Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 42

CVE-2013-4854

bind: named crash with an assertion failure on parsing malformed rdata

The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and 9.9.4-S1b1, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query with a malformed RDATA section that is not properly handled during construction of a log message, as exploited in the wild in July 2013.

CVSS 2.0 · 7.8 High EPSS 34.2% KEV · Not listed
Vendors
Fedoraproject Freebsd Hp and 7 more
Products
Fedora Freebsd Hp-ux and 9 more
CVE-2013-4419

libguestfs: insecure temporary directory handling for guestfish's network socket

The guestfish command in libguestfs 1.20.12, 1.22.7, and earlier, when using the --remote or --listen option, does not properly check the ownership of /tmp/.guestfish-$UID/ when creating a temporary socket file in this directory, which allows local users to write to the socket and execute arbitrary commands by creating /tmp/.guestfish-$UID/ in advance.

CVSS 2.0 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Libguestfs Novell Redhat and 1 more
Products
Libguestfs Suse Linux Enterprise Server Enterprise Linux and 1 more