debian debian linux 7.0 vulnerabilities and exploits

(subscribe to this query)

4.9

CVSSv2

In the Linux Kernel before version 4.15.8, 4.14.25, 4.9.87, 4.4.121, 4.1.51, and 3.2.102, an error in the "_sctp_make_chunk()" function (net/sctp/sm_make_chunk.c) when handling SCTP packets length can be exploited to cause a kernel crash....

Linux Linux Kernel Debian Debian Linux 7.0 Debian Debian Linux 8.0 Debian Debian Linux 9.0 Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Server 7.0 Redhat Virtualization Host 4.0 Redhat Enterprise Linux Workstation 7.01 Github repository available

7.5

CVSSv2

The Debian build procedure for the smokeping package in wheezy before 2.6.8-2+deb7u1 and jessie before 2.6.9-1+deb8u1 does not properly configure the way Apache httpd passes arguments to smokeping_cgi, which allows remote attackers to execute arbitrary code via crafted CGI...

Debian Debian Linux 8.0 Debian Debian Linux 7.0

6.8

CVSSv2

The SwCTBWrapper::Read function in sw/source/filter/ww8/ww8toolbar.cxx in LibreOffice before 5.4.6.1 and 6.x before 6.0.2.1 does not validate a customizations index, which allows remote attackers to cause a denial of service (heap-based buffer overflow with write access) or...

Debian Debian Linux 8.0 Debian Debian Linux 7.0 Debian Debian Linux 9.0 Libreoffice Libreoffice Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Workstation 7.0 Redhat Enterprise Linux Server 7.0 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 14.04

6.8

CVSSv2

sot/source/sdstor/stgstrms.cxx in LibreOffice before 5.4.5.1 and 6.x before 6.0.1.1 uses an incorrect integer data type in the StgSmallStrm class, which allows remote attackers to cause a denial of service (use-after-free with write access) or possibly have unspecified other...

Libreoffice Libreoffice Debian Debian Linux 8.0 Debian Debian Linux 7.0 Debian Debian Linux 9.0 Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Workstation 7.0 Redhat Enterprise Linux Server 7.0 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 14.04

7.2

CVSSv2

An issue was discovered in Amanda 3.3.1. A user with backup privileges can trivially compromise a client installation. The "runtar" setuid root binary does not check for additional arguments supplied after --create, allowing users to manipulate commands and perform...

Zmanda Amanda 3.3.1 Redhat Enterprise Linux 7.0 Debian Debian Linux 8.0 Debian Debian Linux 10.0 Debian Debian Linux 7.0 Debian Debian Linux 9.0

6.2

CVSSv2

Race condition in the prepare_binprm function in fs/exec.c in the Linux kernel before 3.19.6 allows local users to gain privileges by executing a setuid program at a time instant when a chown to root is in progress, and the ownership is changed but the setuid bit is not yet...

Linux Linux Kernel Debian Debian Linux 8.0 Debian Debian Linux 7.01 Github repository available

4.9

CVSSv2

An issue was discovered in Xen through 4.10.x allowing x86 HVM guest OS users to cause a denial of service (host OS infinite loop) in situations where a QEMU device model attempts to make invalid transitions between states of a request....

Debian Debian Linux 9.0 Debian Debian Linux 8.0 Debian Debian Linux 7.0 Xen Xen

3.5

CVSSv2

wp-includes/general-template.php in WordPress before 4.9.1 does not properly restrict the lang attribute of an HTML element, which might allow attackers to conduct XSS attacks via the language setting of a site....

Wordpress Wordpress Debian Debian Linux 8.0 Debian Debian Linux 9.0 Debian Debian Linux 7.0

7.5

CVSSv2

Awstats version 7.6 and earlier is vulnerable to a path traversal flaw in the handling of the "config" and "migrate" parameters resulting in unauthenticated remote code execution....

Awstats Awstats Debian Debian Linux 7.0 Debian Debian Linux 8.0 Debian Debian Linux 9.0

7.2

CVSSv2

An issue was discovered in Xen through 4.10.x allowing x86 HVM guest OS users to cause a denial of service (unexpectedly high interrupt number, array overrun, and hypervisor crash) or possibly gain hypervisor privileges by setting up an HPET timer to deliver interrupts in...

Xen Xen Debian Debian Linux 8.0 Debian Debian Linux 7.0 Debian Debian Linux 9.0

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook