CVE-2021-25485

Path traversal vulnerability in FactoryAirCommnadManger prior to SMR Oct-2021 Release 1 allows attackers to write file as system UID via BT remote socket...

Path traversal

Path traversal vulnerability in FactoryAirCommnadManger prior to SMR Oct-2021 Release 1 allows attackers to write file as system UID via BT remote socket...

CVE-2021-25485

Path traversal vulnerability in FactoryAirCommnadManger prior to SMR Oct-2021 Release 1 allows attackers to write file as system UID via BT remote socket...

CVE-2021-25485

CVE-2021-25485 corresponds to a path-traversal vulnerability in FactoryAirCommnadManger, exploitable via a Bluetooth remote socket to write files as the system UID. Affected firmware/product versioning is described as prior to Samsung SMR Oct-2021 Release 1. The connected sources consistently ide...

The vulnerability in the `net/sctp/socket.c` component of the Linux operating system allows a hacker to increase their privileges.

The vulnerability of the net/sctp/socket.c component in the Linux operating system arises from the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of Linux operating system’s socket ports, related to the use of memory after it is freed, allows attackers to increase their privileges.

The vulnerability of Linux operating system’s serial ports is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

MGASA-2021-0460 Updated kernel-linus packages fix security vulnerabilities

This kernel-linus update is based on upstream 5.10.70 and fixes at least the following security issues: Use-after-free vulnerability in the Linux kernel exploitable by a local attacker due to reuse of a DCCP socket with an attached dccpshctxccid object as a listener after being released...

Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 5.10.70 and fixes at least the following security issues: Use-after-free vulnerability in the Linux kernel exploitable by a local attacker due to reuse of a DCCP socket with an attached dccpshctxccid object as a listener after being released CVE-2020-16119...

CVE-2021-3626

The Windows version of Multipass before 1.7.0 allowed any local process to connect to the localhost TCP control socket to perform mounts from the operating system to a guest, allowing for privilege escalation...

CVE-2021-3626

The Windows version of Multipass before 1.7.0 allowed any local process to connect to the localhost TCP control socket to perform mounts from the operating system to a guest, allowing for privilege escalation...

Privilege escalation

The Windows version of Multipass before 1.7.0 allowed any local process to connect to the localhost TCP control socket to perform mounts from the operating system to a guest, allowing for privilege escalation...

CVE-2021-3626 Windows version of Multipass unauthenticated localhost tcp control socket can perform mounts

The Windows version of Multipass before 1.7.0 allowed any local process to connect to the localhost TCP control socket to perform mounts from the operating system to a guest, allowing for privilege escalation...

PT-2021-21192 · Canonical · Multipass

Name of the Vulnerable Software and Affected Versions: Multipass versions prior to 1.7.0 Description: The issue allows any local process to connect to the localhost TCP control socket, enabling mounts from the operating system to a guest. This can lead to privilege escalation. Recommendations: Fo...

The vulnerabilities of SIPROTEC relay protection devices allow a intruder to execute arbitrary code.

The vulnerability of SIPROTEC relay protection devices arises from an overflow in the buffer on the socket layer. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using specially crafted packets sent to port 4443/tcp...

aurelia-sails-socket-client (0.10.0) potentially affected by CVE-2021-41097 via aurelia-path (1.0.0-beta.1)

aurelia-path NPM version 1.0.0-beta.1 is affected by a known vulnerability. The following packages have a transitive dependency on aurelia-path and may be impacted: - aurelia-sails-socket-client 0.10.0 Source cves: CVE-2021-41097 Source advisory: OSV:GHSA-3C9C-2P65-QVWV...

CVE-2021-31605

furlongm openvpn-monitor through 1.1.3 allows %0a command injection via the OpenVPN management interface socket. This can shut down the server via signal%20SIGTERM...

Command injection

furlongm openvpn-monitor through 1.1.3 allows %0a command injection via the OpenVPN management interface socket. This can shut down the server via signal%20SIGTERM...

PYSEC-2021-353

furlongm openvpn-monitor through 1.1.3 allows %0a command injection via the OpenVPN management interface socket. This can shut down the server via signal%20SIGTERM...

EulerOS 2.0 SP5 : avahi (EulerOS-SA-2021-2492)

According to the versions of the avahi packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in avahi in versions 0.6 up to 0.8. The event used to signal the termination of the client connection on the avahi Unix socket i...

PT-2021-7117 · Linux +8 · Linux Kernel +8

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A use-after-free read flaw was found in the sock getsockopt function in net/core/sock.c due to a race condition with listen and connect when using SO PEERCRED and SO PEERGROUPS. This...