AZL-34610 CVE-2023-38546 affecting package cmake for versions less than 3.21.4-10

This flaw allows an attacker to insert cookies at will into a running program using libcurl, if the specific series of conditions are met. libcurl performs transfers. In its API, an application creates "easy handles" that are the individual handles for single transfers. libcurl provides a functio...

The vulnerability of the Named Pipe File System component of the Windows operating system, which allows a hacker to exploit their privileges

The vulnerability of the Named Pipe File System component in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

CLSA-2023-1697134400 Fix CVE(s): CVE-2023-3341

SECURITY UPDATE: A stack exhaustion flaw in control channel code may cause named to terminate unexpectedly - debian/patches/CVE-2023-3341.patch: Named and rndc do not need a lot of recursion so the depth is set to 10. - CVE-2023-3341...

CLSA-2023-1697134108 Fix CVE(s): CVE-2023-3341

SECURITY UPDATE: A stack exhaustion flaw in control channel code may cause named to terminate unexpectedly - debian/patches/CVE-2023-3341.patch: Named and rndc do not need a lot of recursion so the depth is set to 10. - CVE-2023-3341...

bind: stack exhaustion in control channel code may lead to DoS

A flaw was found in the Bind package. The code that processes control channel messages sent to named calls certain functions recursively during packet parsing. Recursion depth is only limited by the maximum accepted packet size. Depending on the environment, this may cause the packet-parsing code...

bind: stack exhaustion in control channel code may lead to DoS

A flaw was found in the Bind package. The code that processes control channel messages sent to named calls certain functions recursively during packet parsing. Recursion depth is only limited by the maximum accepted packet size. Depending on the environment, this may cause the packet-parsing code...

SUSE CVE-2023-38546

This flaw allows an attacker to insert cookies at will into a running program using libcurl, if the specific series of conditions are met. libcurl performs transfers. In its API, an application creates "easy handles" that are the individual handles for single transfers. libcurl provides a functio...

CVE-2023-36729

Named Pipe File System Elevation of Privilege Vulnerability...

CVE-2023-36729

Named Pipe File System Elevation of Privilege Vulnerability...

CVE-2023-36605

Windows Named Pipe Filesystem Elevation of Privilege Vulnerability...

Privilege escalation

Windows Named Pipe Filesystem Elevation of Privilege Vulnerability...

Privilege escalation

Named Pipe File System Elevation of Privilege Vulnerability...

CVE-2023-36605

Technical details for CVE-2023-36605 are not publicly provided in the connected documents. The entry notes a Windows Named Pipe Filesystem Elevation of Privilege vulnerability, but no affected product versions, root cause, or remediation are documented here. Monitor for updates.

CVE-2023-36729

CVE-2023-36729 is a Local Elevation of Privilege vulnerability related to the Named Pipe File System. CVSS 3.1 base score 7.8 (High) with LOCAL attack vector, LOW privileges required, no user interaction, and implications for confidentiality, integrity, and availability all rated High. The availa...

CVE-2023-36729 Named Pipe File System Elevation of Privilege Vulnerability

...

Named Pipe File System Elevation of Privilege Vulnerability

...

Windows Named Pipe Filesystem Elevation of Privilege Vulnerability

...

Microsoft Windows Named Pipe File System Security Vulnerability

Microsoft Windows Named Pipe File System is a named pipe file system from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Named Pipe File System. An attacker could exploit the vulnerability to elevate privileges. The following products and editions are...

smbd allows client access to unix domain sockets

Description The SMB 1/2/3 protocols allow clients to connect to named pipes via the IPC$ Inter-Process Communication share for the process of inter-process communication between SMB clients and servers. Since Samba 4.16.0, Samba internally connects client pipe names to unix domain sockets within ...

PT-2023-6157 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access control in the Named Pipe File System component of the Windows operating system. Exploitation of this issue may allow an attacker to elevate thei...