redhat Archives - CVE Vulnerability

CVE-2008-6755

Sun, 26 Feb 2023 09:11:41 +0000

ZoneMinder 1.23.3 on Fedora 10 sets the ownership of /etc/zm.conf to the apache user account, and sets the permissions to 0600, which makes it easier for remote attackers to modify this file by accessing it through a (1) PHP or (2) CGI script.

The post CVE-2008-6755 appeared first on CVE Vulnerability.

CVE-2008-2932

Sun, 26 Feb 2023 09:09:46 +0000

Heap-based buffer overflow in Red Hat adminutil 1.1.6 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via % (percent) encoded HTTP input to unspecified CGI scripts in Fedora Directory Server. NOTE: this vulnerability exists because of an incorrect fix for CVE-2008-2929.

The post CVE-2008-2932 appeared first on CVE Vulnerability.

CVE-2008-2808

Sun, 26 Feb 2023 09:09:42 +0000

Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly escape HTML in file:// URLs in directory listings, which allows remote attackers to conduct cross-site scripting (XSS) attacks or have unspecified other impact via a crafted filename.

The post CVE-2008-2808 appeared first on CVE Vulnerability.

CVE-2018-9568

Sun, 26 Feb 2023 06:51:51 +0000

In sk_clone_lock of sock.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-113509306. References: Upstream kernel.

The post CVE-2018-9568 appeared first on CVE Vulnerability.

CVE-2018-8905

Sun, 26 Feb 2023 06:51:39 +0000

In LibTIFF 4.0.9, a heap-based buffer overflow occurs in the function LZWDecodeCompat in tif_lzw.c via a crafted TIFF file, as demonstrated by tiff2ps.

The post CVE-2018-8905 appeared first on CVE Vulnerability.

CVE-2018-8781

Sun, 26 Feb 2023 06:51:35 +0000

The udl_fb_mmap function in drivers/gpu/drm/udl/udl_fb.c at the Linux kernel version 3.4 and up to and including 4.15 has an integer-overflow vulnerability allowing local users with access to the udldrmfb driver to obtain full read and write permissions on kernel physical pages, resulting in a code execution in kernel space.

The post CVE-2018-8781 appeared first on CVE Vulnerability.

CVE-2018-7750

Sun, 26 Feb 2023 06:51:09 +0000

transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed before processing other requests, as demonstrated by channel-open. A customized SSH client can simply skip the authentication step.

The post CVE-2018-7750 appeared first on CVE Vulnerability.

CVE-2018-5968

Sun, 26 Feb 2023 06:50:31 +0000

FasterXML jackson-databind through 2.8.11 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 and CVE-2017-17485 deserialization flaws. This is exploitable via two different gadgets that bypass a blacklist.

The post CVE-2018-5968 appeared first on CVE Vulnerability.

CVE-2018-3830

Sun, 26 Feb 2023 06:49:50 +0000

Kibana versions 5.3.0 to 6.4.1 had a cross-site scripting (XSS) vulnerability via the source field formatter that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.

The post CVE-2018-3830 appeared first on CVE Vulnerability.

CVE-2018-20662

Sun, 26 Feb 2023 06:48:40 +0000

In Poppler 0.72.0, PDFDoc::setup in PDFDoc.cc allows attackers to cause a denial-of-service (application crash caused by Object.h SIGABRT, because of a wrong return value from PDFDoc::setup) by crafting a PDF file in which an xref data structure is mishandled during extractPDFSubtype processing.

The post CVE-2018-20662 appeared first on CVE Vulnerability.