728 matches found
RHEL 6 : kernel (RHSA-2018:2791)
An update for kernel is now available for Red Hat Enterprise Linux 6.4 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
CVE-2018-15858
Unchecked NULL pointer usage when handling invalid aliases in CopyKeyAliasesToKeymap in xkbcomp/keycodes.c in xkbcommon before 0.8.1 could be used by local attackers to crash NULL pointer dereference the xkbcommon parser by supplying a crafted keymap file...
CVE-2018-15863
Unchecked NULL pointer usage in ResolveStateAndPredicate in xkbcomp/compat.c in xkbcommon before 0.8.2 could be used by local attackers to crash NULL pointer dereference the xkbcommon parser by supplying a crafted keymap file with a no-op modmask expression...
PT-2018-12714
Name of the Vulnerable Software and Affected Versions OpenBSD versions 6.2 through 6.3 Description The issue is related to incorrect I/O port access control on the i386 architecture, which can cause a Local Denial of Service system crash due to the tss alloc function in sys/arch/i386/i386/gdt.c...
CVE-2018-1116
A flaw was found in polkit before version 0.116. The implementation of the polkitbackendinteractiveauthoritycheckauthorization function in polkitd allows to test for authentication and trigger authentication of unrelated processes owned by other users. This may result in a local DoS and informati...
CVE-2018-1116
A flaw was found in polkit before version 0.116. The implementation of the polkitbackendinteractiveauthoritycheckauthorization function in polkitd allows to test for authentication and trigger authentication of unrelated processes owned by other users. This may result in a local DoS and informati...
CVE-2018-1116
CVE-2018-1116 describes a flaw in polkit prior to version 0.116 where polkitd’s polkit_backend_interactive_authority_check_authorization may cause testing authentication and triggering authentication of unrelated processes owned by other users. This can lead to a local DoS and information disclos...
CVE-2018-1116: Improper Authorization
A flaw was found in polkit before version 0.116. The implementation of the polkitbackendinteractiveauthoritycheckauthorization function in polkitd allows to test for authentication and trigger authentication of unrelated processes owned by other users. This may result in a local DoS and informati...
CVE-2018-12896: Integer Overflow or Wraparound
An issue was discovered in the Linux kernel through 4.17.3. An Integer Overflow in kernel/time/posix-timers.c in the POSIX timer code is caused by the way the overrun accounting works. Depending on interval and expiry time values, the overrun can be larger than INTMAX, but the accounting is int...
PT-2018-3772
Name of the Vulnerable Software and Affected Versions beep version 1.3 and up Description The issue is related to an External Control of File Name or Path vulnerability in the --device option of the beep utility. This can result in a Local Denial of Service DoS attack, where an unprivileged user...
CVE-2018-12633: Concurrent Execution using Shared Resource with Improper Synchronization
An issue was discovered in the Linux kernel through 4.17.2. vbgmiscdeviceioctl in drivers/virt/vboxguest/vboxguestlinux.c reads the same user data twice with copyfromuser. The header part of the user data is double-fetched, and a malicious user thread can tamper with the critical variables...
CVE-2016-10723: Undefined Security Weakness
An issue was discovered in the Linux kernel through 4.17.2. Since the page allocator does not yield CPU resources to the owner of the oomlock mutex, a local unprivileged user can trivially lock up the system forever by wasting CPU resources from the page allocator e.g., via concurrent page fault...
CVE-2018-9042: Improper Input Validation
In Advanced SystemCare Ultimate 11.0.1.58, the driver file Monitorwin10x64.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c402000...
CVE-2011-3477: Improper Input Validation
GEAR Software CD DVD Filter driver aka GEARAspiWDM.sys, as used in Symantec Backup Exec System Recovery 8.5 and BESR 2010, Symantec System Recovery 2011, Norton 360, and Norton Ghost, allows local users to cause a denial of service system crash via unspecified vectors...
CVE-2017-15127: Improper Cleanup on Thrown Exception
A flaw was found in the hugetlbmcopyatomicpte function in mm/hugetlb.c in the Linux kernel before 4.13. A superfluous implicit page unlock for VMSHARED hugetlbfs mapping could trigger a local denial of service BUG...
VMware Workstation 12.x < 12.5.8 Multiple Vulnerabilities (VMSA-2017-0018)
The version of VMware Workstation installed on the remote Windows host is 12.x prior to 12.5.8. It is, therefore, affected by multiple vulnerabilities including arbitrary code execution and a local DoS. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid104853;...
SUSE-SU-2017:2601-1 Security update for tcmu-runner
This update for tcmu-runner fixes the following issues: Security issues fixed: - CVE-2017-1000198: The glfs handler allowed local DoS via crafted CheckConfig strings bsc1049485 - CVE-2017-1000199: The qcow handler leaked information via the CheckConfig D-Bus method bsc1049491...
PT-2017-16826
Name of the Vulnerable Software and Affected Versions Sophos SurfRight HitmanPro versions prior to 3.7.20 Build 286 Description A kernel pool overflow in the driver hitmanpro37.sys allows local users to crash the OS via a malformed IOCTL call. Recommendations For versions prior to 3.7.20 Build 28...
CVE-2015-3170
selinux-policy when sysctl fs.protectedhardlinks are set to 0 allows local users to cause a denial of service SSH login prevention by creating a hardlink to /etc/passwd from a directory named .config, and updating selinux-policy...
PT-2017-2774
Name of the Vulnerable Software and Affected Versions Linux kernel versions 4.13-rc1 through 4.13-rc6 Description The issue is related to a NULL pointer dereference in the Linux kernel, specifically in the net/ipv4/route.c file. This allows local users to cause a denial of service or possibly hav...