roee hay vulnerabilities and exploits

(subscribe to this query)

7.8

CVSSv3

In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field. This could lead to the size-remaining variable wrapping and the data pointer going over the end of the buffer. This could possibly lead to memory...

Linux Linux Kernel Debian Debian Linux 8.0 Debian Debian Linux 9.0 Redhat Enterprise Mrg 2.0

7.8

CVSSv3

Linux drivers/char/lp.c Out-of-Bounds Write. Due to a missing bounds check, and the fact that parport_ptr integer is static, a 'secure boot' kernel command line adversary (can happen due to bootloader vulns, e.g. Google Nexus 6's CVE-2016-10277, where due to a vuln...

Linux Linux Kernel 4.12 Linux Linux Kernel Debian Debian Linux 8.0

7.8

CVSSv3

The Linux Kernel imposes a size restriction on the arguments and environmental strings passed through RLIMIT_STACK/RLIM_INFINITY (1/4 of the size), but does not take the argument and environment pointers into account, which allows malicious users to bypass this limitation. This a...

Linux Linux Kernel

7.8

CVSSv3

An elevation of privilege vulnerability in the Motorola bootloader could enable a local malicious application to execute arbitrary code within the context of the bootloader. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may r...

Linux Linux Kernel 3.18 Linux Linux Kernel 3.10

1 EDB exploit3 Github repositories

7

CVSSv3

Race condition in the fsnotify implementation in the Linux kernel up to and including 4.12.4 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application that leverages simultaneous execution of the inotify_handle_event and vfs_...

Linux Linux Kernel

1 EDB exploit4 Github repositories

7

CVSSv3

The regulator_ena_gpio_free function in drivers/regulator/core.c in the Linux kernel prior to 3.19 allows local users to gain privileges or cause a denial of service (use-after-free) via a crafted application.

Linux Linux Kernel Linux Linux Kernel 3.10 Google Android

5.5

CVSSv3

The vmw_gb_surface_define_ioctl function (accessible via DRM_IOCTL_VMW_GB_SURFACE_CREATE) in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel up to and including 4.11.4 defines a backup_handle variable but does not give it an initial value. If one attempts to create a ...

Linux Linux Kernel

5.5

CVSSv3

The vmw_gb_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel up to and including 4.10.7 does not validate certain levels data, which allows local users to cause a denial of service (system hang) via a crafted ioctl call for a /dev/dri/re...

Linux Linux Kernel

NA

Cross-application scripting vulnerability in the Browser URL loading functionality in Android 2.3.4 and 3.1 allows local applications to bypass the sandbox and execute arbitrary Javascript in arbitrary domains by (1) causing the MAX_TAB number of tabs to be opened, then loading a...

Google Android 3.1 Google Android 2.3.4

1 EDB exploit1 Article

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook