Lucene search
+L

669 matches found

UbuntuCve
UbuntuCve
•added 2015/10/15 12:00 a.m.•47 views

CVE-2015-7837

The Linux kernel, as used in Red Hat Enterprise Linux 7, kernel-rt, and Enterprise MRG 2 and when booted with UEFI Secure Boot enabled, allows local users to bypass intended securelevel/secureboot restrictions by leveraging improper handling of secureboot flag across kexec reboot...

5.5CVSS6.2AI score0.00405EPSS
SaveExploits0References5
OpenVAS
OpenVAS
•added 2015/10/08 12:00 a.m.•99 views

Oracle: Security Advisory (ELSA-2007-0993)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.1CVSS6.7AI score0.0324EPSS
SaveExploits6References2
OpenVAS
OpenVAS
•added 2015/10/06 12:00 a.m.•62 views

Oracle: Security Advisory (ELSA-2010-0046)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.2AI score0.11051EPSS
SaveExploits15References2
OpenVAS
OpenVAS
•added 2015/10/06 12:00 a.m.•39 views

Oracle: Security Advisory (ELSA-2011-1532)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.7CVSS5.4AI score0.00573EPSS
SaveExploits3References2
OpenVAS
OpenVAS
•added 2015/10/06 12:00 a.m.•61 views

Oracle: Security Advisory (ELSA-2010-0704)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS8.1AI score0.03533EPSS
SaveExploits4References2
OpenVAS
OpenVAS
•added 2015/10/06 12:00 a.m.•30 views

Oracle: Security Advisory (ELSA-2012-0152)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.7CVSS5.4AI score0.00573EPSS
SaveExploits3References2
OpenVAS
OpenVAS
•added 2015/10/06 12:00 a.m.•31 views

Oracle: Security Advisory (ELSA-2015-0986)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

3.6CVSS6.5AI score0.00355EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2015/06/09 12:00 a.m.•39 views

RedHat Update for kexec-tools RHSA-2015:0986-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

3.6CVSS6.5AI score0.00355EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2015/06/09 12:00 a.m.•54 views

CentOS Update for kexec-tools CESA-2015:0986 centos7

Check the version of kexec-tools SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882186";...

3.6CVSS5.1AI score0.00355EPSS
SaveExploits0References2
CNVD
CNVD
•added 2015/05/20 12:00 a.m.•13 views

Kexec-tools Temporary File Handling Vulnerability

kexec-tools is a package containing the /sbin/kexec binary and the accompanying userspace components that make up the kernel's kexec functionality. kexec-tools insecurely creates temporary files, allowing a local attacker to manipulate arbitrary files and elevate privileges by implementing symbol...

3.6CVSS6.8AI score0.00355EPSS
SaveExploits0References1
NVD
NVD
•added 2015/05/19 6:59 p.m.•25 views

CVE-2015-0267

The Red Hat module-setup.sh script for kexec-tools, as distributed in the kexec-tools before 2.0.7-19 packages in Red Hat Enterprise Linux, allows local users to write to arbitrary files via a symlink attack on a temporary file...

3.6CVSS6.2AI score0.00355EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2015/05/19 6:59 p.m.•21 views

CVE-2015-0267

The Red Hat module-setup.sh script for kexec-tools, as distributed in the kexec-tools before 2.0.7-19 packages in Red Hat Enterprise Linux, allows local users to write to arbitrary files via a symlink attack on a temporary file...

3.6CVSS6AI score0.00355EPSS
SaveExploits0References2
Prion
Prion
•added 2015/05/19 6:59 p.m.•19 views

Design/Logic Flaw

The Red Hat module-setup.sh script for kexec-tools, as distributed in the kexec-tools before 2.0.7-19 packages in Red Hat Enterprise Linux, allows local users to write to arbitrary files via a symlink attack on a temporary file...

3.6CVSS6.6AI score0.00355EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2015/05/19 6:00 p.m.•48 views

CVE-2015-0267

The Red Hat module-setup.sh script for kexec-tools, as distributed in the kexec-tools before 2.0.7-19 packages in Red Hat Enterprise Linux, allows local users to write to arbitrary files via a symlink attack on a temporary file...

6AI score0.00355EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2015/05/19 6:00 p.m.•45 views

CVE-2015-0267

The Red Hat module-setup.sh script for kexec-tools, as distributed in the kexec-tools before 2.0.7-19 packages in Red Hat Enterprise Linux, allows local users to write to arbitrary files via a symlink attack on a temporary file...

3.6CVSS6.1AI score0.00355EPSS
SaveExploits0
CVE
CVE
•added 2015/05/19 6:00 p.m.•87 views

CVE-2015-0267

CVE-2015-0267 affects kexec-tools: the module-setup.sh script creates temporary files insecurely, enabling a local attacker to overwrite arbitrary files via a symlink attack. Documented impact: local privilege escalation on affected systems. Affected products/versions and patches cited in connect...

3.6CVSS6.1AI score0.00355EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
•added 2015/05/14 12:00 a.m.•23 views

Scientific Linux Security Update : kexec-tools on SL7.x x86_64 (20150512)

It was found that the module-setup.sh script provided by kexec-tools created temporary files in an insecure way. A malicious, local user could use this flaw to conduct a symbolic link attack, allowing them to overwrite the contents of arbitrary files. CVE-2015-0267 This update also fixes the...

3.6CVSS5.5AI score0.00355EPSS
SaveExploits0References2
Cent OS
Cent OS
•added 2015/05/13 1:01 a.m.•63 views

kexec security update

CentOS Errata and Security Advisory CESA-2015:0986 Updated kexec-tools packages that fix one security issue, one bug, and add one enhancement are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability...

3.6CVSS5.9AI score0.00355EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
•added 2015/05/13 12:00 a.m.•28 views

Oracle Linux 7 : kexec-tools (ELSA-2015-0986)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-0986 advisory. 2.0.7-19.0.1.el71.2 - kdumpctl: exclude defaulthugepagesz setting from kdump kernel cmdline Sriharsha Yadagudde Orabug: 19134999 - kdumpctl: verify if kernel...

3.6CVSS5.5AI score0.00355EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2015/05/13 12:00 a.m.•35 views

CentOS 7 : kexec-tools (CESA-2015:0986)

Updated kexec-tools packages that fix one security issue, one bug, and add one enhancement are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...

3.6CVSS5.6AI score0.00355EPSS
SaveExploits0References2
Rows per page
Query Builder