310 matches found
CVE-2025-2947 IBM i privilege escalation
IBM i 7.6 contains a privilege escalation vulnerability due to incorrect profile swapping in an OS command. A malicious actor can use the command to elevate privileges to gain root access to the host operating system...
CVE-2025-2947 IBM i privilege escalation
IBM i 7.6 contains a privilege escalation vulnerability due to incorrect profile swapping in an OS command. A malicious actor can use the command to elevate privileges to gain root access to the host operating system...
Security Bulletin: IBM i is vulnerable to a privilege escalation due to incorrect profile swapping in an OS command [CVE-2025-2947].
Summary IBM i contains a privilege escalation vulnerability due to incorrect swapping in an OS command as described in the vulnerability details section. This bulletin identifies the steps to take to address the vulnerability as described in the remediation/fixes section. Vulnerability Details...
IBM i 安全漏洞
IBM i is a suite of operating systems from International Business Machines IBM running in IBM Power Systems and IBM PureSystems. A security vulnerability exists in IBM i version 7.6 that stems from improper configuration file swapping, which could result in elevated privileges to root...
The vulnerability of the Windows operating system’s kernel, which allows a hacker to increase their privileges
The vulnerability of the Windows operating system’s kernel is related to the swapping of an unreliable pointer. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the axg_clk_regmaps{} function in the drivers/clk/meson/axg.c module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the axgclkregmaps function in the drivers/clk/meson/axg.c module of the Linux operating system’s kernel is related to the pointer swapping issue. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a page mapping exception during zram swapping, which could lead to user process corruption...
The vulnerability of the Microsoft Message Queuing (MSMQ) service on Microsoft Windows operating systems allows a perpetrator to cause a service failure.
The vulnerability of the Microsoft Message Queuing MSMQ service on Microsoft Windows operating systems is related to pointer swapping errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
Farewell to the Fallen: The Cybersecurity Stars We Lost Last Year
It's time once again to pay our respects to the once-famous cybersecurity solutions whose usefulness died in the past year. The cybercriminal world collectively mourns the loss of these solutions and the easy access they provide to victim organizations. These solutions, though celebrated in their...
Devolutions.XTS.NET Vulnerable to Timing Attack on GF Multiplications
Impact Timing attacks on Galois Field multiplications in this package. Successful exploitation would effectively allow a downgrade of the security guarantees of the XTS mode to the security guarantees of ECB mode, allowing block swapping, enabling identification of identical blocks, and rendering...
GHSA-J6VM-4R7G-X4GR Devolutions.XTS.NET Vulnerable to Timing Attack on GF Multiplications
Impact Timing attacks on Galois Field multiplications in this package. Successful exploitation would effectively allow a downgrade of the security guarantees of the XTS mode to the security guarantees of ECB mode, allowing block swapping, enabling identification of identical blocks, and rendering...
Covert Timing Channel
Overview Affected versions of this package are vulnerable to Covert Timing Channel via the Galois Field multiplications process. An attacker can effectively downgrade the security guarantees of the XTS mode to those of ECB mode, enabling block swapping and identification of identical blocks,...
Hacker in Snowflake Extortions May Be a U.S. Soldier
Two men have been arrested for allegedly stealing data from and extorting dozens of companies that used the cloud data storage company Snowflake , but a third suspect -- a prolific hacker known as Kiberphant0m -- remains at large and continues to publicly extort victims. However, this person's...
CVE-2024-53079
In the Linux kernel, the following vulnerability has been resolved: mm/thp: fix deferred split unqueue naming and locking Recent changes are putting more pressure on THP deferred split queues: under load revealing long-standing races, causing listdel corruptions, "Bad page state"s and worse I kee...
The vulnerability of the fs/ntfs3 component in the Linux operating system, related to pointer arithmetic errors, allows a hacker to trigger a service failure.
The vulnerability of the fs/ntfs3 component in the Linux operating system is related to pointer swapping errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the UEFI Firmware component of Intel microprogramming systems, related to pointer swapping errors, allows attackers to escalate their privileges.
The vulnerability of the UEFI Firmware component of Intel microprocessors is related to pointer swapping errors. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the DRM/amdgpu cores in the Linux operating system, related to pointer swapping errors, allows a violator to trigger a service failure.
The vulnerability of the DRM/amdgpu cores in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
kernel: mm: cachestat: fix two shmem bugs
CVE-2024-35797 is a vulnerability in the Linux kernel’s memory management, specifically affecting the cachestat feature when handling shared memory. The flaw stems from race conditions during operations like swapping or invalidation, which can lead to out-of-bounds memory access or invalid pointe...
Vulnerability of the Layer-2 Bridge Network Driver for Windows operating systems, allowing a hacker to cause service failure.
The vulnerability of the Layer-2 Bridge Network Driver for Windows operating systems is related to pointer swapping errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
TracFone will pay $16 million to settle FCC data breach investigation
Following three separate data breaches between 2021 and 2023 which exposed the proprietary information PI of TracFone Wireless customers, the Federal Communications Commission FCC announced that the Verizon-owned company has agreed to pay a $16 million civil penalty to settle the government...