serenityos serenityos vulnerabilities and exploits

(subscribe to this query)

7.8

CVSSv3

Kernel/VM/MemoryManager.cpp in SerenityOS prior to 2019-12-30 does not reject syscalls with pointers into the kernel-only virtual address space, which allows local users to gain privileges by overwriting a return address that was found on the kernel stack.

Serenityos Serenityos

7.5

CVSSv3

SerenityOS contains a buffer overflow in the set_range test in TestBitmap which could allow malicious users to obtain sensitive information.

Serenityos Serenityos -

7.5

CVSSv3

SerenityOS in test-crypto.cpp contains a stack buffer overflow which could allow malicious users to obtain sensitive information.

Serenityos Serenityos -

9.8

CVSSv3

SerenityOS before commit 3844e8569689dd476064a0759d704bc64fb3ca2c contains a directory traversal vulnerability in tar/unzip that may lead to command execution or privilege escalation.

Serenityos Serenityos

7.8

CVSSv3

SerenityOS fixed as of c9f25bca048443e317f1994ba9b106f2386688c3 contains a buffer overflow vulnerability in LibTextCode through opening a crafted file.

Serenityos Serenityos

9.8

CVSSv3

A vulnerability was found in SerenityOS. It has been rated as critical. Affected by this issue is the function initialize_typed_array_from_array_buffer in the library Userland/Libraries/LibJS/Runtime/TypedArray.cpp. The manipulation leads to integer overflow. The exploit has been...

Serenityos Serenityos

7.5

CVSSv3

SerenityOS Unspecified is affected by: Buffer Overflow. The impact is: obtain sensitive information (context-dependent). The component is: /Userland/Libraries/LibCrypto/ASN1/DER.h Crypto::der_decode_sequence() function. The attack vector is: Parsing RSA Key ASN.1.

Serenityos Serenityos -

9.1

CVSSv3

SerenityOS 2021-03-27 contains a buffer overflow vulnerability in the EndOfCentralDirectory::read() function.

Serenityos Serenityos 2021-03-27

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook