PT-2017-10956

Name of the Vulnerable Software and Affected Versions VIM version 8.0.1187 Description The issue concerns the creation of swap files by VIM, where the umask is ignored. This results in swap files, such as "ORIGINAL FILENAME.swp", being potentially world-readable or accessible in unintended ways b...

CVE-2017-1000382: Exposure of Sensitive Information to an Unauthorized Actor

VIM version 8.0.1187 and other versions most likely ignores umask when creating a swap file "ORIGINALFILENAME.swp" resulting in files that may be world readable or otherwise accessible in ways not intended by the user running the vi binary...

Automate Linux Swap Analysis: swap_digger

swapdigger is a bash script used to automate Linux swap analysis for post-exploitation or forensics purpose. It automates swap extraction and searches for Linux user credentials, Web form credentials, Web form emails, HTTP basic authentication, WiFi SSID and keys, etc. Download Use the following...

UBUNTU-CVE-2017-12458

The nlmswapauxiliaryheadersin function in bfd/nlmcode.h in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted nlm file...

PT-2017-4280

Name of the Vulnerable Software and Affected Versions: GNU Binutils versions 2.29 and earlier Description: The issue is related to the nlm swap auxiliary headers in function in the bfd/nlmcode.h component of the Binary File Descriptor BFD library. It allows remote attackers to cause an out of...

MacOS Insecure Swap File Vulnerability

It turns out that even with SIP enabled a regular root user can write to the swapfile under /private/var/vm/swapfile0 on MacOS. MacOS uses an insecure swap file CVE-2017-2494 This came out of a discussion with Jann Horn this afternoon; credit is his. It turns out that even with SIP enabled a...

The vulnerability of the iOS operating system, which allows a hacker to read data from the swap buffer

The vulnerability of the Pasteboard component in the iOS operating system is related to errors in managing cryptographic keys. Exploiting this vulnerability allows a local attacker to read data from the swap buffer using the encryption key obtained from the hardware UID...

Microsoft Edge: Use-after-free in TypedArray.sort（CVE-2016-7288）

There is a use-after-free in the TypedArray. sort. In TypedArrayCompareElementsHelper https://chromium.googlesource.com/external/github.com/Microsoft/ChakraCore/+/TimeTravelDebugging/lib/Runtime/Library/TypedArray.cpp, the comparison function is called with the following code: Var retVal =...

GNU Binutils 'swap_std_reloc_out()' Function Remote Denial of Service Vulnerability

GNU Binutils a.k.a. GNU Binary Utilities or binutils is a set of programming language utilities developed by the GNU Project to work with object files in a variety of formats, with connectors, assemblers, and other tools for object files and archives.The Binary File Descriptor BFD library a.k.a...

RHEL 7 : ansible (RHSA-2017:0515)

An update for ansible and ceph-ansible is now available for Red Hat Storage Console 2. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

OpenBSD HTTPd < 6.0 - Memory Exhaustion Denial of Service

Advisory Information Title: Remote DoS against OpenBSD http server up to 6.0 Advisory URL: https://pierrekim.github.io/advisories/CVE-2017-5850-openbsd.txt Blog URL: https://pierrekim.github.io/blog/2017-02-07-openbsd-httpd-CVE-2017-5850.html Date published: 2017-02-07 Vendors contacted: OpenBSD...

PT-2017-1263

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 56.0.2924.76 Description The issue is related to the browser's inability to handle alerts displayed when frames are swapped out. This can be exploited by a remote attacker using a specially crafted HTML page to...

Man-in-the-Middle (MitM) Attacks

selenium-download is vulnerable to man-in-the-middle attacks. The library downloads binaries via HTTP, allowing a malicious user to swap out the requested binary with another binary for the system to execute...

Man-in-the-Middle (MitM) Attacks

appium-chromedriver is vulnerable to man-in-the-middle attacks. The library downloads binaries via HTTP, allowing a malicious user to swap out the requested binary with another binary for the system to execute...

eCryptfs ecryptfs-setup-swap information disclosure vulnerability (CNVD-2016-05533)

eCryptfs Enterprise Cryptographic Filesystem is a set of disk encryption software for encrypted Linux systems maintained by software developers Dustin Kirkland and Tyler Hicks. The software is compatible with POSIX file system level encryption and supports file granularity file or directory...

eCryptfs ecryptfs-setup-swap Information Disclosure Vulnerability

eCryptfs Enterprise Cryptographic Filesystem is a set of disk encryption software for encrypted Linux systems maintained by software developers Dustin Kirkland and Tyler Hicks. The software is compatible with POSIX file system level encryption and supports file granularity file or directory...

CVE-2016-6224

ecryptfs-setup-swap in eCryptfs does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning on a 1 NVMe or 2 MMC drive, which allows local users to obtain sensitive information via unspecified vectors. NOTE: this vulnerability exists because of an...

CVE-2016-6224

ecryptfs-setup-swap in eCryptfs does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning on a 1 NVMe or 2 MMC drive, which allows local users to obtain sensitive information via unspecified vectors. NOTE: this vulnerability exists because of an...

Information disclosure

ecryptfs-setup-swap in eCryptfs before 111 does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning and certain versions of systemd, which allows local users to obtain sensitive information via unspecified vectors...

DEBIAN-CVE-2015-8946

ecryptfs-setup-swap in eCryptfs before 111 does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning and certain versions of systemd, which allows local users to obtain sensitive information via unspecified vectors...