Lucene search
+L

1935 matches found

GithubExploit
GithubExploit
•added 2021/01/31 3:38 a.m.•330 views

Exploit for Off-by-one Error in Sudo_Project Sudo

CVE-2021-3156 xchg@ubuntu:/Desktop/CVE-2021-3156$ ./sudo-hax...

7.8CVSS7.5AI score0.99962EPSS
SaveExploits83
GithubExploit
GithubExploit
•added 2021/01/30 3:22 a.m.•180 views

Exploit for Off-by-one Error in Sudo_Project Sudo

CVE-2021-3156 PoC for CVE-2021-3156 sudo heap overflow. Expl...

7.8CVSS7.4AI score0.99962EPSS
SaveExploits83
GithubExploit
GithubExploit
•added 2021/01/28 8:55 a.m.•41 views

Exploit for Off-by-one Error in Sudo_Project Sudo

CVE-2021-3156-Exp The exploit of CVE-2...

7.8CVSS7.5AI score0.99962EPSS
SaveExploits83
GithubExploit
GithubExploit
•added 2021/01/28 2:20 a.m.•76 views

Exploit for Off-by-one Error in Sudo_Project Sudo

sudo Heap Overflow Vulnerability CVE-2021-3156 Vulnerabi...

7.8CVSS7.3AI score0.99962EPSS
SaveExploits83
GithubExploit
GithubExploit
•added 2021/01/27 4:03 p.m.•89 views

Exploit for Off-by-one Error in Sudo_Project Sudo

CVE-2021-3156 https://www.qualys.com/2021/01/26/cve-2021...

7.8CVSS7.5AI score0.99962EPSS
SaveExploits83
attackerkb
attackerkb
•added 2021/01/26 12:00 a.m.•255 views

CVE-2021-3156 "Baron Samedit"

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via “sudoedit -s” and a command-line argument that ends with a single backslash character. Recent assessments: cdelafuente-r7 at January 27, 2021 3:40pm UTC...

8.4CVSS7.4AI score0.99962EPSS
SaveIn wildExploits88References39
AlpineLinux
AlpineLinux
•added 2021/01/26 12:00 a.m.•56 views

CVE-2021-3156

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character...

7.8CVSS7.4AI score0.99962EPSS
SaveExploits83
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/26 12:00 a.m.•7 views

CVE-2021-3156: Off-by-one Error

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character...

7.8CVSS7.9AI score0.99962EPSS
SaveExploits83References4
Mend
Mend
•added 2021/01/26 12:00 a.m.•1 views

CVE-2021-3156

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character...

8.5CVSS0.99962EPSS
SaveExploits83References38
OSV
OSV
•added 2020/12/31 10:15 a.m.•30 views

CVE-2020-35893

An issue was discovered in the simple-slab crate before 0.3.3 for Rust. remove has an off-by-one error, causing memory leakage and a drop of uninitialized memory...

7.5CVSS7.1AI score0.01529EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2020/12/31 8:24 a.m.•40 views

CVE-2020-35893

An issue was discovered in the simple-slab crate before 0.3.3 for Rust. remove has an off-by-one error, causing memory leakage and a drop of uninitialized memory...

7.5AI score0.01352EPSS
SaveExploits0References1
Mend
Mend
•added 2020/12/31 8:24 a.m.•2 views

CVE-2020-35893

An issue was discovered in the simple-slab crate before 0.3.3 for Rust. remove has an off-by-one error, causing memory leakage and a drop of uninitialized memory...

8.7CVSS0.01352EPSS
SaveExploits0References5
CVE
CVE
•added 2020/12/31 8:24 a.m.•69 views

CVE-2020-35893

CVE-2020-35893 affects the Rust crate simple-slab, prior to version 0.3.3. The remove() function has an off-by-one error that can cause memory leakage and a drop of uninitialized memory. This is documented across multiple sources (NVD entry and OSV/GHSA advisories) and is not accompanied by publi...

7.5CVSS8.2AI score0.01352EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2020/12/31 12:00 a.m.•19 views

Rust Security Vulnerabilities

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in Rust simple-slab crate before 0.3.3 for Rust, which stems from remove having an off-by-one error, resulting in a memory leak and loss of uninitialized memory...

7.5CVSS5.8AI score0.01352EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/31 12:00 a.m.•5 views

CVE-2020-35893: Off-by-one Error

An issue was discovered in the simple-slab crate before 0.3.3 for Rust. remove has an off-by-one error, causing memory leakage and a drop of uninitialized memory...

7.5CVSS5.8AI score0.01352EPSS
SaveExploits0References4
OSV
OSV
•added 2020/11/24 5:15 p.m.•40 views

CVE-2020-29040

An issue was discovered in Xen through 4.14.x allowing x86 HVM guest OS users to cause a denial of service stack corruption, cause a data leak, or possibly gain privileges because of an off-by-one error. NOTE: this issue is caused by an incorrect fix for CVE-2020-27671...

8.8CVSS7AI score
SaveExploits0References3
Prion
Prion
•added 2020/11/24 5:15 p.m.•27 views

Design/Logic Flaw

An issue was discovered in Xen through 4.14.x allowing x86 HVM guest OS users to cause a denial of service stack corruption, cause a data leak, or possibly gain privileges because of an off-by-one error. NOTE: this issue is caused by an incorrect fix for CVE-2020-27671...

4.6CVSS7.6AI score0.00377EPSS
SaveExploits0References3Affected Software1
UbuntuCve
UbuntuCve
•added 2020/11/24 5:15 p.m.•33 views

CVE-2020-29040

An issue was discovered in Xen through 4.14.x allowing x86 HVM guest OS users to cause a denial of service stack corruption, cause a data leak, or possibly gain privileges because of an off-by-one error. NOTE: this issue is caused by an incorrect fix for CVE-2020-27671...

8.8CVSS7.2AI score0.00377EPSS
SaveExploits0References2
OSV
OSV
•added 2020/11/24 5:15 p.m.•9 views

UBUNTU-CVE-2020-29040

An issue was discovered in Xen through 4.14.x allowing x86 HVM guest OS users to cause a denial of service stack corruption, cause a data leak, or possibly gain privileges because of an off-by-one error. NOTE: this issue is caused by an incorrect fix for CVE-2020-27671...

8.8CVSS7.3AI score0.00377EPSS
SaveExploits0References3
CVE
CVE
•added 2020/11/24 4:07 p.m.•120 views

CVE-2020-29040

Xen up to 4.14.x contains an off-by-one error introduced by an incorrect fix for CVE-2020-27671, allowing local x86 HVM guest OS users to cause denial of service (stack corruption), data leakage, or privilege escalation. Affected component: Xen hypervisor (x86 HVM path). Root cause: a diff-one/of...

8.8CVSS7.6AI score0.00377EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder