canonical ubuntu linux 15.10 vulnerabilities and exploits

(subscribe to this query)

LXCFS prior to 0.12 does not properly enforce directory escapes, which might allow local users to gain privileges by (1) querying or (2) updating a cgroup.

Canonical Ubuntu Linux 15.04 Canonical Ubuntu Linux 15.10 Canonical Lxcfs

The do_write_pids function in lxcfs.c in LXCFS prior to 0.12 does not properly check permissions, which allows local users to gain privileges by writing a pid to the tasks file.

Canonical Ubuntu Linux 15.04 Canonical Ubuntu Linux 15.10 Canonical Lxcfs

LXD prior to 2.0.2 uses world-readable permissions for /var/lib/lxd/zfs.img when setting up a loop based ZFS pool, which allows local users to copy and read data from arbitrary containers via unspecified vectors.

Canonical Ubuntu Linux 15.10 Canonical Ubuntu Linux 16.04 Canonical Lxd

LXD prior to 2.0.2 does not properly set permissions when switching an unprivileged container into privileged mode, which allows local users to access arbitrary world readable paths in the container directory via unspecified vectors.

Canonical Ubuntu Linux 15.10 Canonical Ubuntu Linux 16.04 Canonical Lxd 2.0.1

The OZWPAN driver in the Linux kernel up to and including 4.0.5 relies on an untrusted length field during packet parsing, which allows remote malicious users to obtain sensitive information from kernel memory or cause a denial of service (out-of-bounds read and system crash) via...

Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 15.10 Linux Linux Kernel

Integer overflow in the xt_alloc_table_info function in net/netfilter/x_tables.c in the Linux kernel up to and including 4.5.2 on 32-bit platforms allows local users to gain privileges or cause a denial of service (heap memory corruption) via an IPT_SO_SET_REPLACE setsockopt call...

Linux Linux Kernel Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 15.10 Canonical Ubuntu Linux 16.04

1 EDB exploit5 Github repositories

Directory traversal vulnerability in KArchive prior to 5.24, as used in KDE Frameworks, allows remote malicious users to write to arbitrary files via a ../ (dot dot slash) in a filename in an archive file, related to KNewsstuff downloads.

Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 15.10 Kde Karchives

Xen and the Linux kernel up to and including 4.5.x do not properly suppress hugetlbfs support in x86 PV guests, which allows local PV guest OS users to cause a denial of service (guest OS crash) by attempting to access a hugetlbfs mapped area.

Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 15.10 Canonical Ubuntu Linux 16.04 Xen Xen

Dnsmasq prior to 2.76 allows remote servers to cause a denial of service (crash) via a reply with an empty DNS address that has an (1) A or (2) AAAA record defined locally.

Canonical Ubuntu Linux 15.10 Canonical Ubuntu Linux 16.04 Thekelleys Dnsmasq

Any Python module in sys.path can be imported if the command line of the process triggering the coredump is Python and the first argument is -m in Apport prior to 2.19.2 function _python_module_path.

Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 15.04 Canonical Ubuntu Linux 15.10 Canonical Apport

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook