CVE-2015-7724

AMD fglrx-driver before 15.9 allows local users to gain privileges via a symlink attack. NOTE: This vulnerability exists due to an incomplete fix for CVE-2015-7723...

Code injection

The IPTables-Parse module before 1.6 for Perl allows local users to write to arbitrary files owned by the current user...

DEBIAN-CVE-2015-8326

The IPTables-Parse module before 1.6 for Perl allows local users to write to arbitrary files owned by the current user...

CVE-2015-8326

The IPTables-Parse module before 1.6 for Perl allows local users to write to arbitrary files owned by the current user...

CVE-2015-8326

The CVE-2015-8326 issue affects the IPTables-Parse Perl module (before 1.6). A local attacker can exploit insecure temporary file creation to write to arbitrary files owned by the current user via the module’s file handling. Root cause: predictable/unsafe temporary file handling enabling a symbol...

CVE-2015-8326

The IPTables-Parse module before 1.6 for Perl allows local users to write to arbitrary files owned by the current user...

CVE-2015-8326: Improper Link Resolution Before File Access

The IPTables-Parse module before 1.6 for Perl allows local users to write to arbitrary files owned by the current user...

Authentication flaw

MongoDB on Red Hat Satellite 6 allows local users to bypass authentication by logging in with an empty password and delete information which can cause a Denial of Service...

CVE-2016-9960

game-music-emu before 0.6.1 allows local users to cause a denial of service divide by zero and process crash...

DEBIAN-CVE-2016-9960

game-music-emu before 0.6.1 allows local users to cause a denial of service divide by zero and process crash...

CVE-2014-8180

The CVE concerns MongoDB within Red Hat Satellite 6. Affected component: MongoDB used by Satellite 6. Issue: local users can bypass authentication by logging in with an empty password, potentially deleting information and causing a Denial of Service. Root cause: authentication bypass in the Mongo...

CVE-2016-9960

game-music-emu before 0.6.1 allows local users to cause a denial of service divide by zero and process crash...

CVE-2007-6761

drivers/media/video/videobuf-vmalloc.c in the Linux kernel before 2.6.24 does not initialize videobufmapping data structures, which allows local users to trigger an incorrect count value and videobuf leak via unspecified vectors, a different vulnerability than CVE-2010-5321...

CVE-2017-9242

The ip6appenddata function in net/ipv6/ip6output.c in the Linux kernel through 4.11.3 is too late in checking whether an overwrite of an skb data structure may occur, which allows local users to cause a denial of service system crash via crafted system calls...

MGASA-2017-0147 Updated kernel-tmb packages fixes security vulnerabilities

This kernel-tmb update is based on upstream 4.4.68 and fixes at least the following security issues: fs/namespace.c in the Linux kernel before 4.9 does not restrict how many mounts may exist in a mount namespace, which allows local users to cause a denial of service memory consumption and deadloc...

MGASA-2017-0148 Updated kernel-linus packages fixes security vulnerabilities

This kernel-linus update is based on upstream 4.4.68 and fixes at least the following security issues: fs/namespace.c in the Linux kernel before 4.9 does not restrict how many mounts may exist in a mount namespace, which allows local users to cause a denial of service memory consumption and...

CVE-2017-0374

lib/Config/Model.pm in Config-Model aka libconfig-model-perl before 2.102 allows local users to gain privileges via a crafted model in the current working directory, related to use of . with the INC array...

CVE-2017-0374

lib/Config/Model.pm in Config-Model aka libconfig-model-perl before 2.102 allows local users to gain privileges via a crafted model in the current working directory, related to use of . with the INC array...

CVE-2017-0374

lib/Config/Model.pm in Config-Model aka libconfig-model-perl before 2.102 allows local users to gain privileges via a crafted model in the current working directory, related to use of . with the INC array...

CVE-2017-9211

The cryptoskcipherinittfm function in crypto/skcipher.c in the Linux kernel through 4.11.2 relies on a setkey function that lacks a key-size check, which allows local users to cause a denial of service NULL pointer dereference via a crafted application...