CVE-2014-0142

QEMU up to before 2.0.0 is affected by CVE-2014-0142. A local attacker can trigger a divide-by-zero in two code paths: the seek_to_sector driver (block/parallels.c) via a zero tracks value, or the bochs driver (block/bochs.c) via a zero extent_size, potentially crashing the guest. Remediation is ...

CVE-2014-0145

CVE-2014-0145 affects QEMU before 1.7.2 and 2.x before 2.0.0, allowing local users to crash or potentially execute code via buffer overflows in QCOW2 snapshot handling (qcow2_snapshot_load_tmp) or in DMG block handling. Exploitation requires local access; impact is a denial of service and possibl...

CVE-2015-2687

OpenStack Compute nova Icehouse, Juno and Havana when live migration fails allows local users to access VM volumes that they would normally not have permissions for...

PYSEC-2017-145

OpenStack Compute nova Icehouse, Juno and Havana when live migration fails allows local users to access VM volumes that they would normally not have permissions for...

CVE-2015-2291

1 IQVW32.sys before 1.3.1.0 and 2 IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted a 0x80862013, b 0x8086200B, c 0x8086200F, or d 0x80862007 IOCTL...

CVE-2017-5695

Data corruption vulnerability in firmware in Intel Solid-State Drive Consumer, Professional, Embedded, Data Center affected firmware versions LSBG200, LSF031C, LSF036C, LBF010C, LSBG100, LSF031C, LSF036C, LBF010C, LSF031P, LSF036P, LBF010P, LSF031P, LSF036P, LBF010P, LSMG200, LSF031E, LSF036E,...

SUSE SLES12 Security Update : kernel (SUSE-SU-2017:2099-1)

This update for the Linux Kernel 3.12.60-5257 fixes several issues. The following security bugs were fixed : - CVE-2017-7533: A bug in inotify code allowed local users to escalate privilege bsc1050751. - CVE-2017-7645: The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel allowed remot...

SUSE SLES12 Security Update : kernel (SUSE-SU-2017:2089-1)

This update for the Linux Kernel 3.12.74-606448 fixes several issues. The following security bugs were fixed : - CVE-2017-7533: A bug in inotify code allowed local users to escalate privilege bsc1050751. - CVE-2017-9242: The ip6appenddata function in net/ipv6/ip6output.c in the Linux kernel is to...

CVE-2015-2291

1 IQVW32.sys before 1.3.1.0 and 2 IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted a 0x80862013, b 0x8086200B, © 0x8086200F, or d 0x80862007 IOCTL...

CVE-2017-11741

HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion before 4.0.24 uses weak permissions for the sudo helper scripts, allows local users to execute arbitrary code with root privileges by overwriting one of the scripts...

CVE-2017-11741

CVE-2017-11741 affects HashiCorp Vagrant VMware Fusion plugin (vagrant-vmware-fusion) prior to 4.0.24. The issue stems from weak permissions granted to the plugin’s sudo helper scripts, enabling a local attacker to overwrite the scripts and execute arbitrary code with root privileges. Public refe...

CVE-2017-11741

HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion before 4.0.24 uses weak permissions for the sudo helper scripts, allows local users to execute arbitrary code with root privileges by overwriting one of the scripts...

SUSE-SU-2017:2102-1 Security update for Linux Kernel Live Patch 22 for SLE 12

This update for the Linux Kernel 3.12.61-5277 fixes several issues. The following security bugs were fixed: - CVE-2017-7533: A bug in inotify code allowed local users to escalate privilege bsc1050751. - CVE-2017-7645: The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel allowed remote...

SUSE-SU-2017:2093-1 Security update for Linux Kernel Live Patch 17 for SLE 12

This update for the Linux Kernel 3.12.60-5260 fixes several issues. The following security bugs were fixed: - CVE-2017-7533: A bug in inotify code allowed local users to escalate privilege bsc1050751. - CVE-2017-7645: The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel allowed remote...

SUSE-SU-2017:2088-1 Security update for Linux Kernel Live Patch 8 for SLE 12 SP1

This update for the Linux Kernel 3.12.62-60648 fixes several issues. The following security bugs were fixed: - CVE-2017-7533: A bug in inotify code allowed local users to escalate privilege bsc1050751. - CVE-2017-7645: The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel allowed remot...

EulerOS 2.0 SP1 : openssh (EulerOS-SA-2017-1138)

According to the version of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The shared memory manager associated with pre-authentication compression in sshd in OpenSSH before 7.4 does not ensure that a bounds check is...

CVE-2015-8621

t-coffee before 11.00.8cbe486-2 allows local users to write to /.tcoffee globally...

Code injection

t-coffee before 11.00.8cbe486-2 allows local users to write to /.tcoffee globally...

CVE-2015-8621

t-coffee before 11.00.8cbe486-2 allows local users to write to /.tcoffee globally...

SUSE-SU-2017:2061-1 Security update for Linux Kernel Live Patch 9 for SLE 12 SP1

This update for the Linux Kernel 3.12.67-606418 fixes several issues. The following security bugs were fixed: - CVE-2017-7533: A bug in inotify code allowed local users to escalate privilege bsc1050751. - CVE-2017-7645: The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel allowed remo...