8 matches found
EUVD-1999-1233
Malware in sbrugna...
EUVD-2025-13114
Malicious code in bioql PyPI...
CVE-2024-26766 IB/hfi1: Fix sdma.h tx->num_descs off-by-one error
In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix sdma.h tx-numdescs off-by-one error Unfortunately the commit fd8958efe877 introduced another error causing the descs array to overflow. This reults in further crashes easily reproducible by sendmsg system call...
CVE-2021-26354
Insufficient bounds checking in ASP may allow an attacker to issue a system call from a compromised ABL which may cause arbitrary memory values to be initialized to zero, potentially leading to a loss of integrity...
CVE-2004-0427
The dofork function in Linux 2.4.x before 2.4.26, and 2.6.x before 2.6.6, does not properly decrement the mmcount counter when an error occurs after the mmstruct for a child process has been activated, which triggers a memory leak that allows local users to cause a denial of service memory...
Mozilla Bugzilla 2.42.62.82.10 - Arbitrary Command Execution
Mozilla Bugzilla 2.42.62.82.10 - Arbitrary Command Execution source: https://www.securityfocus.com/bid/1199/info Bugzilla is a web-based bug-tracking system based on Perl and MySQL. It allows people to submit bugs and catalogs them. Bugzilla is prone to a vulnerability which may allow remote user...
fcheck v.2.7.45 and insecure use of Perl's system()
The short explanation: fcheck is a file integrity checker written in perl. It can send warnings to syslog via an external program such as logger1. Because it calls system with a scalar argument, a malicious user can cause it to execute programs by creating files with shell metacharacters in their...
Local Denial-of-Service attack against Linux
This amusing little program will hang Linux 2.2.12 default Red Hat 6.1, 2.2.14 latest stable kernel and 2.3.99-pre2 latest development kernel on my 6x86 scratch machine and our various Pentium development machines. Note that this does not require any special privileges. The send system call...