CVE-2017-15265

Race condition in the ALSA subsystem in the Linux kernel before 4.13.8 allows local users to cause a denial of service use-after-free or possibly have unspecified other impact via crafted /dev/snd/seq ioctl calls, related to sound/core/seq/seqclientmgr.c and sound/core/seq/seqports.c...

PT-2017-13952

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.13.8 Description A race condition in the ALSA subsystem allows local users to cause a denial of service or possibly have other impact via crafted /dev/snd/seq ioctl calls, related to sound/core/seq/seq...

kernel: Use after free in seq file

A flaw was found in the Linux kernel's implementation of seqfile where a local attacker could manipulate memory in the put function pointer. This could lead to memory corruption and possible privileged escalation...

kernel: Use after free in seq file

A flaw was found in the Linux kernel's implementation of seqfile where a local attacker could manipulate memory in the put function pointer. This could lead to memory corruption and possible privileged escalation...

kernel: Use after free in seq file

A flaw was found in the Linux kernel's implementation of seqfile where a local attacker could manipulate memory in the put function pointer. This could lead to memory corruption and possible privileged escalation...

Unbreakable Enterprise kernel security update

2.6.39-400.294.7 - udp: properly support MSGPEEK with truncated buffers Eric Dumazet Orabug: 25874741 CVE-2016-10229 - block: fix use-after-free in seq file Vegard Nossum Orabug: 25877531 CVE-2016-7910...

kernel: Use after free in seq file

A flaw was found in the Linux kernel's implementation of seqfile where a local attacker could manipulate memory in the put function pointer. This could lead to memory corruption and possible privileged escalation...

Critical kernel security update: vulnerability fixes CVE-2016-7910, CVE-2016-7911 (and other), new kernel 2.6.32-042stab120.11

This update provides a new Virtuozzo 6.0 kernel 2.6.32-042stab120.11 based on the Red Hat Enterprise Linux 6.8 kernel 2.6.32-642.6.1.el6. The new kernel provides security and stability fixes. Vulnerability id: CVE-2016-1583 Stack overflow via ecryptfs and /proc/$pid/environ. It was found that...

CVE-2016-2543

CVE-2016-2543 affects the Linux kernel before 4.4.1: the snd_seq_ioctl_remove_events path in sound/core/seq/seq_clientmgr.c does not verify FIFO assignment before clearing, enabling local users to trigger a NULL pointer dereference and an OOPS (denial of service). Remediation: upgrade to kernel 4...

CVE-2016-2544

Race condition in the queuedelete function in sound/core/seq/seqqueue.c in the Linux kernel before 4.4.1 allows local users to cause a denial of service use-after-free and system crash by making an ioctl call at a certain time...

PT-2016-5196

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.4.1 Description The issue is related to a race condition in the queue delete function, which can be exploited by local users to cause a denial of service. This can result in a use-after-free condition and...

PT-2016-5195

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.4.1 Description The issue allows local users to cause a denial of service via a crafted ioctl call. This is due to the snd seq ioctl remove events function not verifying FIFO assignment before proceeding with...

Huawei SEQ Analyst XML External Entity Vulnerability

Huawei SEQ Analyst is Huawei's platform for monitoring service quality and managing relationships between individual users and multiple suppliers. The platform provides functions such as service debugging, user complaint handling, troubleshooting, user experience management, and deployment of...

CVE-2015-2346

XML external entity XXE vulnerability in Huawei SEQ Analyst before V200R002C03LG0001CP0022 allows remote authenticated users to read arbitrary files via the req parameter...

Xxe

XML external entity XXE vulnerability in Huawei SEQ Analyst before V200R002C03LG0001CP0022 allows remote authenticated users to read arbitrary files via the req parameter...

CVE-2015-2346

XML external entity XXE vulnerability in Huawei SEQ Analyst before V200R002C03LG0001CP0022 allows remote authenticated users to read arbitrary files via the req parameter...

CVE-2015-2346

Vulnerability: CVE-2015-2346 is an XXE flaw in Huawei SEQ Analyst prior to V200R002C03LG0001CP0022. An authenticated remote attacker can read arbitrary files via the req parameter. Affected product: Huawei SEQ Analyst. Root cause: XML External Entity processing. Impact: unauthorized file disclosu...

CVE-2015-2346: Undefined Security Weakness

XML external entity XXE vulnerability in Huawei SEQ Analyst before V200R002C03LG0001CP0022 allows remote authenticated users to read arbitrary files via the req parameter...

PT-2015-5723

Name of the Vulnerable Software and Affected Versions Huawei SEQ Analyst versions prior to V200R002C03LG0001CP0022 Description The issue allows remote authenticated users to read arbitrary files. This is achieved via the req parameter, which is vulnerable to XML external entity XXE attacks...

CVE-2015-2347

Cross-site scripting XSS vulnerability in Huawei SEQ Analyst before V200R002C03LG0001CP0022 allows remote attackers to inject arbitrary web script or HTML via the command XML element in the req parameter to flexdata.action in 1 common/, 2 monitor/, or 3 psnpm/ or the 4 module XML element in the r...