CVE-2017-9076: Undefined Security Weakness

The dccpv6requestrecvsock function in net/dccp/ipv6.c in the Linux kernel through 4.11.1 mishandles inheritance, which allows local users to cause a denial of service or possibly have unspecified other impact via crafted system calls, a related issue to CVE-2017-8890...

CVE-2017-8934

PCManFM 1.2.5 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service application unavailability...

CVE-2017-8933: Improper Input Validation

Libmenu-cache 1.0.2 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service menu unavailability...

Linux kernel Local Denial of Service Vulnerability (CVE-2017-7308 )

The packetsetring function in net/packet/afpacket.c in the Linux kernel through 4.10.6 does not properly validate certain block-size data, which allows local users to cause a denial of service integer signedness error and out-of-bounds write, or gain privileges if the CAPNETRAW capability is held...

PT-2017-17906

Name of the Vulnerable Software and Affected Versions PrivateTunnel versions 2.7 through 2.8 Description The issue is related to a buffer overflow that can be triggered by a long password, allowing local attackers to cause a denial of service or possibly have other unspecified impacts...

PT-2017-18885

Name of the Vulnerable Software and Affected Versions QEMU versions affected versions not specified ALT Linux affected versions not specified Description A memory leak issue exists in QEMU when built with USB EHCI Emulation support. This issue allows local guest OS privileged users to cause a...

CVE-2017-7849: Incorrect Permission Assignment for Critical Resource

Nessus 6.10.x before 6.10.5 was found to be vulnerable to a local denial of service condition due to insecure permissions when running in Agent Mode...

CVE-2017-6440: Improper Input Validation

The parsedatanode function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service memory allocation error via a crafted plist file...

Livebox 3 Sagemcom SG30_sip-fr-5.15.8.1 Denial Of Service

!/usr/bin/python Exploit Title: CVE-2017-6552 - Local DoS Buffer Overflow Livebox 3 Date: 09/03/2017 Exploit Author: Quentin Olagne Vendor Homepage: http://www.orange.fr/ Version: SG30sip-fr-5.15.8.1 Tested on: Livebox 3 - Sagemcom CVE : CVE-2017-6552 ''' Livebox router has its default IPv6 routi...

CVE-2016-6243: Improper Input Validation

thrsleep in kern/kernsynch.c in OpenBSD 5.8 and 5.9 allows local users to cause a denial of service kernel panic via a crafted value in the tsp parameter of the thrsleep system call...

PT-2017-1502

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description The issue is related to a memory leak in the virtio gpu resource attach backing function. This allows local guest OS users to cause a denial of service by consuming host memory via a large numbe...

PT-2017-1042

Name of the Vulnerable Software and Affected Versions Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0 Description The issue is related to insufficient access control in the Telephony service of the Android operating system. It may allow a remote attacker to cause a device to hang or reboot....

CVE-2016-4329: Improper Input Validation

A local denial of service vulnerability exists in window broadcast message handling functionality of Kaspersky Anti-Virus software. Sending certain unhandled window messages, an attacker can cause application termination and in the same way bypass KAV self-protection mechanism...

CVE-2016-6213: Uncontrolled Resource Consumption

fs/namespace.c in the Linux kernel before 4.9 does not restrict how many mounts may exist in a mount namespace, which allows local users to cause a denial of service memory consumption and deadlock via MSBIND mount system calls, as demonstrated by a loop that triggers exponential growth in the...

Linux Kernel Keyctl Null Pointer Dereference Vulnerability

A malicious interaction with the keyctl usermode interface allows an attacker to crash the kernel. Processing the attached certificate by the kernel leads to a kernel nullpointer dereference. This vulnerably can be triggered by any unprivileged user locally. Local DoS: Linux Kernel Nullpointer...

Linux Kernel 4.8.0-223.10.0-327 (Ubuntu 16.10 RedHat) - keyctl Null Pointer Dereference

Linux Kernel 4.8.0-223.10.0-327 Ubuntu 16.10 RedHat - keyctl Null Pointer Dereference / OS-S Security Advisory 2016-21 Local DoS: Linux Kernel Nullpointer Dereference via keyctl Date: October 31th, 2016 Authors: Sergej Schumilo, Ralf Spenneberg, Hendrik Schwartke CVE: Not yet assigned CVSS: 4.9...

CVE-2016-6136

Race condition in the auditlogsingleexecvearg function in kernel/auditsc.c in the Linux kernel through 4.7 allows local users to bypass intended character-set restrictions or disrupt system-call auditing by changing a certain string, aka a "double fetch" vulnerability...

CVE-2016-6213

It was found that in Linux kernel the mount table expands by a power-of-two with each bind mount command. If a system is configured to allow non-privileged user to do bind mounts, or allows to do so in a container or unprivileged mount namespace, then non-privileged user is able to cause a local...

Multiple Kernel Versions Null Pointer Dereference Local DoS

Binary data 802008.prm...

CVE-2011-5321: Undefined Security Weakness

The ttyopen function in drivers/tty/ttyio.c in the Linux kernel before 3.1.1 mishandles a driver-lookup failure, which allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact via crafted access to a device file under the...