EUVD-2016-10660

Malware in sbrugna...

Code injection

An issue was discovered in EMC ScaleIO versions before 2.0.1.1. A low-privileged local attacker may cause a denial-of-service by generating a kernel panic in the SCINI driver using IOCTL calls which may render the ScaleIO Data Client SDC server unavailable until the next reboot...

Code injection

An issue was discovered in EMC ScaleIO versions before 2.0.1.1. A low-privileged local attacker may be able to modify the kernel memory in the SCINI driver and may achieve code execution to escalate privileges to root on ScaleIO Data Client SDC servers...

CVE-2016-9868

An issue was discovered in EMC ScaleIO versions before 2.0.1.1. A low-privileged local attacker may cause a denial-of-service by generating a kernel panic in the SCINI driver using IOCTL calls which may render the ScaleIO Data Client SDC server unavailable until the next reboot...

CVE-2016-9867

An issue was discovered in EMC ScaleIO versions before 2.0.1.1. A low-privileged local attacker may be able to modify the kernel memory in the SCINI driver and may achieve code execution to escalate privileges to root on ScaleIO Data Client SDC servers...

CVE-2016-9868

An issue was discovered in EMC ScaleIO versions before 2.0.1.1. A low-privileged local attacker may cause a denial-of-service by generating a kernel panic in the SCINI driver using IOCTL calls which may render the ScaleIO Data Client SDC server unavailable until the next reboot...

CVE-2016-9869

An issue was discovered in EMC ScaleIO versions before 2.0.1.1. Incorrect permissions on the SCINI driver may allow a low-privileged local attacker to modify the configuration and render the ScaleIO Data Client SDC server unavailable...

CVE-2016-9867

An issue was discovered in EMC ScaleIO versions before 2.0.1.1. A low-privileged local attacker may be able to modify the kernel memory in the SCINI driver and may achieve code execution to escalate privileges to root on ScaleIO Data Client SDC servers...

CVE-2016-9867

EMC ScaleIO (pre-2.0.1.1) contains a local privilege escalation in the SCINI kernel driver. A low-privilege local attacker can modify kernel memory in SCINI, potentially achieving code execution to escalate to root on ScaleIO Data Client (SDC) servers. Affected component: SCINI driver within EMC ...

CVE-2016-9868

An issue was discovered in EMC ScaleIO versions before 2.0.1.1. A low-privileged local attacker may cause a denial-of-service by generating a kernel panic in the SCINI driver using IOCTL calls which may render the ScaleIO Data Client SDC server unavailable until the next reboot...

CVE-2016-9868

EMC ScaleIO is affected by CVE-2016-9868 due to a local denial-of-service vulnerability in the SCINI driver. The issue affects ScaleIO versions before 2.0.1.1 where a low-privileged local attacker can trigger IOCTL calls to the SCINI driver, causing a kernel panic and rendering the ScaleIO Data C...

CVE-2016-9869

CVE-2016-9869 affects EMC ScaleIO versions before 2.0.1.1. The issue is incorrect permissions on the SCINI driver, allowing a low-privileged local attacker to modify the configuration and render the ScaleIO Data Client (SDC) server unavailable (partial availability impact). The documented remedia...

CVE-2016-9869

An issue was discovered in EMC ScaleIO versions before 2.0.1.1. Incorrect permissions on the SCINI driver may allow a low-privileged local attacker to modify the configuration and render the ScaleIO Data Client SDC server unavailable...