248 matches found
FreeBSD Information Disclosure Vulnerability (CNVD-2021-14798)
FreeBSD is a set of Unix-like operating systems from the Freebsd Foundation. A security vulnerability exists in FreeBSD that allows a local attacker to read memory fragments via VOP READDIR to obtain sensitive information. No details of the vulnerability are provided at this time...
Freebsd FreeBSD 信息泄露漏洞
FreeBSD is a set of Unix-like operating systems from the Freebsd Foundation. A security vulnerability exists in FreeBSD that allows a local attacker to read memory fragments via VOP READDIR to obtain sensitive information. No details of the vulnerability are provided at this time...
OSV-2020-1365 UNKNOWN READ in cli_vba_readdir_new
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24354 Crash type: UNKNOWN READ Crash state: clivbareaddirnew clivbascandirnew cliscanole2...
kernel: Information leak when handling NM entries containing NUL
A vulnerability was found in the Linux kernel. Payloads of NM entries are not supposed to contain NUL. When such entry is processed, only the part prior to the first NUL goes into the concatenation i.e. the directory entry name being encoded by a bunch of NM entries. The process stops when the...
kernel: Information leak when handling NM entries containing NUL
A vulnerability was found in the Linux kernel. Payloads of NM entries are not supposed to contain NUL. When such entry is processed, only the part prior to the first NUL goes into the concatenation i.e. the directory entry name being encoded by a bunch of NM entries. The process stops when the...
SQLite Tempdir Selection Vulnerability
Vulnerability Details Affected Vendor: SQLite/Hwaci Affected Product: SQLite Affected Version: All versions prior to 3.13.0 Platform: UNIX, GNU/Linux CWE Classification: CWE-379: Creation of Temporary File in Directory with Incorrect Permissions Impact: Data Leakage Attack vector: Local 2...
FuseISO Stack Buffer Overflow Vulnerability
FuseISO is an open source FUSE module for mounting ISO filesystems such as .iso, .nrg, .bin, .mdf, and .img images, developed by software developer Adam Rimon. A stack buffer overflow vulnerability exists in the 'isofsrealreaddir' function in the isofs.c file in FuseISO 20070708 and earlier...
DEBIAN-CVE-2015-8837
Stack-based buffer overflow in the isofsrealreaddir function in isofs.c in FuseISO 20070708 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long pathname in an ISO file...
UBUNTU-CVE-2015-8837
Stack-based buffer overflow in the isofsrealreaddir function in isofs.c in FuseISO 20070708 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long pathname in an ISO file...
FreeBSD NFS server memory corruption
It's possible to call readdir on plain file...
SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 4472)
This kernel update fixes the following security problems : - It was possible for local user to become root by exploiting a bug in the IA32 system call emulation. This affects x8664 platforms with kernel 2.4.x and 2.6.x before 2.6.22.7 only. CVE-2007-4573 - An information disclosure vulnerability ...
kernel: proc: signedness issue in next_pidmap()
Multiple integer overflows in the nextpidmap function in kernel/pid.c in the Linux kernel before 2.6.38.4 allow local users to cause a denial of service system crash via a crafted 1 getdents or 2 readdir system call...
kernel: proc: signedness issue in next_pidmap()
Multiple integer overflows in the nextpidmap function in kernel/pid.c in the Linux kernel before 2.6.38.4 allow local users to cause a denial of service system crash via a crafted 1 getdents or 2 readdir system call...
kernel: proc: signedness issue in next_pidmap()
Multiple integer overflows in the nextpidmap function in kernel/pid.c in the Linux kernel before 2.6.38.4 allow local users to cause a denial of service system crash via a crafted 1 getdents or 2 readdir system call...
Perl Denial of Service Vulnerability (Windows)
The host is installed with Perl and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbperldosvulnwin.nasl 7029 2017-08-31 11:51:40Z teissa $ Perl Denial of Service Vulnerability Windows Authors: Madhuri D Copyright: Copyright c 2011 Greenbone Networks GmbH,...
CVE-2011-0761
Perl 5.10.x allows context-dependent attackers to cause a denial of service NULL pointer dereference and application crash by leveraging an ability to inject arguments into a 1 getpeername, 2 readdir, 3 closedir, 4 getsockname, 5 rewinddir, 6 tell, or 7 telldir function call...
Null pointer dereference
Perl 5.10.x allows context-dependent attackers to cause a denial of service NULL pointer dereference and application crash by leveraging an ability to inject arguments into a 1 getpeername, 2 readdir, 3 closedir, 4 getsockname, 5 rewinddir, 6 tell, or 7 telldir function call...
CVE-2011-0761
Perl 5.10.x allows context-dependent attackers to cause a denial of service NULL pointer dereference and application crash by leveraging an ability to inject arguments into a 1 getpeername, 2 readdir, 3 closedir, 4 getsockname, 5 rewinddir, 6 tell, or 7 telldir function call...
Integer overflow
Multiple integer overflows in the nextpidmap function in kernel/pid.c in the Linux kernel before 2.6.38.4 allow local users to cause a denial of service system crash via a crafted 1 getdents or 2 readdir system call...
CVE-2011-1593
CVE-2011-1593 affects the Linux kernel before 2.6.38.4, where multiple integer overflows in the next_pidmap function (kernel/pid.c) allow a local user to crash the system via crafted getdents or readdir calls. The connected advisories confirm the affected component and the root cause (integer ove...