CVE-2012-2685

cumin: DoS via large image requests

Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allows remote authenticated users to cause a denial of service (memory consumption) via a large size in an image request.

CVSS 2.0 · 4.0 Medium EPSS 2.2% KEV · Not listed

Vendors

Redhat Trevor Mckay

Products

Enterprise Mrg Cumin

CVE-2012-2734

cumin: CSRF flaw

Multiple cross-site request forgery (CSRF) vulnerabilities in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allow remote attackers to hijack the authentication of arbitrary users for requests that execute commands via unspecified vectors.

CVSS 2.0 · 6.8 Medium EPSS < 1% KEV · Not listed

Vendors

Redhat Trevor Mckay

Products

Enterprise Mrg Cumin

CVE-2012-2735

cumin: session fixation flaw

Session fixation vulnerability in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allows remote attackers to hijack web sessions via a crafted session cookie.

CVSS 2.0 · 4.9 Medium EPSS 1.6% KEV · Not listed

Vendors

Redhat Trevor Mckay

Products

Enterprise Mrg Cumin

CVE-2012-3375

kernel: epoll: can leak file descriptors when returning -ELOOP

The epoll_ctl system call in fs/eventpoll.c in the Linux kernel before 3.2.24 does not properly handle ELOOP errors in EPOLL_CTL_ADD operations, which allows local users to cause a denial of service (file-descriptor consumption and system crash) via a crafted application that attempts to create a circular epoll dependency. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-1083.

CVSS 2.0 · 4.9 Medium EPSS 1.0% KEV · Not listed

Vendors

Linux Redhat

Products

Linux Kernel Enterprise Linux Enterprise Mrg

CVE-2012-3400

kernel: udf: buffer overflow when parsing sparing table

Heap-based buffer overflow in the udf_load_logicalvol function in fs/udf/super.c in the Linux kernel before 3.4.5 allows remote attackers to cause a denial of service (system crash) or possibly have unspecified other impact via a crafted UDF filesystem.

CVSS 2.0 · 7.6 High EPSS 7.8% KEV · Not listed

Vendors

Canonical Linux Redhat

Products

Ubuntu Linux Linux Kernel Enterprise Linux and 1 more

CVE-2012-3416

condor: host based authentication does not implement forward-confirmed reverse dns

Condor before 7.8.2 allows remote attackers to bypass host-based authentication and execute actions such as ALLOW_ADMINISTRATOR or ALLOW_WRITE by connecting from a system with a spoofed reverse DNS hostname.

CVSS 2.0 · 10.0 Critical EPSS 5.1% KEV · Not listed

Vendors

Condor Project Redhat

Products

Condor Enterprise Mrg

CVE-2012-3430

kernel: recv{from,msg}() on an rds socket can leak kernel memory

The rds_recvmsg function in net/rds/recv.c in the Linux kernel before 3.0.44 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a (1) recvfrom or (2) recvmsg system call on an RDS socket.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed

Vendors

Linux Redhat

Products

Linux Kernel Enterprise Linux Enterprise Mrg

CVE-2012-3459

cumin: allows for editing internal Condor job attributes

Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allows remote authenticated users to modify Condor attributes and possibly gain privileges via crafted additional parameters in an HTTP POST request, which triggers a job attribute change request to Condor.

CVSS 2.0 · 4.9 Medium EPSS 1.6% KEV · Not listed

Vendors

Redhat Trevor Mckay

Products

Enterprise Mrg Cumin

CVE-2012-3467

qpid-cpp-server-cluster: unauthorized broker access caused by the use of NullAuthenticator catch-up shadow connections

Apache QPID 0.14, 0.16, and earlier uses a NullAuthenticator mechanism to authenticate catch-up shadow connections to AMQP brokers, which allows remote attackers to bypass authentication.

CVSS 2.0 · 5.0 Medium EPSS 6.4% KEV · Not listed

Vendors

Apache Redhat

Products

Qpid Enterprise Mrg

CVE-2012-3491

condor: local users can abort any idle jobs

src/condor_schedd.V6/schedd.cpp in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 does not properly check the permissions of jobs, which allows remote authenticated users to remove arbitrary idle jobs via unspecified vectors.

CVSS 2.0 · 4.0 Medium EPSS 1.8% KEV · Not listed

Vendors

Condor Project Redhat

Products

Condor Enterprise Mrg

CVE-2012-3492

condor: lock directories created mode 0777 allow for FS-based authentication challenge bypass

The filesystem authentication (condor_io/condor_auth_fs.cpp) in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 uses authentication directories even when they have weak permissions, which allows remote attackers to impersonate users by renaming a user's authentication directory.

