CVE-2018-7006

CVE-2018-7006 is rejected/not used per the Initial Description; it does not represent an active vulnerability entry.

CVE-2018-7024

CVE-2018-7024 entry is rejected/not used; this candidate was in CNA pool and not assigned to issues in 2018.

CVE-2018-7011

CVE-2018-7011 entry is rejected/not used and does not represent an active vulnerability.

Privilege Escalation

glusterfs.so is vulnerable to privilege escalation. A malicious user can authenticate through TLS using the gluster CLI with the --remote-host command to add themselves to the trusted pool and gain the same permissions...

CVE-2018-19268

This CVE entry is rejected/not used and does not represent an active vulnerability entry.

CVE-2018-19255

CVE-2018-19255 is rejected; this CVE entry is not an active vulnerability.

CVE-2018-13264

This CVE entry is rejected/not used and does not represent an active vulnerability.

CVE-2018-13265

This CVE entry is rejected/not used; the candidate number was in a CNA pool and not assigned in 2018.

CVE-2018-13271

CVE-2018-13271 is rejected/not used; this entry does not represent an active vulnerability.

CentOS 7 : keepalived (CESA-2019:0022)

An update for keepalived is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

Design/Logic Flaw

DriverAgent 2.2015.7.14, which includes DrvAgent64.sys 1.0.0.1, allows a user to send an IOCTL 0x80002068 with a user defined buffer size. If the size of the buffer is less than 512 bytes, then the driver will overwrite the next pool header if there is one next to the user buffer's pool...

CVE-2018-19523

DriverAgent 2.2015.7.14, which includes DrvAgent64.sys 1.0.0.1, allows a user to send an IOCTL 0x80002068 with a user defined buffer size. If the size of the buffer is less than 512 bytes, then the driver will overwrite the next pool header if there is one next to the user buffer's pool...

CVE-2018-19523

DriverAgent 2.2015.7.14, which includes DrvAgent64.sys 1.0.0.1, allows a user to send an IOCTL 0x80002068 with a user defined buffer size. If the size of the buffer is less than 512 bytes, then the driver will overwrite the next pool header if there is one next to the user buffer's pool...

CVE-2018-20331

Local attackers can trigger a Kernel Pool Buffer Overflow in Antiy AVL ATool v1.0.0.22. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the processing of IOCTL 0x80002004 by the...

CVE-2018-20331

Local attackers can trigger a Kernel Pool Buffer Overflow in Antiy AVL ATool v1.0.0.22. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the processing of IOCTL 0x80002004 by the...

Buffer overflow

Local attackers can trigger a Kernel Pool Buffer Overflow in Antiy AVL ATool v1.0.0.22. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the processing of IOCTL 0x80002004 by the...

CVE-2018-20331

Local attackers can trigger a Kernel Pool Buffer Overflow in Antiy AVL ATool v1.0.0.22. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the processing of IOCTL 0x80002004 by the...

XenServer - Not Able to Enable HA on Pool

Not able to enable HA on pool...

CVE-2018-11987

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, if there is an unlikely memory alloc failure for the secure pool in boot, it can result in wrong pointer access causing kernel panic...

Vulnerability Spotlight : Multiple Vulnerabilities in WIBU-SYSTEMS WibuKey.sys

These vulnerabilities were discovered by Marcin 'Icewall' Noga of Cisco Talos. Executive Summary WibuKey is a Digital Rights Management DRM solution that has been used in a large number of solutions such as Straton, Archicad, GRAPHISOFT, V-Ray and others. It has been leveraged by over 3,000...