CVE-2019-5023

An exploitable vulnerability exists in the grsecurity PaX patch for the function readkmem, in PaX from version pax-linux-4.9.8-test1 to 4.9.24-test7, grsecurity official from version grsecurity-3.1-4.9.8-201702060653 to grsecurity-3.1-4.9.24-201704252333, grsecurity unofficial from version...

PT-2019-17410

Name of the Vulnerable Software and Affected Versions PaX versions pax-linux-4.9.8-test1 through 4.9.24-test7 grsecurity official versions grsecurity-3.1-4.9.8-201702060653 through grsecurity-3.1-4.9.24-201704252333 grsecurity unofficial versions v4.9.25-unofficialgrsec through...

CVE-2019-5023: Missing Release of Memory after Effective Lifetime

An exploitable vulnerability exists in the grsecurity PaX patch for the function readkmem, in PaX from version pax-linux-4.9.8-test1 to 4.9.24-test7, grsecurity official from version grsecurity-3.1-4.9.8-201702060653 to grsecurity-3.1-4.9.24-201704252333, grsecurity unofficial from version...

PaX read_kmem Denial of Service Vulnerability

pax is a patch for Linux that is designed to improve system security by preventing the exploitation of memory corruption vulnerabilities. A security vulnerability exists in the grsecurity PaX patch in PaX. An attacker can exploit the vulnerability to cause a system crash memory leak...

PaX read_kmem denial of service vulnerability

Summary An exploitable vulnerability exists in the grsecurity PaX patch for the function readkmem, in PaX from version pax-linux-4.9.8-test1 to 4.9.24-test7, grsecurity official from version grsecurity-3.1-4.9.8-201702060653 to grsecurity-3.1-4.9.24-201704252333, grsecurity unofficial from versio...

PT-2019-19939

Name of the Vulnerable Software and Affected Versions GNU Tar versions prior to 1.32 Description The issue arises from a NULL pointer dereference in the pax decode header function within sparse.c when parsing certain archives with malformed extended headers. Recommendations For GNU Tar versions...

GHSA-CQ9C-55R7-455X Improper Authentication in Apache Karaf

In Apache Karaf version prior to 3.0.9, 4.0.9, 4.1.1, when the webconsole feature is installed in Karaf, it is available at .../system/console and requires authentication to access it. One part of the console is a Gogo shell/console that gives access to the command line console of Karaf via a Web...

Improper Authentication in Apache Karaf

In Apache Karaf version prior to 3.0.9, 4.0.9, 4.1.1, when the webconsole feature is installed in Karaf, it is available at .../system/console and requires authentication to access it. One part of the console is a Gogo shell/console that gives access to the command line console of Karaf via a Web...

CVE-2018-11787

In Apache Karaf version prior to 3.0.9, 4.0.9, 4.1.1, when the webconsole feature is installed in Karaf, it is available at .../system/console and requires authentication to access it. One part of the console is a Gogo shell/console that gives access to the command line console of Karaf via a Web...

CVE-2018-11787: Improper Authentication

In Apache Karaf version prior to 3.0.9, 4.0.9, 4.1.1, when the webconsole feature is installed in Karaf, it is available at .../system/console and requires authentication to access it. One part of the console is a Gogo shell/console that gives access to the command line console of Karaf via a Web...

PT-2018-10821

Name of the Vulnerable Software and Affected Versions Apache Karaf versions prior to 3.0.9 Apache Karaf versions prior to 4.0.9 Apache Karaf versions prior to 4.1.1 Description The issue affects the webconsole feature in Apache Karaf, specifically the Gogo shell/console. When the Pax Web Extender...

CVE-2017-9671

A heap overflow in apk Alpine Linux's package manager allows a remote attacker to cause a denial of service, or achieve code execution, by crafting a malicious APKINDEX.tar.gz file with a bad pax header block...

ALPINE-CVE-2017-9671

A heap overflow in apk Alpine Linux's package manager allows a remote attacker to cause a denial of service, or achieve code execution, by crafting a malicious APKINDEX.tar.gz file with a bad pax header block...

PAX Linux Security Bypass Vulnerability

pax is a set of archiving tools developed by Debian's QA group that can read and write tar and cpio formats. A security bypass vulnerability exists in PAX Linux. A remote attacker could exploit this issue to bypass certain security restrictions and perform unauthorized operations...

Design/Logic Flaw

An issue was discovered in the size of the default stack guard page on PAX Linux originally from GRSecurity but shipped by other Linux vendors, specifically the default stack guard page is not sufficiently large and can be "jumped" over the stack guard page is bypassed, this affects PAX Linux...

CVE-2017-1000377

An issue was discovered in the size of the default stack guard page on PAX Linux originally from GRSecurity but shipped by other Linux vendors, specifically the default stack guard page is not sufficiently large and can be "jumped" over the stack guard page is bypassed, this affects PAX Linux...

CVE-2017-1000377

An issue was discovered in the size of the default stack guard page on PAX Linux originally from GRSecurity but shipped by other Linux vendors, specifically the default stack guard page is not sufficiently large and can be "jumped" over the stack guard page is bypassed, this affects PAX Linux...

CVE-2017-1000377

An issue was discovered in the size of the default stack guard page on PAX Linux originally from GRSecurity but shipped by other Linux vendors, specifically the default stack guard page is not sufficiently large and can be "jumped" over the stack guard page is bypassed, this affects PAX Linux...

PT-2017-10955

Name of the Vulnerable Software and Affected Versions PAX Linux Kernel affected versions not specified Description An issue was discovered in the size of the default stack guard page on PAX Linux. The default stack guard page is not sufficiently large and can be bypassed. This issue affects PAX...

CVE-2017-1000377: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in the size of the default stack guard page on PAX Linux originally from GRSecurity but shipped by other Linux vendors, specifically the default stack guard page is not sufficiently large and can be "jumped" over the stack guard page is bypassed, this affects PAX Linux...