CVE-2022-1922

CVE-2022-1922 affects gstreamer-plugins-good (MKV demuxing via zlib). Affected component: matroskademux, specifically gst_matroska_decompress_data, where an integer overflow could lead to a segfault or a heap overwrite depending on libc/OS behavior. This is a potential local, low-complexity issue...

CVE-2022-1922

DOS / potential heap overwrite in mkv demuxing using zlib decompression. Integer overflow in matroskademux element in gstmatroskadecompressdata function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS...

CVE-2022-1922

DOS / potential heap overwrite in mkv demuxing using zlib decompression. Integer overflow in matroskademux element in gstmatroskadecompressdata function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS...

Dlinject - Inject A Shared Library (I.E. Arbitrary Code) Into A Live Linux Process, Without Ptrace

Inject a shared library i.e. arbitrary code into a live linux process, without ptrace. Inspired by Cexigua and linux-inject, among other things. Usage .. . | /| | || || / | .. / | | | | |/ \ | |/ / \ \ \ | \ | |/|| /| |\ \ | /| // | / /| / / /|| / source:...

PT-2022-30190

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description A potential issue exists related to a lock with buffer mutex and mmap lock. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior...

PT-2022-29881

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.16.18 through v5.16.19 Description A potential issue exists with the Advanced Linux Sound Architecture ALSA related to a lock with buffer mutex and mmap lock. The actual impact and attack plausibility have not yet been...

PT-2022-30405

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description A potential issue exists with the Advanced Linux Sound Architecture ALSA related to a lock with buffer mutex and mmap lock. The actual impact and attack plausibility have not yet been proven...

PT-2022-29577

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.17.1 through v5.17.2 Description A potential issue exists with the Advanced Linux Sound Architecture ALSA related to a lock with buffer mutex and mmap lock. The actual impact and attack plausibility have not yet been...

CVE-2021-39802

In changepterange of mprotect.c , there is a possible way to make a shared mmap writable due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

CVE-2021-39802

In changepterange of mprotect.c , there is a possible way to make a shared mmap writable due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

Design/Logic Flaw

In changepterange of mprotect.c , there is a possible way to make a shared mmap writable due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

CVE-2021-39802

In changepterange of mprotect.c , there is a possible way to make a shared mmap writable due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

UBUNTU-CVE-2021-39802

In changepterange of mprotect.c , there is a possible way to make a shared mmap writable due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

CVE-2021-39802

In changepterange of mprotect.c , there is a possible way to make a shared mmap writable due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

PT-2022-7341 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel versions affected versions not specified Description: The issue is related to a permissions bypass in the change pte range function of mprotect.c, which could allow making a shared mmap writable. This could lead to local...

CVE-2021-39802: Incorrect Authorization

In changepterange of mprotect.c , there is a possible way to make a shared mmap writable due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

PT-2025-8200

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential deadlock issue was identified in the Linux kernel, specifically in the ALSA pcm component, between the buffer mutex and mmap lock. This issue could occur due to concurrent...

PT-2022-7512

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.17.0-rc7-syzkaller-02396-g0b3660695e80 Description The vulnerability is related to a slab-out-of-bounds access in the packet recvmsg function when an AF PACKET socket is using PACKET COPY THRESH and mmap...

Linux/x86_64 - sudo enumeration Shellcode (245 bytes)

sudo vulnerability enumeration shellcode / sudo vulnerability enumeration shellcode xordynamic - Linux/x8664 Author : Kağan Çapar contact: email protected shellcode len : 245 bytes compilation: gcc -fno-stack-protector -z execstack .c -o "disasssemble only main." 0000000000001179 : 1179: 55 push...

UBUNTU-CVE-2022-0175

A flaw was found in the VirGL virtual OpenGL renderer virglrenderer. The virgl did not properly initialize memory when allocating a host-backed memory resource. A malicious guest could use this flaw to mmap from the guest kernel and read this uninitialized memory from the host, possibly leading t...