CVE-2017-20147

In the ebuild package through smokeping-2.7.3-r1 for SmokePing on Gentoo, the initscript uses a PID file that is writable by the smokeping user. By writing arbitrary PIDs to that file, the smokeping user can cause a denial of service to arbitrary PIDs when the service is stopped...

CVE-2017-20147

In the ebuild package through smokeping-2.7.3-r1 for SmokePing on Gentoo, the initscript uses a PID file that is writable by the smokeping user. By writing arbitrary PIDs to that file, the smokeping user can cause a denial of service to arbitrary PIDs when the service is stopped...

CVE-2017-20147

In the ebuild package through smokeping-2.7.3-r1 for SmokePing on Gentoo, the initscript uses a PID file that is writable by the smokeping user. By writing arbitrary PIDs to that file, the smokeping user can cause a denial of service to arbitrary PIDs when the service is stopped...

CVE-2017-20147

In the ebuild package through smokeping-2.7.3-r1 for SmokePing on Gentoo, the initscript uses a PID file that is writable by the smokeping user. By writing arbitrary PIDs to that file, the smokeping user can cause a denial of service to arbitrary PIDs when the service is stopped...

CVE-2017-20147

CVE-2017-20147 affects Smokeping on Gentoo (smokeping-2.7.3-r1). The initscript uses a PID file writable by the smokeping user, allowing an attacker to write arbitrary PIDs to that file and cause a denial of service to arbitrary PIDs when the service is stopped. The provided connected documents c...

CVE-2017-20147

In the ebuild package through smokeping-2.7.3-r1 for SmokePing on Gentoo, the initscript uses a PID file that is writable by the smokeping user. By writing arbitrary PIDs to that file, the smokeping user can cause a denial of service to arbitrary PIDs when the service is stopped...

PT-2022-8013 · Smokeping · Smokeping

Name of the Vulnerable Software and Affected Versions: SmokePing versions through 2.7.3-r1 Description: The issue allows the smokeping user to cause a denial of service to arbitrary PIDs when the service is stopped by writing arbitrary PIDs to the PID file used by the initscript. Recommendations:...

CVE-2022-36186

A Null Pointer dereference vulnerability exists in GPAC 2.1-DEV-revUNKNOWN-master via the function gffilterpidsetpropertyfull at filtercore/filterpid.c:5250,which causes a Denial of Service DoS. This vulnerability was fixed in commit b43f9d1...

UBUNTU-CVE-2022-36186

A Null Pointer dereference vulnerability exists in GPAC 2.1-DEV-revUNKNOWN-master via the function gffilterpidsetpropertyfull at filtercore/filterpid.c:5250,which causes a Denial of Service DoS. This vulnerability was fixed in commit b43f9d1...

PT-2025-26021

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue has been identified in the Linux kernel. The problem occurs when a non-leader thread calls execve, causing it to switch PIDs with the leader process. As a result,...

Here’s a Simple Script to Detect the Stealthy Nation-State BPFDoor

In this blog, the Qualys Research Team explains the mechanics of a Linux malware variant named BPFdoor. We then demonstrate the efficacy of Qualys Custom Assessment and Remediation to detect it, and Qualys Multi-Vector EDR to protect against it. BPFDoor is a Linux/Unix backdoor that allows threat...

Juniper Networks Junos OS 资源管理错误漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A resource management error vulnerability exists in Juniper Networks Junos OS, which can be exploited to trigger a denial ...

Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: buffer overflow in IPsec ESP transformation code CVE-2022-27666 kernel: out-of-bounds read in fbcongetfont function CVE-2020-28915 For more details about the security issues, including th...

CVE-2021-40944

In GPAC MP4Box 1.1.0, there is a Null pointer reference in the function gffilterpidgetpacket function in src/filtercore/filterpid.c:5394, as demonstrated by GPAC. This can cause a denial of service DOS...

DEBIAN-CVE-2021-40944

In GPAC MP4Box 1.1.0, there is a Null pointer reference in the function gffilterpidgetpacket function in src/filtercore/filterpid.c:5394, as demonstrated by GPAC. This can cause a denial of service DOS...

UBUNTU-CVE-2021-40944

In GPAC MP4Box 1.1.0, there is a Null pointer reference in the function gffilterpidgetpacket function in src/filtercore/filterpid.c:5394, as demonstrated by GPAC. This can cause a denial of service DOS...

new packages: python-pid

An update is available for python-pid. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

GHSA-JJHJ-8GX7-X836 Incorrect Access Control in Phusion Passenger

An Incorrect Access Control vulnerability in SpawningKit in Phusion Passenger 5.3.x before 5.3.2 allows a Passenger-managed malicious application, upon spawning a child process, to report an arbitrary different PID back to Passenger's process manager. If the malicious application then generates a...

GHSA-H2P3-H48H-9JJ7 PIDUsage Enables OS Command Injection

Overview Affected versions of pidusage pass unsanitized input to childprocess.exec, resulting in arbitrary code execution in the ps method. This package is vulnerable to this PoC on Darwin, SunOS, FreeBSD, and AIX. Windows and Linux are not vulnerable. Proof of Concept js var pid =...

Ursnif Malware Banks on News Events for Phishing Attacks

Ursnif aka Gozi, Dreambot, ISFB is one of the most widespread banking trojans. It has been observed evolving over the past few years. Ursnif has shown incredible theft capabilities. In 2020 Ursnif rose to prominence becoming one of the top ten most prolific pieces of malware. Among its core...