/06 12:0 a.m.20 views

Mandriva Linux Security Advisory : iproute2 (MDVSA-2011:135)

It was discovered that the iproute2 package was not rebuilt against the latest iptables libraries. This may have security issues, as the current iproute2 should be calling an interface in the iptables libraries with incorrect arguments. The updated packages have been patched to correct this issue...

5.4AI score
SaveExploits0
Amazon
Amazon
added 2012/04/05 12:0 a.m.23 views

Low: iproute

Issue Overview: iproute2 before 3.3.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file used by 1 configure or 2 examples/dhcp-client-script. Affected Packages: iproute Issue Correction: Run yum update iproute or yum update --advisory ALAS-2012-64 to update...

3.3CVSS6.5AI score0.00352EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2010/04/30 12:0 a.m.10 views

Mandriva Update for iproute2 MDVA-2010:137 (iproute2)

Check for the Version of iproute2 OpenVAS Vulnerability Test Mandriva Update for iproute2 MDVA-2010:137 iproute2 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

7.4AI score
SaveExploits0References2
OpenVAS
OpenVAS
added 2010/04/30 12:0 a.m.18 views

Mandriva Update for iproute2 MDVA-2010:137 (iproute2)

Check for the Version of iproute2 OpenVAS Vulnerability Test Mandriva Update for iproute2 MDVA-2010:137 iproute2 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

SaveExploits0References2
OpenVAS
OpenVAS
added 2009/10/10 12:0 a.m.11 views

SLES9: Security update for iproute2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: iproute2 More details may also be found by searching for keyword 5012018 within the SuSE Enterprise Server 9 patch database linked in the references...

7.5AI score
SaveExploits0References1
OpenVAS
OpenVAS
added 2009/10/10 12:0 a.m.10 views

SLES9: Security update for iproute2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: iproute2 More details may also be found by searching for keyword 5012018 within the SuSE Enterprise Server 9 patch database at...

SaveExploits0
Tenable Nessus
Tenable Nessus
added 2009/04/27 12:0 a.m.11 views

MDVA-2009:054 : iproute2

iproute2 package shipped with Mandriva Linux 2009.0 installed outdated manual pages. This update installs correct manual pages instead. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Netwo...

6.9AI score
SaveExploits0References1
Rows per page
Query Builder