CVE-2018-7738

In util-linux before 2.32-rc1, bash-completion/umount allows local users to gain privileges by embedding shell commands in a mountpoint name, which is mishandled during a umount command within Bash by a different user, as demonstrated by logging in as root and entering umount followed by a tab...

CVE-2018-7738: Undefined Security Weakness

In util-linux before 2.32-rc1, bash-completion/umount allows local users to gain privileges by embedding shell commands in a mountpoint name, which is mishandled during a umount command within Bash by a different user, as demonstrated by logging in as root and entering umount followed by a tab...

PT-2018-3086 · Gnu +5 · Util-Linux +5

Name of the Vulnerable Software and Affected Versions: JunOS version affected versions not specified util-linux versions prior to 2.32-rc1 Description: The issue exists due to insufficient input validation in the srxpfe process of JunOS, allowing a remote attacker to cause a denial of service. In...

CVE-2018-6764

util/virlog.c in libvirt does not properly determine the hostname on LXC container startup, which allows local guest OS users to bypass an intended container protection mechanism and execute arbitrary commands via a crafted NSS module...

CVE-2018-6764: Origin Validation Error

util/virlog.c in libvirt does not properly determine the hostname on LXC container startup, which allows local guest OS users to bypass an intended container protection mechanism and execute arbitrary commands via a crafted NSS module...

CCN-lite Buffer Overflow Vulnerability

CCN-lite is a lightweight and functionally interoperable implementation of the CCNx protocol for XEROX PARC. A buffer overflow vulnerability exists in util/ccnl-common.c in versions of CCN-lite prior to 2.0.0. An attacker could exploit this vulnerability to cause a buffer overflow via incorrect...

CVE-2017-12469

Buffer overflow in util/ccnl-common.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by leveraging incorrect memory allocation...

PT-2018-5408

Name of the Vulnerable Software and Affected Versions: CCN-lite versions prior to 2.00 Description: A buffer overflow issue exists due to incorrect memory allocation in util/ccnl-common.c, allowing context-dependent attackers to have an unspecified impact. Recommendations: For versions prior to...

CVE-2017-12469: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in util/ccnl-common.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by leveraging incorrect memory allocation...

PT-2018-3357

Name of the Vulnerable Software and Affected Versions: libvirt affected versions not specified Description: The issue is related to the util/virlog.c in libvirt, which does not properly determine the hostname on LXC container startup. This allows local guest OS users to bypass an intended contain...

PT-2018-17501

Name of the Vulnerable Software and Affected Versions libming versions prior to 0.4.8 Description The issue is related to a heap-based buffer overflow in the printDefineFont2 function, located in util/listfdb.c. This may allow attackers to cause a denial of service or have an unspecified impact v...

aequitas (>=0.26.0, <=0.42.0), django-name (2.0.0) +3 more potentially affected by CVE-2018-5773 via markdown2 (>=2.3.0, <=2.3.5)

markdown2 PYPI version =2.3.0, =0.26.0, =0.0.1, =0.4.3, =4.2.0, =5.5.5 Source cves: CVE-2018-5773 Source advisory: MEND:CVE-2018-5773...

Oracle Linux 6 : libvirt (ELSA-2018-0030)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-0030 advisory. - util: Implement virFileReadHeaderFD CVE-2017-5715 - util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD CVE-2017-5715 - util: introduce...

Oracle Linux 7 : libvirt (ELSA-2018-0029)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-0029 advisory. - qemu: Properly store microcode version in QEMU caps cache CVE-2017-5715 - util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD CVE-2017-5715 -...

CVE-2013-4364: Improper Link Resolution Before File Access

1 oo-analytics-export and 2 oo-analytics-import in the openshift-origin-broker-util package in Red Hat OpenShift Enterprise 1 and 2 allow local users to have unspecified impact via a symlink attack on an unspecified file in /tmp...

libming denial of service vulnerability (CNVD-2018-03975)

libming is a Flash SWF output library written in C for use in systems developed in PHP, Perl, etc. It can be used to output Flash SWF files to the system. A security vulnerability exists in the 'readSBits' function in the util/read.c file in libming version 0.4.8. A remote attacker can exploit th...

PT-2018-4101

Name of the Vulnerable Software and Affected Versions Red Hat OpenShift Enterprise versions 1 and 2 Description The issue allows local users to have unspecified impact via a symlink attack on an unspecified file in /tmp. This is related to the oo-analytics-export and oo-analytics-import component...

libvirt security update

0.10.2-62.0.1.el69.1 - Replace docs/et.png in tarball with blank image 0.10.2-62.el69.1 - util: Implement virFileReadHeaderFD CVE-2017-5715 - util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD CVE-2017-5715 - util: introduce virHostCPUGetMicrocodeVersion CVE-2017-5715 - conf:...

CVE-2017-16584

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.2.25013. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2017-17529

af/util/xp/utgofile.cpp in AbiWord 3.0.2-2 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL...