40 matches found
CVE-2021-46952
In the Linux kernel, the following vulnerability has been resolved: NFS: fscontext: validate UDP retrans to prevent shift out-of-bounds Fix shift out-of-bounds in xprtcalcmajortimeo. This is caused by a garbage timeout retrans mount option being passed to nfs mount, in this case from syzkaller. I...
kernel: use after free in SUNRPC subsystem
A use-after-free flaw was found in the Linux kernel’s net/sunrpc/xprt.c function in the Remote Procedure Call SunRPC protocol. This flaw allows a local attacker to crash the system, leading to a kernel information leak issue...
Important: kernel
Issue Overview: In the Linux kernel, the following vulnerability has been resolved: dm: fix mempool NULL pointer race when completing IO CVE-2021-47435 A kernel information leak flaw was identified in the scsiioctl function in drivers/scsi/scsiioctl.c in the Linux kernel. This flaw allows a local...
DEBIAN-CVE-2018-14622
A null-pointer dereference vulnerability was found in libtirpc before version 0.3.3-rc3. The return value of makefdxprt was not checked in all instances, which could lead to a crash when the server exhausted the maximum number of available file descriptors. A remote attacker could cause an...
The vulnerability of the RPCbind server for dynamic naming services allows a attacker to cause a service failure.
The vulnerability of the xprtsetcaller function of dynamic naming server RPC ports is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to cause service failures by using specially crafted packets containing the PMAPCALLIT code...
rpcbind: denial of service
A use-after-free vulnerability has been found in rpcbind, leading to memory corruption then crash in the svcdodestroy function while trying to free a corrupted xprt-xpnetid pointer...
DLA-311-1 rpcbind - security update
Bulletin has no description...
PT-2015-3373 · None +3 · Libtirpc +3
Name of the Vulnerable Software and Affected Versions: libtirpc versions prior to 0.3.3-rc3 Description: A null-pointer dereference issue was found in the makefd xprt function, where the return value was not checked in all instances. This could lead to a crash when the server exhausts the maximum...
The vulnerability of the OpenSUSE operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the XFree86-Xprt package of the openSUSE operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...
Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the xorg-x11-Xprt package of the SUSE Linux Enterprise operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the xorg-x11-Xprt package of the OpenSUSE operating system can lead to violations of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
SLES9: Security update for some XFree86 modules
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: XFree86-libs XFree86-Xvnc XFree86-server XFree86-Xprt XFree86-Xnest XFree86-Xvfb For more information, please visit the referenced security advisories. More...
SLES9: Security update for XFree86
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: XFree86-Xprt XFree86-Xvfb XFree86-Xvnc XFree86-server XFree86-Xnest For more information, please visit the referenced security advisories. More details may...
SLES9: Security update for XFree86
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: XFree86-Xprt XFree86-Xvfb XFree86-Xvnc XFree86-server XFree86-Xnest For more information, please visit the referenced security advisories. More details may...
openSUSE 10 Security Update : km_drm (km_drm-4484)
This update fixes the following issues: X Font Server buildrange Integer Overflow Vulnerability IDEF2708, X Font Server swapchar2b Heap Overflow Vulnerability IDEF2709, Composite extension buffer overflow. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package check...
Slackware 10.0 / 10.1 / 10.2 / current : X.Org pixmap overflow (SSA:2005-269-02)
New X.Org server packages are available for Slackware 10.0, 10.1, 10.2, and -current to fix a security issue. An integer overflow in the pixmap handling code may allow the execution of arbitrary code through a specially crafted pixmap. Slackware 10.2 was patched against this vulnerability before...
CVE-2005-3099
Unspecified vulnerability in the 1 Xsun and 2 Xprt commands in Solaris 7, 8, 9, and 10 allows local users to execute arbitrary code...
CVE-2005-3099
Unspecified vulnerability in the 1 Xsun and 2 Xprt commands in Solaris 7, 8, 9, and 10 allows local users to execute arbitrary code...
CVE-2005-3099
The CVE-2005-3099 entry concerns an unspecified vulnerability in the Xsun and Xprt components of Solaris 7–10 that allows local code execution. Connected documents identify concrete remediation patches for Solaris 10: Xsun patches such as 119060-64/65, 119059-66/69, 119059-71/72/74, and 119060-73...
