CVE-2018-18439

DENX U-Boot through 2018.09-rc1 has a remotely exploitable buffer overflow via a malicious TFTP server because TFTP traffic is mishandled. Also, local exploitation can occur via a crafted kernel image...

CVE-2018-18440

DENX U-Boot through 2018.09-rc1 has a locally exploitable buffer overflow via a crafted kernel image because filesystem loading is mishandled...

CVE-2018-18440

CVE-2018-18440 affects DENX U-Boot up to version 2018.09-rc1, which has a locally exploitable buffer overflow in the filesystem loading path when processing a crafted kernel image. The root issue is mishandling of filesystem loading in U-Boot, enabling a local attacker to exploit the overflow and...

CVE-2018-18440

DENX U-Boot through 2018.09-rc1 has a locally exploitable buffer overflow via a crafted kernel image because filesystem loading is mishandled...

PT-2018-14463 · Denx +1 · U-Boot +1

Name of the Vulnerable Software and Affected Versions: DENX U-Boot versions through 2018.09-rc1 Description: The issue is a buffer overflow that can be exploited remotely through a malicious TFTP server due to mishandled TFTP traffic. Additionally, local exploitation is possible via a crafted...

Security fix for the ALT Linux 8 package kernel-image-std-pae version 1:4.4.159-alt0.M80P.1

1:4.4.159-alt0.M80P.1 built Oct. 9, 2018 kernelbot in task 213838 Oct. 1, 2018 Kernel Bot - v4.4.159 Fixes: CVE-2018-14633...

EulerOS 2.0 SP2 : qemu-kvm (EulerOS-SA-2018-1313)

According to the versions of the qemu-kvm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - QEMU: slirp: heap buffer overflow while reassembling fragmented datagrams CVE-2018-11806 - QEMU: i386: multiboot OOB access while loading kern...

EulerOS 2.0 SP3 : qemu-kvm (EulerOS-SA-2018-1314)

According to the versions of the qemu-kvm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - QEMU: slirp: heap buffer overflow while reassembling fragmented datagrams CVE-2018-11806 - QEMU: i386: multiboot OOB access while loading kern...

Security fix for the ALT Linux 8 package kernel-image-std-pae version 1:4.4.156-alt0.M80P.1

Sept. 17, 2018 Kernel Bot 1:4.4.156-alt0.M80P.1 - v4.4.156 Fixes: CVE-2018-6554, CVE-2018-6555...

Security fix for the ALT Linux 8 package kernel-image-std-pae version 1:4.4.150-alt0.M80P.1

Aug. 21, 2018 Kernel Bot 1:4.4.150-alt0.M80P.1 - v4.4.150 Fixes: CVE-2018-9363...

Security fix for the ALT Linux 8 package kernel-image-std-pae version 1:4.4.140-alt0.M80P.1

1:4.4.140-alt0.M80P.1 built July 16, 2018 kernelbot in task 209821 July 11, 2018 Kernel Bot - v4.4.140 Fixes: CVE-2018-10876, CVE-2018-10877, CVE-2018-10881, CVE-2018-10882, CVE-2018-10883...

CVE-2018-5889

While processing a compressed kernel image, a buffer overflow can occur in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05...

Buffer overflow

While processing a compressed kernel image, a buffer overflow can occur in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05...

CVE-2018-5889

While processing a compressed kernel image, a buffer overflow can occur in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05...

Security fix for the ALT Linux 8 package kernel-image-std-pae version 1:4.4.138-alt0.M80P.1

June 19, 2018 Kernel Bot 1:4.4.138-alt0.M80P.1 - v4.4.138 Fixes: CVE-2018-10853...

Security fix for the ALT Linux 8 package kernel-image-std-pae version 1:4.4.134-alt0.M80P.1

May 30, 2018 Kernel Bot 1:4.4.134-alt0.M80P.1 - v4.4.134 Fixes: CVE-2018-6412...

QEMU: i386: multiboot OOB access while loading kernel image

Quick Emulator QEMU, compiled with the PC System Emulator with multiboot feature support, is vulnerable to an OOB r/w memory access issue. The issue could occur while loading a kernel image during the guest boot, if mhloadendaddr address is greater than the mhbssendaddr address. A user or process...

CVE-2018-8170

CVE-2018-8170 is a Windows kernel image elevation-of-privilege vulnerability affecting Windows 10 and Windows 10 Server builds. The issue arises from how the Windows kernel image handles objects in memory, enabling an attacker who can run a locally crafted application to execute code with elevate...

CVE-2018-8170

An elevation of privilege vulnerability exists in the way that the Windows kernel image handles objects in memory, aka "Windows Image Elevation of Privilege Vulnerability." This affects Windows 10, Windows 10 Servers...

Microsoft Windows Kernel Image CVE-2018-8170 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker can exploit this issue to execute arbitrary code in kernel mode with elevated privileges. Technologies Affected Microsoft Windows 10 version 1703 for 32-bit...