PT-2018-18304

Name of the Vulnerable Software and Affected Versions: libming version 0.4.8 Description: A heap-based buffer overflow exists in the getString function of util/decompile.c for DOUBLE data. This can be triggered by a crafted input, leading to a denial of service attack. Recommendations: For libmin...

CVE-2018-7868: Out-of-bounds Read

There is a heap-based buffer over-read in the getName function of util/decompile.c in libming 0.4.8 for CONSTANT8 data. A Crafted input will lead to a denial of service attack...

CVE-2018-7874: Improper Restriction of Operations within the Bounds of a Memory Buffer

An invalid memory address dereference was discovered in strlenext in util/decompile.c in libming 0.4.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

CVE-2018-7867: Out-of-bounds Write

There is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0.4.8 during a RegisterNumber sprintf. A Crafted input will lead to a denial of service attack...

CVE-2018-7877: Out-of-bounds Write

There is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0.4.8 for DOUBLE data. A Crafted input will lead to a denial of service attack...

PT-2018-18301

Name of the Vulnerable Software and Affected Versions: libming version 0.4.8 Description: A memory address dereference issue was found in the strlenext function within util/decompile.c of libming, leading to a segmentation fault, application crash, and denial of service. Recommendations: For...

CVE-2018-7866: NULL Pointer Dereference

A NULL pointer dereference was discovered in newVar3 in util/decompile.c in libming 0.4.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

PT-2018-18293

Name of the Vulnerable Software and Affected Versions: libming version 0.4.8 Description: A NULL pointer dereference was discovered in newVar3 in util/decompile.c, causing a segmentation fault and application crash, which leads to denial of service. Recommendations: For libming version 0.4.8,...

PT-2018-18300

Name of the Vulnerable Software and Affected Versions: libming version 0.4.8 Description: A heap-based buffer overflow exists in the getString function of util/decompile.c for INTEGER data. This can be triggered by a crafted input, leading to a denial of service attack. Recommendations: For libmi...

PT-2018-18297

Name of the Vulnerable Software and Affected Versions: libming version 0.4.8 Description: A memory address dereference issue was found in the getString function in util/decompile.c, specifically for CONSTANT16 data. This issue leads to a segmentation fault, causing the application to crash and...

GLSA-201803-02 : util-linux: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201803-02 util-linux: User-assisted execution of arbitrary code It was discovered that the umount bash-completion as provided by util-linux does not escap mount point paths. Impact : An attacker controlling a volume label could...

CVE-2018-7738

In util-linux before 2.32-rc1, bash-completion/umount allows local users to gain privileges by embedding shell commands in a mountpoint name, which is mishandled during a umount command within Bash by a different user, as demonstrated by logging in as root and entering umount followed by a tab...

DEBIAN-CVE-2018-7738

In util-linux before 2.32-rc1, bash-completion/umount allows local users to gain privileges by embedding shell commands in a mountpoint name, which is mishandled during a umount command within Bash by a different user, as demonstrated by logging in as root and entering umount followed by a tab...

CVE-2018-7738

In util-linux before 2.32-rc1, bash-completion/umount allows local users to gain privileges by embedding shell commands in a mountpoint name, which is mishandled during a umount command within Bash by a different user, as demonstrated by logging in as root and entering umount followed by a tab...

UBUNTU-CVE-2018-7738

In util-linux before 2.32-rc1, bash-completion/umount allows local users to gain privileges by embedding shell commands in a mountpoint name, which is mishandled during a umount command within Bash by a different user, as demonstrated by logging in as root and entering umount followed by a tab...

CVE-2018-7738

In util-linux before 2.32-rc1, bash-completion/umount allows local users to gain privileges by embedding shell commands in a mountpoint name, which is mishandled during a umount command within Bash by a different user, as demonstrated by logging in as root and entering umount followed by a tab...

util-linux: User-assisted execution of arbitrary code

Background util-linux is a suite of Linux programs including mount and umount, programs used to mount and unmount filesystems. Description It was discovered that the umount bash-completion as provided by util-linux does not escap mount point paths. Impact An attacker controlling a volume label...

util-linux elevation of privilege vulnerability

util-linux is a set of software packages used in Linux systems and contains a variety of system administration tools, it provides tools to load, unload, format, partition and manage hard drives, open tty ports and get kernel messages. A security vulnerability exists in bash-completion/umount in...

CVE-2018-7738

The CVE-2018-7738 entry concerns util-linux before 2.32-rc1, where the bash-completion/umount script mishandles certain mountpoint names, allowing a local attacker to escalate privileges via an autocompletion sequence in Bash. Exploitation is demonstrated by embedding shell commands in a mountpoi...

CVE-2018-7738

In util-linux before 2.32-rc1, bash-completion/umount allows local users to gain privileges by embedding shell commands in a mountpoint name, which is mishandled during a umount command within Bash by a different user, as demonstrated by logging in as root and entering umount followed by a tab...