kernel: Null pointer dereference in drop_sysctl_table() in fs/proc/proc_sysctl.c

A flaw was found in the Linux kernel’s implementation of dropping sysctl entries. A local attacker who has access to load modules on the system can trigger a condition during module load failure and panic the system...

Important: Red Hat Bug Fix Advisory: Satellite 6.6.2 Async Bug Fix Update

Updated Satellite 6.6 packages that fix several bugs are now available for Red Hat Satellite. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other clien...

CVE-2013-4245

Orca has arbitrary code execution due to insecure Python module load...

CVE-2013-4245

Orca has arbitrary code execution due to insecure Python module load...

CVE-2013-4245

CVE-2013-4245 : The vulnerability affects the Orca application and is caused by insecure Python module load, resulting in arbitrary code execution. The NVD entry lists a local attack vector with medium complexity in CVSS v2, and high impact on confidentiality, integrity, and availability in CVSS ...

CVE-2018-21008

A use-after-free flaw was found in the Linux kernel's Redpine Signals driver implementation. A local attacker who is able force a module load rsisdio or usb plug/unplug could cause a system crash or memory corruption leading to privilege escalation. The highest threat from this vulnerability is t...

CVE-2011-1830

Ekiga versions before 3.3.0 attempted to load a module from /tmp/ekigatest.so...

CVE-2011-1830

Ekiga versions before 3.3.0 attempted to load a module from /tmp/ekigatest.so...

GoAhead Web Server 2.5 < 3.6.5 - HTTPd LD_PRELOAD Arbitrary Module Load Exploit

This Metasploit module triggers an arbitrary shared library load vulnerability in GoAhead web server versions between 2.5 and that have the CGI module enabled. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...

GoAhead Web Server 2.5 < 3.6.5 - HTTPd 'LD_PRELOAD' Arbitrary Module Load (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'GoAhead Web Server LDPRELOAD Arbitrary Module Load', 'Description' = %q This module triggers an arbitrary shared library load vulnerability in...

GoAhead Web Server LD_PRELOAD Arbitrary Module Load

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'GoAhead Web Server LDPRELOAD Arbitrary Module Load', 'Description' = %q This module triggers an arbitrary shared library load vulnerability in...

Samba is_known_pipename() Arbitrary Module Load Exploit

This Metasploit module triggers an arbitrary shared library load vulnerability in Samba versions 3.5.0 to 4.4.14, 4.5.10, and 4.6.4. This Metasploit module requires valid credentials, a writeable folder in an accessible share, and knowledge of the server-side path of the writeable folder. In some...

Fedora Update for perl-Module-Load-Conditional FEDORA-2016-dd20a4631a

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 23 : perl-Module-Load-Conditional (2016-0aa251bc9b)

This update adds an option 'FORCESAFEINC', which, if set it isn't by default, removes the current directory from the module load path so as to avoid loading code from a potentially unsafe place CVE-2016-1238. Note that Tenable Network Security has extracted the preceding description block directl...

Fedora 24 : perl-Module-Load-Conditional (2016-dd20a4631a)

This update adds an option 'FORCESAFEINC', which, if set it isn't by default, removes the current directory from the module load path so as to avoid loading code from a potentially unsafe place CVE-2016-1238. Note that Tenable Network Security has extracted the preceding description block directl...

[SECURITY] Fedora 23 Update: perl-Module-Load-Conditional-0.68-1.fc23

This module provides simple ways to query and possibly load any of the modu les you have installed on your system during run-time...

[SECURITY] Fedora 24 Update: perl-Module-Load-Conditional-0.68-1.fc24

This module provides simple ways to query and possibly load any of the modu les you have installed on your system during run-time...

Fedora 24 : xen (2016-cfea37952b)

cleaner way to set kernel module load list Unrestricted qemu logging XSA-180, CVE-2014-3672 1339125 Qemu: scsi: esp: OOB write while writing to 's-cmdbuf' in espregwrite CVE-2016-4439 1337502 Qemu: scsi: esp: OOB write while writing to 's-cmdbuf' in getcmd CVE-2016-4441 1337505 Qemu: scsi: megasa...

Fedora 22 : xen (2016-4edd58a3b5)

cleaner way to set kernel module load list Unrestricted qemu logging XSA-180, CVE-2014-3672 1339125 Qemu: scsi: esp: OOB write while writing to 's-cmdbuf' in espregwrite CVE-2016-4439 1337502 Qemu: scsi: esp: OOB write while writing to 's-cmdbuf' in getcmd CVE-2016-4441 1337505 Qemu: scsi: megasa...

The vulnerability of Google Chrome allows a perpetrator to load arbitrary modules or obtain confidential information.

The vulnerability of the createCustomType function in the extensions/renderer/resources/binding.js module of Google Chrome’s bindings extension is related to the lack of type checking for the modules. Exploiting this vulnerability could allow a malicious actor to load any modules remotely or obta...