Lucene search
K

9 matches found

Tenable Nessus
Tenable Nessus
added 2017/12/07 12:0 a.m.25 views

FreeBSD : FreeBSD -- Kernel data leak via ptrace(PT_LWPINFO) (34a3f9b5-dab3-11e7-b5af-a4badb2f4699)

Not all information in the struct ptracelwpinfo is relevant for the state of any thread, and the kernel does not fill the irrelevant bytes or short strings. Since the structure filled by the kernel is allocated on the kernel stack and copied to userspace, a leak of information of the kernel stack...

3.3CVSS5.3AI score0.00075EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2017/11/16 8:0 p.m.18 views

CVE-2017-1086

Removed by vendor...

3.3CVSS4.7AI score0.00075EPSS
Exploits0
FreeBSD
FreeBSD
added 2017/11/15 12:0 a.m.21 views

FreeBSD -- Kernel data leak via ptrace(PT_LWPINFO)

Problem Description: Not all information in the struct ptracelwpinfo is relevant for the state of any thread, and the kernel does not fill the irrelevant bytes or short strings. Since the structure filled by the kernel is allocated on the kernel stack and copied to userspace, a leak of informatio...

3.3CVSS4.9AI score0.00075EPSS
Exploits0
seebug.org
seebug.org
added 2006/10/12 12:0 a.m.17 views

FreeBSD 5.4 / 6.0 (ptrace PT_LWPINFO) Local Denial of Service Exploit

No description provided by source. include sys/types.h include sys/ptrace.h include unistd.h / lol lol, exploit for http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=419 thank you oh unknown, sincerely kokanin@gmail. usage: ./blah pid you own / int mainint argc, char argv struc...

7.1AI score
Exploits0
CVE
CVE
added 2006/10/12 12:0 a.m.49 views

CVE-2006-4516

CVE-2006-4516 affects FreeBSD 6.0-RELEASE. The kernel’s PT_LWPINFO ptrace handling has a signedness flaw: a large negative data value can bypass the signed check and be passed to copyout, causing memory corruption and kernel panic. Impact is a local denial-of-service condition. Described in iDefe...

4.9CVSS6.4AI score0.00232EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2006/10/12 12:0 a.m.19 views

CVE-2006-4516

Integer signedness error in FreeBSD 6.0-RELEASE allows local users to cause a denial of service memory corruption and kernel panic via a PTLWPINFO ptrace command with a large negative data value that satisfies a signed maximum value check but is used in an unsigned copyout function call...

6.4AI score0.00232EPSS
Exploits0References4
Exploit DB
Exploit DB
added 2006/10/12 12:0 a.m.60 views

FreeBSD 5.4/6.0 - 'ptrace PT_LWPINFO' Local Denial of Service

include include include / lol lol, exploit for http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=419 thank you oh unknown, sincerely kokanin@gmail. usage: ./blah / int mainint argc, char argv struct ptracelwpinfo lol; ptracePTATTACH,atoiargv1,NULL,0; waitNULL;...

7.4AI score
Exploits0
securityvulns
securityvulns
added 2006/10/11 12:0 a.m.46 views

iDefense Security Advisory 10.10.06: FreeBSD ptrace PT_LWPINFO Denial of Service Vulnerability

FreeBSD ptrace PTLWPINFO Denial of Service Vulnerability iDefense Security Advisory 10.10.06 http://www.idefense.com/intelligence/vulnerabilities/ Oct 10, 2006 I. BACKGROUND FreeBSD is a modern operating system for x86, amd64, Alpha, IA-64, PC-98 and SPARC architectures. It's based on the UNIX...

4.9CVSS6.5AI score0.00232EPSS
Exploits0
securityvulns
securityvulns
added 2006/10/11 12:0 a.m.38 views

FreeBSD ptrace() DoS

Integer overflow in PTLWPINFO...

3.8AI score
Exploits0References1Affected Software1
Rows per page
Query Builder