CVSS 2.0 · 6.4 Medium EPSS 3.2% KEV · Not listed

Vendors

Condor Project Redhat

Products

Condor Enterprise Mrg

CVE-2012-3493

condor: GIVE_REQUEST_AD leaks privileged ClaimId information

The command_give_request_ad function in condor_startd.V6/command.cpp Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 allows remote attackers to obtain sensitive information, and possibly control or start arbitrary jobs, via a ClassAd request to the condor_startd port, which leaks the ClaimId.

CVSS 2.0 · 5.8 Medium EPSS 1.7% KEV · Not listed

Vendors

Condor Project Redhat

Products

Condor Enterprise Mrg

CVE-2012-3511

kernel: mm: use-after-free in madvise_remove()

Multiple race conditions in the madvise_remove function in mm/madvise.c in the Linux kernel before 3.4.5 allow local users to cause a denial of service (use-after-free and system crash) via vectors involving a (1) munmap or (2) close system call.

CVSS 2.0 · 6.2 Medium EPSS < 1% KEV · Not listed

Vendors

Linux Redhat

Products

Linux Kernel Enterprise Linux Enterprise Mrg

CVE-2012-3520

kernel: af_netlink: invalid handling of SCM_CREDENTIALS passing

The Netlink implementation in the Linux kernel before 3.2.30 does not properly handle messages that lack SCM_CREDENTIALS data, which might allow local users to spoof Netlink communication via a crafted message, as demonstrated by a message to (1) Avahi or (2) NetworkManager.

CVSS 2.0 · 1.9 Low EPSS < 1% KEV · Not listed

Vendors

Linux Redhat

Products

Linux Kernel Enterprise Mrg

CVE-2012-4398

kernel: request_module() OOM local DoS

The __request_module function in kernel/kmod.c in the Linux kernel before 3.4 does not set a certain killable attribute, which allows local users to cause a denial of service (memory consumption) via a crafted application.

CVSS 2.0 · 4.9 Medium EPSS < 1% KEV · Not listed

Vendors

Linux Redhat

Products

Linux Kernel Enterprise Linux Enterprise Mrg

CVE-2013-0268

kernel: x86/msr: /dev/cpu/*/msr local privilege escalation

The msr_open function in arch/x86/kernel/msr.c in the Linux kernel before 3.7.6 allows local users to bypass intended capability restrictions by executing a crafted application as root, as demonstrated by msr32.c.

CVSS 2.0 · 6.2 Medium EPSS 1.6% KEV · Not listed

Vendors

Linux Redhat

Products

Linux Kernel Enterprise Linux Enterprise Mrg

CVE-2013-0290

kernel: net: infinite loop in __skb_recv_datagram()

The __skb_recv_datagram function in net/core/datagram.c in the Linux kernel before 3.8 does not properly handle the MSG_PEEK flag with zero-length data, which allows local users to cause a denial of service (infinite loop and system hang) via a crafted application.

CVSS 2.0 · 4.9 Medium EPSS < 1% KEV · Not listed

Vendors

Linux Redhat

Products

Linux Kernel Enterprise Mrg

CVE-2013-0343

kernel: handling of IPv6 temporary addresses

The ipv6_create_tempaddr function in net/ipv6/addrconf.c in the Linux kernel through 3.8 does not properly handle problems with the generation of IPv6 temporary addresses, which allows remote attackers to cause a denial of service (excessive retries and address-generation outage), and consequently obtain sensitive information, via ICMPv6 Router Advertisement (RA) messages.

CVSS 2.0 · 3.2 Low EPSS 1.7% KEV · Not listed

Vendors

Linux Redhat

Products

Linux Kernel Enterprise Linux Enterprise Mrg

CVE-2013-0871

kernel: race condition with PTRACE_SETREGS

Race condition in the ptrace functionality in the Linux kernel before 3.7.5 allows local users to gain privileges via a PTRACE_SETREGS ptrace system call in a crafted application, as demonstrated by ptrace_death.

CVSS 2.0 · 6.9 Medium EPSS 1.4% KEV · Not listed

Vendors

Linux Redhat

Products

Linux Kernel Enterprise Linux Enterprise Mrg and 1 more

CVE-2013-0913

Kernel: drm/i915: heap writing overflow

Integer overflow in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the i915 driver in the Direct Rendering Manager (DRM) subsystem in the Linux kernel through 3.8.3, as used in Google Chrome OS before 25.0.1364.173 and other products, allows local users to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted application that triggers many relocation copies, and potentially leads to a race condition.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed

Vendors

Linux Opensuse Redhat

Products

Linux Kernel Opensuse Enterprise Linux and 1 more