Lucene search
+L

3682 matches found

Prion
Prion
added 2018/06/11 1:29 p.m.21 views

Heap overflow

An issue was discovered in Free Lossless Image Format FLIF 0.3. The TransformPaletteC::process function in transform/paletteC.hpp allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted PAM image...

6.8CVSS8.2AI score0.0136EPSS
SaveExploits1References1Affected Software1
UbuntuCve
UbuntuCve
added 2018/06/11 1:29 p.m.26 views

CVE-2018-12109

An issue was discovered in Free Lossless Image Format FLIF 0.3. The TransformPaletteC::process function in transform/paletteC.hpp allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted PAM image...

7.8CVSS7.2AI score0.0136EPSS
SaveExploits1References2
NVD
NVD
added 2018/06/11 1:29 p.m.21 views

CVE-2018-12109

An issue was discovered in Free Lossless Image Format FLIF 0.3. The TransformPaletteC::process function in transform/paletteC.hpp allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted PAM image...

7.8CVSS8.2AI score0.0136EPSS
SaveExploits1References1
OSV
OSV
added 2018/06/11 1:29 p.m.19 views

CVE-2018-12109

An issue was discovered in Free Lossless Image Format FLIF 0.3. The TransformPaletteC::process function in transform/paletteC.hpp allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted PAM image...

7.8CVSS8.4AI score
SaveExploits0References1
Cvelist
Cvelist
added 2018/06/11 1:00 p.m.29 views

CVE-2018-12109

An issue was discovered in Free Lossless Image Format FLIF 0.3. The TransformPaletteC::process function in transform/paletteC.hpp allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted PAM image...

8.2AI score0.0136EPSS
SaveExploits1References1
Mageia
Mageia
added 2018/05/16 8:24 a.m.41 views

Updated libpam4j package fixes security vulnerability

It was discovered that libpam4j, a Java library wrapper for the integration of PAM did not call pamacctmgmt during authentication. As such a user who has a valid password, but a deactivated or disabled account could still log in CVE-2017-12197...

6.5CVSS2.8AI score0.01511EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2018/05/16 12:00 a.m.31 views

Fedora Update for pam-kwallet FEDORA-2018-b8cbd331a1

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.6AI score0.00434EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2018/05/15 12:00 a.m.32 views

Fedora Update for pam-kwallet FEDORA-2018-e56bdde239

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.6AI score0.00434EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2018/05/15 12:00 a.m.32 views

Fedora 26 : pam-kwallet (2018-a954bb958b)

Security fix for CVE-2018-10380 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 7030...

7.8CVSS7.2AI score0.00434EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2018/05/15 12:00 a.m.28 views

Fedora 27 : pam-kwallet (2018-e56bdde239)

Security fix for CVE-2018-10380 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 7030...

7.8CVSS7.2AI score0.00434EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2018/05/15 12:00 a.m.38 views

Fedora Update for pam-kwallet FEDORA-2018-a954bb958b

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.6AI score0.00434EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2018/05/15 12:00 a.m.29 views

Debian DSA-4200-1 : kwallet-pam - security update

Fabian Vogt discovered that incorrect permission handling in the PAM module of the KDE Wallet could allow an unprivileged local user to gain ownership of arbitrary files. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...

7.8CVSS7.5AI score0.00434EPSS
SaveExploits0References4
Debian
Debian
added 2018/05/14 7:38 p.m.46 views

[SECURITY] [DSA 4200-1] kwallet-pam security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4200-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 14, 2018 https://www.debian.org/security/faq -...

7.8CVSS7.5AI score0.00434EPSS
SaveExploits0
Fedora
Fedora
added 2018/05/14 6:36 p.m.25 views

[SECURITY] Fedora 27 Update: pam-kwallet-5.12.5-3.fc27

PAM module for KWallet...

7.8CVSS1.6AI score0.00434EPSS
SaveExploits0
Fedora
Fedora
added 2018/05/14 6:02 p.m.35 views

[SECURITY] Fedora 26 Update: pam-kwallet-5.12.5-3.fc26

PAM module for KWallet...

7.8CVSS1.6AI score0.00434EPSS
SaveExploits0
Fedora
Fedora
added 2018/05/14 5:57 p.m.32 views

[SECURITY] Fedora 28 Update: pam-kwallet-5.12.5-3.fc28

PAM module for KWallet...

7.8CVSS1.6AI score0.00434EPSS
SaveExploits0
OSV
OSV
added 2018/05/14 12:00 a.m.23 views

DSA-4200-1 kwallet-pam - security update

Bulletin has no description...

7.8CVSS7.4AI score0.00434EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2018/05/13 12:00 a.m.51 views

Debian: Security Advisory (DSA-4200-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.6AI score0.00434EPSS
SaveExploits0References4
OSV
OSV
added 2018/05/08 12:29 p.m.5 views

DEBIAN-CVE-2018-10380

kwallet-pam in KDE KWallet before 5.12.6 allows local users to obtain ownership of arbitrary files via a symlink attack...

7.8CVSS6.6AI score0.00434EPSS
SaveExploits0References1
CVE
CVE
added 2018/05/08 8:00 a.m.77 views

CVE-2018-10380

CVE-2018-10380 affects kwallet-pam in KDE KWallet prior to 5.12.6, where local users can exploit a symlink to obtain ownership of arbitrary files. The vulnerability stems from insecure permission handling in the PAM module, enabling local privilege elevation with complete confidentiality, integri...

7.8CVSS7.1AI score0.00434EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder