2377 matches found
Exploit for Improper Initialization in Linux Linux_Kernel
What is this This is Max Kellermann's proof of concept for Di...
Exploit for Improper Initialization in Linux Linux_Kernel
CVE-2022-0847 A simple reproduction of CVE-2022-0847 Orig...
Exploit for Improper Initialization in Linux Linux_Kernel
CVE-2022-0847 A simple reproduction of CVE-2022-0847 Orig...
CVE-2022-0847
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copypagetoiterpipe and pushpipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cach...
CVE-2021-40376
otris Update Manager 1.2.1.0 allows local users to achieve SYSTEM access via unauthenticated calls to exposed interfaces over a .NET named pipe. A remote attack may be possible as well, by leveraging WsHTTPBinding for HTTP traffic on TCP port 9000...
CVE-2021-40376
CVE-2021-40376 affects otris Update Manager 1.2.1.0. The vulnerability allows local users to obtain SYSTEM privileges by sending unauthenticated calls to exposed interfaces via a .NET named pipe. A remote attack may be possible by abusing WsHTTPBinding for HTTP traffic on TCP port 9000. CVSS data...
UBUNTU-CVE-2022-0847
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copypagetoiterpipe and pushpipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cach...
Linux kernel 安全漏洞
The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel due to a lack of proper initialization of the "flag" variable of the new pipe buffer structure in the copypagetoiterpipe and pushpipe functions in...
CVE-2022-0847
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copypagetoiterpipe and pushpipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cach...
CVE-2022-0847
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copypagetoiterpipe and pushpipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cach...
The vulnerability of the Named Pipe File System component of the Windows operating system, which allows a hacker to exploit their privileges
The vulnerability of the Named Pipe File System component in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...
The vulnerabilities of the `pipe_read` and `pipe_write` functions in the `fs/pipe.c` file of the Linux operating system’s kernel allow attackers to increase their privileges or cause service failures.
The vulnerability of the piperead and pipewrite functions in the fs/pipe.c file of the Linux operating system’s kernel is related to code errors. Exploiting this vulnerability can allow an attacker to enhance their privileges or cause service failures...
Dirty Pipe Local Privilege Escalation via CVE-2022-0847
This exploit targets a vulnerability in the Linux kernel since 5.8, that allows writing of read only or immutable memory. The vulnerability was fixed in Linux 5.16.11, 5.15.25 and 5.10.102. The module exploits this vulnerability by overwriting a suid binary with the payload, executing it, and the...
ALPINE-CVE-2021-3781
A trivial sandbox enabled with the -dSAFER option escape flaw was found in the ghostscript interpreter by injecting a specially crafted pipe command. This flaw allows a specially crafted document to execute arbitrary commands on the system in the context of the ghostscript interpreter. The highes...
CVE-2022-22715
Named Pipe File System Elevation of Privilege Vulnerability...
CVE-2022-22715
Named Pipe File System Elevation of Privilege Vulnerability...
Privilege escalation
Named Pipe File System Elevation of Privilege Vulnerability...
CVE-2022-22715
CVE-2022-22715 corresponds to a Windows Named Pipe File System Elevation of Privilege vulnerability. The Electronically published data indicate a local, low‑privilege attack with no user interaction that could yield high impact to confidentiality, integrity, and availability. The connected record...