debian debian linux 7.0 vulnerabilities and exploits

(subscribe to this query)

An issue exists in Amanda 3.3.1. A user with backup privileges can trivially compromise a client installation. The "runtar" setuid root binary does not check for additional arguments supplied after --create, allowing users to manipulate commands and perform command inje...

Zmanda Amanda 3.3.1 Redhat Enterprise Linux 7.0 Debian Debian Linux 7.0 Debian Debian Linux 8.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0

The SwCTBWrapper::Read function in sw/source/filter/ww8/ww8toolbar.cxx in LibreOffice prior to 5.4.6.1 and 6.x prior to 6.0.2.1 does not validate a customizations index, which allows remote malicious users to cause a denial of service (heap-based buffer overflow with write access...

Debian Debian Linux 7.0 Debian Debian Linux 8.0 Debian Debian Linux 9.0 Libreoffice Libreoffice Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Server 7.0 Redhat Enterprise Linux Workstation 7.0 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 16.04

sot/source/sdstor/stgstrms.cxx in LibreOffice prior to 5.4.5.1 and 6.x prior to 6.0.1.1 uses an incorrect integer data type in the StgSmallStrm class, which allows remote malicious users to cause a denial of service (use-after-free with write access) or possibly have unspecified ...

Libreoffice Libreoffice Debian Debian Linux 7.0 Debian Debian Linux 8.0 Debian Debian Linux 9.0 Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Server 7.0 Redhat Enterprise Linux Workstation 7.0 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 16.04

The Debian build procedure for the smokeping package in wheezy prior to 2.6.8-2+deb7u1 and jessie prior to 2.6.9-1+deb8u1 does not properly configure the way Apache httpd passes arguments to smokeping_cgi, which allows remote malicious users to execute arbitrary code via crafted ...

Debian Debian Linux 7.0 Debian Debian Linux 8.0

Heap-based buffer overflow in dnsmasq prior to 2.78 allows remote malicious users to cause a denial of service (crash) or execute arbitrary code via a crafted IPv6 router advertisement request.

Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 17.04 Debian Debian Linux 7.0 Debian Debian Linux 7.1 Debian Debian Linux 9.0 Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Server 7.0 Redhat Enterprise Linux Workstation 7.0 Thekelleys Dnsmasq

1 EDB exploit

Memory leak in dnsmasq prior to 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote malicious users to cause a denial of service (memory consumption) via vectors involving DNS response creation.

Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 17.04 Debian Debian Linux 7.0 Debian Debian Linux 7.1 Debian Debian Linux 9.0 Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Server 7.0 Redhat Enterprise Linux Workstation 7.0 Thekelleys Dnsmasq

1 EDB exploit

The udl_fb_mmap function in drivers/gpu/drm/udl/udl_fb.c at the Linux kernel version 3.4 and up to and including 4.15 has an integer-overflow vulnerability allowing local users with access to the udldrmfb driver to obtain full read and write permissions on kernel physical pages, ...

Linux Linux Kernel Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 17.10 Debian Debian Linux 7.0 Debian Debian Linux 8.0 Debian Debian Linux 9.0 Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Server 7.0 Redhat Enterprise Linux Workstation 7.0

ikiwiki prior to 3.20161229 incorrectly called the CGI::FormBuilder->field method (similar to the CGI->param API that led to Bugzilla's CVE-2014-1572), which can be abused to lead to commit metadata forgery.

Ikiwiki Ikiwiki Debian Debian Linux 7.0 Debian Debian Linux 8.0 Debian Debian Linux 9.0

An issue exists in Xen up to and including 4.10.x allowing x86 HVM guest OS users to cause a denial of service (host OS infinite loop) in situations where a QEMU device model attempts to make invalid transitions between states of a request.

Debian Debian Linux 7.0 Debian Debian Linux 8.0 Debian Debian Linux 9.0 Xen Xen

An issue exists in Xen up to and including 4.10.x allowing x86 HVM guest OS users to cause a denial of service (unexpectedly high interrupt number, array overrun, and hypervisor crash) or possibly gain hypervisor privileges by setting up an HPET timer to deliver interrupts in IO-...

Xen Xen Debian Debian Linux 7.0 Debian Debian Linux 8.0 Debian Debian Linux 9.0

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook