opensuse opensuse 11.4 vulnerabilities and exploits

(subscribe to this query)

The aaa_base package prior to 11.3-8.9.1 in SUSE openSUSE 11.3, and prior to 11.4-54.62.1 in openSUSE 11.4, allows local users to gain privileges via shell metacharacters in a filename, related to tab expansion.

Opensuse Opensuse 11.4 Opensuse Opensuse 11.3

osc prior to 0.134 might allow remote OBS repository servers or package maintainers to execute arbitrary commands via a crafted (1) build log or (2) build status that contains an escape sequence for a terminal emulator.

Opensuse Opensuse 11.4 Opensuse Osc Opensuse Opensuse 12.1

yast2-add-on-creator in SUSE inst-source-utils 2008.11.26 prior to 2008.11.26-0.9.1 and 2012.9.13 prior to 2012.9.13-0.8.1 allows local users to gain privileges via a crafted (1) file name or (2) directory name.

Opensuse Opensuse 11.4

Apache Tomcat up to and including 7.0.x allows remote malicious users to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris.

Apache Tomcat Opensuse Opensuse 11.4 Opensuse Opensuse 12.2 Opensuse Opensuse 12.1

2 Github repositories

The ModSecurity module prior to 2.7.4 for the Apache HTTP Server allows remote malicious users to cause a denial of service (NULL pointer dereference, process crash, and disk consumption) via a POST request with a large body and a crafted Content-Type header.

Trustwave Modsecurity Opensuse Opensuse 12.3 Opensuse Opensuse 11.4 Opensuse Opensuse 12.2

1 EDB exploit

ModSecurity prior to 2.5.11 treats request parameter values containing single quotes as files, which allows remote malicious users to bypass filtering rules and perform other attacks such as cross-site scripting (XSS) attacks via a single quote in a request parameter in the Conte...

Trustwave Modsecurity Opensuse Opensuse 12.3 Opensuse Opensuse 11.4 Opensuse Opensuse 12.2

Array index error in the kvm_vm_ioctl_create_vcpu function in virt/kvm/kvm_main.c in the KVM subsystem in the Linux kernel up to and including 3.12.5 allows local users to gain privileges via a large id value.

Linux Linux Kernel Opensuse Opensuse 12.3 Opensuse Opensuse 11.4 Opensuse Opensuse 13.1

Integer overflow in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the i915 driver in the Direct Rendering Manager (DRM) subsystem in the Linux kernel up to and including 3.8.3, as used in Google Chrome OS prior to 25.0.1364.173 and other products, allows local users to cause a de...

Linux Linux Kernel Opensuse Opensuse 11.4 Opensuse Opensuse 12.1

The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent malicious users to cause a denial of service (segmentation fault and crash) via a long string to the uniq command, which triggers a stack-based buffer overflow in the alloca function.

Redhat Enterprise Linux 6.0 Opensuse Opensuse 11.4 Opensuse Opensuse 12.2 Opensuse Opensuse 12.1

The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent malicious users to cause a denial of service (segmentation fault and crash) via a long string to the join command, when using the -i switch, which triggers a stack-based buffer overflow in the alloca functio...

Redhat Enterprise Linux 6.0 Opensuse Opensuse 11.4 Opensuse Opensuse 12.2 Opensuse Opensuse 12.1

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook