CVE-2023-5834 Vagrant’s Windows Installer Allowed Directory Junction Write

HashiCorp Vagrant's Windows installer targeted a custom location with a non-protected path that could be junctioned, introducing potential for unauthorized file system writes. Fixed in Vagrant 2.4.0...

CVE-2023-5834

HashiCorp Vagrant Windows installer vulnerability CVE-2023-5834: the installer targeted a custom, non-protected path that could be junctioned, enabling unauthorized write to the file system. Root cause: directory junction/write risk in the Windows installer. Affected product/component: HashiCorp ...

CVE-2023-5834 Vagrant’s Windows Installer Allowed Directory Junction Write

HashiCorp Vagrant's Windows installer targeted a custom location with a non-protected path that could be junctioned, introducing potential for unauthorized file system writes. Fixed in Vagrant 2.4.0...

Vagrant’s Windows Installer Allowed Directory Junction Write

Summary The Vagrant Windows installer targeted a custom location with a non-protected path that could be junctioned, introducing potential for unauthorized file system writes. This vulnerability, CVE-2023-5834, was fixed in Vagrant 2.4.0. Background Vagrant is distributed in a range of...

Vagrant Security Vulnerabilities

Vagrant is a command line utility for managing the lifecycle of virtual machines. Isolates dependencies and their configurations in a single disposable and consistent environment. A security vulnerability exists in HashiCorp Vagrant versions prior to 2.4.0 that stems from the presence of...

PT-2023-32366 · Hashicorp · Hashicorp Vagrant

Name of the Vulnerable Software and Affected Versions: HashiCorp Vagrant versions prior to 2.4.0 Description: The issue concerns HashiCorp Vagrant's Windows installer, which targeted a custom location with a non-protected path that could be junctioned. This introduced the potential for unauthoriz...

The vulnerability of the information collection utility for running processes, the procps-ng command-line utility, allows a hacker to cause a service failure.

The vulnerability of the procps-ng command-line tool for collecting information about running processes is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure by writing unlimited amounts of unfilter...

The vulnerability of the Titan SFTP and Titan MFT NextGen server software lies in improper session management, allowing attackers to execute arbitrary code.

The vulnerability of the Titan SFTP and Titan MFT NextGen server software lies in improper session management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by writing the file to any location within the file system...

ROS-20231020-03

The ps utility vulnerability is related to out-of-field writes. Exploitation of the vulnerability could allow an attacker acting remotely to write unlimited amounts of unfiltered data to the heap of the process...

Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-20220304.420)

The version of AHV installed on the remote host is prior to 20220304.420. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-20220304.420 advisory. - An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via...

Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-20220304.10057)

The version of AHV installed on the remote host is prior to 20220304.10057. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-20220304.10057 advisory. - An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes...

PT-2023-6214 · South River Technologies · Titan Mft +1

Name of the Vulnerable Software and Affected Versions: South River Technologies' Titan MFT and Titan SFTP servers affected versions not specified Description: A session fixation issue allows an attacker to bypass server authentication by tricking an administrator into authorizing a session ID of...

The vulnerability of the Microsoft Visual Studio software lies in the use of a name with an incorrect reference. This allows attackers to write arbitrary files into the system.

The vulnerability of the Microsoft Visual Studio software relates to the use of a name with an incorrect reference. Exploiting this vulnerability could allow a malicious actor to write arbitrary files into the system remotely...

kernel: netfilter: use-after-free in nf_tables when processing batch requests can lead to privilege escalation

A use-after-free vulnerability was found in the Netfilter subsystem of the Linux kernel when processing batch requests to update nftables configuration. This vulnerability can be abused to perform arbitrary reads and writes in kernel memory. A local user with CAPNETADMIN capability could use this...

Dell SmartFabric Storage Software 路径遍历漏洞

Dell SmartFabric Storage Software is a stand-alone storage software solution from Dell USA. A path traversal vulnerability exists in Dell SmartFabric Storage Software, which arises from the program failing to properly filter for specific elements in a resource or file path. An attacker could use...

USN-6411-1 exim4 vulnerabilities

It was discovered that Exim incorrectly handled certain challenge requests. A remote attacker could possibly use this issue to perform out-of-bounds reads, resulting in information leakage. CVE-2023-42114 It was discovered that Exim incorrectly handled validation of user-supplied data. A remote...

Out Of Bound Writes

mpfr4 is vulnerable to Out of Bound Writes. The vulnerability exists due to a buffer overflow which allows an attacker to perform out of bound writes...

MediaTek Chip Input Validation Error Vulnerability

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. An input validation error vulnerability exists in the MediaTek chips, which stems from an integer overflow in the vpu module and may result in out-of-bounds writes...

MediaTek Chip Input Validation Error Vulnerability

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. An input validation error vulnerability exists in the MediaTek chips, which stems from an integer overflow in the apusys module that could result in out-of-bounds writes...

MediaTek Chip Buffer Error Vulnerability

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A buffer error vulnerability exists in the MediaTek chips, which stems from a video module privilege bypass that could result in out-of-bounds writes...