1234 matches found
Wi-Fi Gets Simplified Version Numbers and Next Version is Wi-Fi 6
Do you know what is the latest version of Wi-Fi? It's okay if you don't know. It is — Wi-Fi is 802.11ac. I am sure many of us can't answer this question immediately because the Wi-Fi technology doesn't have a traditional format of version numbers… at least until yesterday. The Wi-Fi Alliance—the...
Microsoft Windows CVE-2018-8210 Arbitrary Code Execution Vulnerability
Description Microsoft Windows is prone to an arbitrary code-execution vulnerability. A local attacker can exploit this issue to execute arbitrary code in the context of the user running the affected application. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft...
Linux kernel denial of service vulnerability (CNVD-2017-37597)
The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A denial of service vulnerability exists in the KVM in Linux kernel. An attacker can exploit this vulnerability to...
kernel: load_elf_ binary() does not take account of the need to allocate sufficient space for the entire binary
A flaw was found in the way the Linux kernel loaded ELF executables. Provided that an application was built as Position Independent Executable PIE, the loader could allow part of that application's data segment to map over the memory area reserved for its stack, potentially resulting in memory...
The vulnerability of the `megasas_mmio_write` function in the QEMU hardware emulation software allows a hacker to exert unpredictable effects.
The vulnerability of the megasasmmiowrite function in the QEMU hardware emulation software is caused by buffer overflow. Exploiting this vulnerability allows a remote attacker to exert unpredictable effects using unknown vectors...
kernel: race condition between direct and memory-mapped I/O in fs/xfs/xfs_aops.c
It was found that the Linux kernel can hit a BUGON statement in the xfsgetblocks in the fs/xfs/xfsaops.c because of a race condition between direct and memory-mapped I/O associated with a hole in a file that is handled with BUGON instead of an I/O failure. This allows a local unprivileged attacke...
CVE-2017-6745: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability in the cache server within Cisco Videoscape Distribution Suite VDS for Television 3.25ES1 could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on a targeted appliance. The vulnerability is due to excessive mapped connections exhausting the...
Cisco Videoscape Distribution Suite for Television Denial of Service Vulnerability
Cisco Videoscape Distribution Suite for Television is a television content distribution system. A denial of service vulnerability exists in Cisco Videoscape Distribution Suite for Television, which allows remote attackers to conduct denial of service attacks by submitting a large number of mapped...
kernel: race condition between direct and memory-mapped I/O in fs/xfs/xfs_aops.c
It was found that the Linux kernel can hit a BUGON statement in the xfsgetblocks in the fs/xfs/xfsaops.c because of a race condition between direct and memory-mapped I/O associated with a hole in a file that is handled with BUGON instead of an I/O failure. This allows a local unprivileged attacke...
UBUNTU-CVE-2017-11638
GraphicsMagick 1.3.26 has a segmentation violation in the WriteMAPImage function in coders/map.c when processing a non-colormapped image, a different vulnerability than CVE-2017-11642...
DEBIAN-CVE-2017-11642
GraphicsMagick 1.3.26 has a NULL pointer dereference in the WriteMAPImage function in coders/map.c when processing a non-colormapped image, a different vulnerability than CVE-2017-11638...
DEBIAN-CVE-2017-7493
Quick Emulator Qemu built with the VirtFS, host directory sharing via Plan 9 File System9pfs support, is vulnerable to an improper access control issue. It could occur while accessing virtfs metadata files in mapped-file security mode. A guest user could use this flaw to escalate their privileges...
CVE-2017-7493: Incorrect Permission Assignment for Critical Resource
Quick Emulator Qemu built with the VirtFS, host directory sharing via Plan 9 File System9pfs support, is vulnerable to an improper access control issue. It could occur while accessing virtfs metadata files in mapped-file security mode. A guest user could use this flaw to escalate their privileges...
PT-2017-17769
Name of the Vulnerable Software and Affected Versions Qemu affected versions not specified Description The issue is related to an improper access control problem in Qemu when built with VirtFS and 9pfs support. It occurs when accessing virtfs metadata files in mapped-file security mode, potential...
Linux Kernel SO_SNDBUFFORCE / SO_RCVBUFFORCE Local Privilege Escalation
// CAPNETADMIN - root LPE exploit for CVE-2016-9793 // No KASLR, SMEP or SMAP bypass included // Affected kernels: 3.11 - 4.8 // Tested in QEMU only // https://github.com/xairy/kernel-exploits/tree/master/CVE-2016-9793 // // Usage: // gcc -pthread exploit.c -o exploit // chown guest:guest exploit...
DEBIAN-CVE-2017-7995
Xen PV guest before Xen 4.3 checked access permissions to MMIO ranges only after accessing them, allowing host PCI device space memory reads, leading to information disclosure. This is an error in the getuser function. NOTE: the upstream Xen Project considers versions before 4.5.x to be EOL...
PT-2017-2888
Name of the Vulnerable Software and Affected Versions Cisco Videoscape Distribution Suite for Television version 3.25ES1 Description A vulnerability in the cache server could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on a targeted appliance. The issue is...
Google Android - Inter-Process munmap with User-Controlled Size in android.graphics.Bitmap
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=928 Bitmap objects can be passed between processes by flattening them to a Parcel in one process and un-flattening them in another. In order to conserve memory, there exists a code path which allows Bitmaps to be shared between...
ARM guests may induce host asynchronous abort
ISSUE DESCRIPTION Depending on how the hardware and firmware have been integrated, guest-triggered asynchronous aborts SError on ARMv8 may be received by the hypervisor. The current action is to crash the host. A guest might trigger an asynchronous abort when accessing memory mapped hardware in a...
