LibOFX Denial of Service Vulnerability

LibOFX is a library that allows programs to support OFX financial data bi-directional exchange command responses. A security vulnerability exists in the ofxprocfile of the ofxpreproc.cpp file in LibOFX version 0.9.12. A remote attacker can exploit this vulnerability with the help of a specially...

CVE-2016-7916

Race condition in the environread function in fs/proc/base.c in the Linux kernel before 4.5.4 allows local users to obtain sensitive information from kernel memory by reading a /proc//environ file during a process-setup time interval in which environment-variable copying is incomplete...

The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information

The vulnerability of the ioresourcesinit function in the kernel/resource.c file of the Linux kernel in the Android operating system is related to the use of weak permissions for /proc/iomem. Exploiting this vulnerability could allow a local attacker to obtain confidential information by reading t...

The use of the Linux kernel information leak to bypass the kALSR protection mechanisms-vulnerability warning-the black bar safety net

A preliminary description of the Since it has been in the linux kernel fix, so there is nothing concern about this vulnerability. http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b2f73922d119686323f14fbbe46587f863852328 According to the researchers know, the mainstream...

AT Computing atsar_linux 1.4 File Manipulation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1048/info atsar is a linux load monitoring software package released under the GPL by AT Computing. atsadc is a setuid root binary that is included in the atsar package. atsadc is setuid because it obtains informatin via...

Linux Kernel 2.6.x ALSA snd-page-alloc Local Proc File Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/25774/info The Linux kernel is prone to a local privilege-escalation vulnerability. Exploiting this issue may allow local attackers to gain elevated privileges, facilitating the complete compromise of affected computers...

DEBIAN-CVE-2012-3419

Performance Co-Pilot PCP before 3.6.5 exports some of the /proc file system, which allows attackers to obtain sensitive information such as proc/pid/maps and command line arguments...

CVE-2012-3419

Performance Co-Pilot PCP before 3.6.5 exports some of the /proc file system, which allows attackers to obtain sensitive information such as proc/pid/maps and command line arguments...

CVE-2012-3419

Performance Co-Pilot PCP before 3.6.5 exports some of the /proc file system, which allows attackers to obtain sensitive information such as proc/pid/maps and command line arguments...

Command injection

Performance Co-Pilot PCP before 3.6.5 exports some of the /proc file system, which allows attackers to obtain sensitive information such as proc/pid/maps and command line arguments...

CVE-2012-3419

Performance Co-Pilot PCP before 3.6.5 exports some of the /proc file system, which allows attackers to obtain sensitive information such as proc/pid/maps and command line arguments...

CVE-2012-3419

CVE-2012-3419 affects Performance Co-Pilot (PCP) before 3.6.5. The vulnerability arises because PCP exposes some of the /proc filesystem, allowing remote or local entities to read sensitive information such as proc/pid/maps and command line arguments. Consequence: potential exposure of process de...

CVE-2012-3419

Performance Co-Pilot PCP before 3.6.5 exports some of the /proc file system, which allows attackers to obtain sensitive information such as proc/pid/maps and command line arguments...

Scientific Linux Security Update : Scientific Linux 6 kernel on SL6.x i386/x86_64

The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues : - The proc file system could allow a local, unprivileged user to obtain sensitive information or possibly cause integrity issues. CVE-2011-1020, Moderate -...

Scientific Linux Security Update : kernel on SL5.x i386/x86_64 (20120110)

The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues : - A buffer overflow flaw was found in the way the Linux kernel's XFS file system implementation handled links with overly long path names. A local, unprivileged...

CentOS Update for kernel CESA-2012:0007 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

SuSE 11.2 Security Update : Linux kernel (SAT Patch Numbers 6163 / 6164 / 6172)

The SUSE Linux Enterprise 11 SP2 kernel has been updated to 3.0.26, which fixes a lot of bugs and security issues. The following security issues have been fixed : - A locking problem in transparent hugepage support could be used by local attackers to potentially crash the host, or via kvm a...

CentOS 5 : kernel (CESA-2012:0007)

Updated kernel packages that fix multiple security issues, several bugs, and add one enhancement are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores,...

kernel security update

CentOS Errata and Security Advisory CESA-2012:0007 Updated kernel packages that fix multiple security issues, several bugs, and add one enhancement are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Commo...

Code injection

The dotaskstat function in fs/proc/array.c in the Linux kernel before 2.6.39-rc1 does not perform an expected uid check, which makes it easier for local users to defeat the ASLR protection mechanism by reading the startcode and endcode fields in the /proc//stat file for a process executing a PIE...