CVE-2017-1000367

CVE-2017-1000367 Abbiamo scoperto una vulnerabilità in getprocessttyname di sudo per Linux: questa funzione apre “/proc/pid/stat” man proc e legge il numero di dispositivo della tty dal campo 7 ttynr. Sfortunatamente, questi campi sono separati da spazi e il campo 2 comm, il nome del file del...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ipack: ipoctal: fixed the stack information leak. The name of the tty driver is also used after registering the driver, and it must specifically not be allocated on the stack to prevent information from leaking into the user spac...

EUVD-2008-4294

Malware in sbrugna...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986343)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986343 advisory. In the Linux kernel, the following vulnerability has been resolved: ipack: ipoctal: fix stack information leak The tty driver name is used also after registering the...

CVE-2008-4313

A certain Red Hat patch for tog-pegasus in OpenGroup Pegasus 2.7.0 does not properly configure the PAM tty name, which allows remote authenticated users to bypass intended access restrictions and send requests to OpenPegasus WBEM services...

tog-pegasus: WBEM services access not restricted to dedicated user after 2.7.0 rebase

A certain Red Hat patch for tog-pegasus in OpenGroup Pegasus 2.7.0 does not properly configure the PAM tty name, which allows remote authenticated users to bypass intended access restrictions and send requests to OpenPegasus WBEM services...