321 matches found
CVE-2013-4235
shadow: TOCTOU time-of-check time-of-use race condition when copying and removing directory trees...
CVE-2013-4235
CVE-2013-4235 refers to a shadow-utils TOCTOU (time-of-check-time-of-use) race condition when copying and removing directory trees. The Connected IBM X-Force bulletin lists this CVE with CWE-367, a base score of 3.7, CVSS vector (AV:L/AC:H/Au:N/C:P/I:P/A:P). The Initial description notes the race...
CVE-2013-4235: Time-of-check Time-of-use (TOCTOU) Race Condition
shadow: TOCTOU time-of-check time-of-use race condition when copying and removing directory trees...
CVE-2013-4235
shadow: TOCTOU time-of-check time-of-use race condition when copying and removing directory trees...
Stack overflow
Hardlink before 0.1.2 suffer from multiple stack-based buffer overflow flaws because of the way directory trees with deeply nested directories are processed. A remote attacker could provide a specially-crafted directory tree, and trick the local user into consolidating it, leading to hardlink...
CVE-2011-3630: Out-of-bounds Write
Hardlink before 0.1.2 suffer from multiple stack-based buffer overflow flaws because of the way directory trees with deeply nested directories are processed. A remote attacker could provide a specially-crafted directory tree, and trick the local user into consolidating it, leading to hardlink...
CVE-2012-5630
libuser 0.56 and 0.57 has a TOCTOU time-of-check time-of-use race condition when copying and removing directory trees...
CVE-2012-5630
libuser 0.56 and 0.57 has a TOCTOU time-of-check time-of-use race condition when copying and removing directory trees...
libcomps: use after free when merging two objmrtrees
A use-after-free flaw has been discovered in libcomps in the way ObjMRTrees are merged. An attacker, who is able to make an application read a crafted comps XML file, may be able to crash the application or execute malicious code...
[SECURITY] Fedora 29 Update: js-jquery-jstree-3.3.8-1.fc29
jsTree is jquery plugin, that provides interactive trees. It is absolutely free, open source and distributed under the MIT license. jsTree is easily extendable, themable and configurable, it supports HTML & JSON data sources, AJAX & async callback loading. jsTree functions properly in either...
[SECURITY] Fedora 30 Update: js-jquery-jstree-3.3.8-1.fc30
jsTree is jquery plugin, that provides interactive trees. It is absolutely free, open source and distributed under the MIT license. jsTree is easily extendable, themable and configurable, it supports HTML & JSON data sources, AJAX & async callback loading. jsTree functions properly in either...
CVE-2018-20247
In Foxit Quick PDF Library all versions prior to 16.12, issue where loading a malformed or malicious PDF containing a recursive page tree structure using the LoadFromFile, LoadFromString or LoadFromStream functions results in a stack overflow...
Github Account of Gentoo Linux Hacked, Code Replaced With Malware
Downloaded anything from Gentoo's GitHub account yesterday? Consider those files compromised and dump them now—as an unknown group of hackers or an individual managed to gain access to the GitHub account of the Gentoo Linux distribution on Thursday and replaced the original source code with a...
DEBIAN-CVE-2017-5404
A use-after-free error can occur when manipulating ranges in selections with one node inside a native anonymous tree and one node outside of it. This results in a potentially exploitable crash. This vulnerability affects Firefox 52, Firefox ESR 45.8, Thunderbird 52, and Thunderbird 45.8...
MyHeritage Says Over 92 Million User Accounts Have Been Compromised
MyHeritage, the Israel-based DNA testing service designed to investigate family history, has disclosed that the company website was breached last year by unknown attackers, who stole login credentials of its more than 92 million customers. The company learned about the breach on June 4, 2018, aft...
CVE-2017-18193
fs/f2fs/extentcache.c in the Linux kernel, before 4.13, mishandles extent trees. This allows local users to cause a denial of service via an application with multiple threads...
Design/Logic Flaw
fs/f2fs/extentcache.c in the Linux kernel before 4.13 mishandles extent trees, which allows local users to cause a denial of service BUG via an application with multiple threads...
CVE-2017-18193
fs/f2fs/extentcache.c in the Linux kernel before 4.13 mishandles extent trees, which allows local users to cause a denial of service BUG via an application with multiple threads...