enterprise_linux_server_tus Archives - CVE Vulnerability

CVE-2018-16877

Sun, 26 Feb 2023 06:47:13 +0000

A flaw was found in the way pacemaker’s client-server authentication was implemented in versions up to and including 2.0.0. A local attacker could use this flaw, and combine it with other IPC weaknesses, to achieve local privilege escalation.

The post CVE-2018-16877 appeared first on CVE Vulnerability.

CVE-2018-14633

Sun, 26 Feb 2023 06:46:24 +0000

A security flaw was found in the chap_server_compute_md5() function in the ISCSI target code in the Linux kernel in a way an authentication request from an ISCSI initiator is processed. An unauthenticated remote attacker can cause a stack buffer overflow and smash up to 17 bytes of the stack. The attack requires the iSCSI target to be enabled on the victim host. Depending on how the target’s code was built (i.e. depending on a compiler, compile flags and hardware architecture) an attack may lead to a system crash and thus to a denial-of-service or possibly to a non-authorized access to data exported by an iSCSI target. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although we believe it is highly unlikely. Kernel versions 4.18.x, 4.14.x and 3.10.x are believed to be vulnerable.

The post CVE-2018-14633 appeared first on CVE Vulnerability.

CVE-2019-14814

Sun, 26 Feb 2023 06:30:42 +0000

There is heap-based buffer overflow in Linux kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code.

The post CVE-2019-14814 appeared first on CVE Vulnerability.

CVE-2019-14815

Sun, 26 Feb 2023 06:30:42 +0000

A vulnerability was found in Linux Kernel, where a Heap Overflow was found in mwifiex_set_wmm_params() function of Marvell Wifi Driver.

The post CVE-2019-14815 appeared first on CVE Vulnerability.

CVE-2019-13313

Sun, 26 Feb 2023 06:30:12 +0000

libosinfo 1.5.0 allows local users to discover credentials by listing a process, because credentials are passed to osinfo-install-script via the command line.

The post CVE-2019-13313 appeared first on CVE Vulnerability.

CVE-2019-12527

Sun, 26 Feb 2023 06:29:54 +0000

An issue was discovered in Squid 4.0.23 through 4.7. When checking Basic Authentication with HttpHeader::getAuth, Squid uses a global buffer to store the decoded data. Squid does not check that the decoded length isn’t greater than the buffer, leading to a heap-based buffer overflow with user controlled data.

The post CVE-2019-12527 appeared first on CVE Vulnerability.

CVE-2019-11884

Sun, 26 Feb 2023 06:29:42 +0000

The do_hidp_sock_ioctl function in net/bluetooth/hidp/sock.c in the Linux kernel before 5.0.15 allows a local user to obtain potentially sensitive information from kernel stack memory via a HIDPCONNADD command, because a name field may not end with a ” character.

The post CVE-2019-11884 appeared first on CVE Vulnerability.

CVE-2019-11459

Sun, 26 Feb 2023 06:29:32 +0000

The tiff_document_render() and tiff_document_get_thumbnail() functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors from TIFFReadRGBAImageOriented(), leading to uninitialized memory use when processing certain TIFF image files.

The post CVE-2019-11459 appeared first on CVE Vulnerability.