CVE-2018-15161

The libesedbkeyappenddata function in libesedbkey.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buffer over-read via a crafted esedb file. NOTE: the vendor has disputed this as described in the GitHub issue comments...

CVE-2018-15161

The libesedbkeyappenddata function in libesedbkey.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buffer over-read via a crafted esedb file. NOTE: the vendor has disputed this as described in the GitHub issue comments...

CVE-2018-15160

CVE-2018-15160 affects the libesedb project: the vulnerability is in the function libesedb_catalog_definition_read in libesedb_catalog_definition.c , which may cause a heap-based buffer over-read when processing a crafted esedb file. Affected versions are stated as before 2018-04-01. The vendor d...

CVE-2018-15158

The libesedbpagereadvalues function in libesedbpage.c in libesedb through 2018-04-01 allows remote attackers to cause a heap-based buffer over-read via a crafted esedb file. NOTE: the vendor has disputed this as described in the GitHub issue comments...

PT-2018-12913 · Libesedb · Libesedb

Name of the Vulnerable Software and Affected Versions: libesedb versions prior to 2018-04-01 Description: The issue allows remote attackers to cause a heap-based buffer over-read via a crafted esedb file. This is due to a problem in the libesedb page read values function in libesedb page.c. The...

PT-2018-12914 · Libesedb · Libesedb

Name of the Vulnerable Software and Affected Versions: libesedb versions prior to 2018-04-01 Description: The issue allows remote attackers to cause a heap-based buffer over-read via a crafted esedb file. This is due to a problem in the libesedb page read tags function in libesedb page.c. The...

PT-2018-12915 · Libesedb · Libesedb

Name of the Vulnerable Software and Affected Versions: libesedb versions through 2018-04-01 Description: The issue allows remote attackers to cause a heap-based buffer over-read via a crafted esedb file. This is due to a problem in the libesedb catalog definition read function in libesedb catalog...

PT-2018-12916 · Libesedb · Libesedb

Name of the Vulnerable Software and Affected Versions: libesedb versions prior to 2018-04-01 Description: The issue allows remote attackers to cause a heap-based buffer over-read via a crafted esedb file. This is due to a problem in the libesedb key append data function in libesedb key.c. The...

Automated Privilege Escalation: portia

Portia aims to automate a number of techniques commonly performed on internal network penetration tests after a low privileged account has been compromised Privilege escalation Lateral movement Convenience modules Portia is a genus of jumping spider that feeds on other spiders – known for their...