Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 17,084

Export CSV
CVE-2016-8657

jboss: jbossas writable config files allow privilege escalation

It was discovered that EAP packages in certain versions of Red Hat Enterprise Linux use incorrect permissions for /etc/sysconfig/jbossas configuration files. The file is writable to jboss group (root:jboss, 664). On systems using classic /etc/init.d init scripts (i.e. on Red Hat Enterprise Linux 6 and earlier), the file is sourced by the jboss init script and its content executed with root privileges when jboss service is started, stopped, or restarted.

CVSS 3.0 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Jboss Enterprise Application Platform
CVE-2016-8654

jasper: heap-based buffer overflow in QMFB code in JPC codec

A heap-buffer overflow vulnerability was found in QMFB code in JPC codec caused by buffer being allocated with too small size. jasper versions before 2.0.0 are affected.

CVSS 3.0 · 7.8 High EPSS 1.9% KEV · Not listed
Vendors
Debian Jasper Project Redhat
Products
Debian Linux Jasper Enterprise Linux and 5 more
CVE-2016-8629

keycloak: user deletion via incorrect permissions check

Red Hat Keycloak before version 2.4.0 did not correctly check permissions when handling service account user deletion requests sent to the rest server. An attacker with service account authentication could use this flaw to bypass normal permissions and delete users in a separate realm.

CVSS 3.0 · 6.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Server Jboss Single Sign On Keycloak and 2 more
CVE-2016-8626

Ceph: RGW Denial of Service by sending null or specially crafted POST object requests

A flaw was found in Red Hat Ceph before 0.94.9-8. The way Ceph Object Gateway handles POST object requests permits an authenticated attacker to launch a denial of service attack by sending null or specially crafted POST object requests.

CVSS 3.0 · 6.5 Medium EPSS 2.3% KEV · Not listed
Vendors
Redhat
Products
Ceph Ceph Storage Enterprise Linux Desktop and 2 more
CVE-2016-8612

mod_cluster: Protocol parsing logic error

Apache HTTP Server mod_cluster before version httpd 2.4.23 is vulnerable to an Improper Input Validation in the protocol parsing logic in the load balancer resulting in a Segmentation Fault in the serving httpd process.

CVSS 3.0 · 4.3 Medium EPSS 4.4% KEV · Not listed
Vendors
Apache Netapp Redhat
Products
Http Server Storage Automation Store Enterprise Linux and 1 more
CVE-2016-7076

sudo: noexec bypass via wordexp()

sudo before version 1.8.18p1 is vulnerable to a bypass in the sudo noexec restriction if application run via sudo executed wordexp() C library function with a user supplied argument. A local user permitted to run such application via sudo with noexec restriction could possibly use this flaw to execute arbitrary commands with elevated privileges.

CVSS 3.0 · 6.4 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat Sudo Project
Products
Enterprise Linux Sudo
CVE-2016-7061

EAP: Sensitive data can be exposed at the server level in domain mode

An information disclosure vulnerability was found in JBoss Enterprise Application Platform before 7.0.4. It was discovered that when configuring RBAC and marking information as sensitive, users with a Monitor role are able to view the sensitive information.

CVSS 3.0 · 3.5 Low EPSS 1.8% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Jboss Enterprise Application Platform
CVE-2016-7056

openssl: ECDSA P-256 timing attack key recovery

A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user with local access to recover ECDSA P-256 private keys.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Openssl and 1 more
Products
Ubuntu Linux Debian Linux Openssl and 3 more
CVE-2016-7035

pacemaker: Privilege escalation due to improper guarding of IPC communication

An authorization flaw was found in Pacemaker before 1.1.16, where it did not properly guard its IPC interface. An attacker with an unprivileged account on a Pacemaker node could use this flaw to, for example, force the Local Resource Manager daemon to execute a script as root and thereby gain root access on the machine.

CVSS 3.0 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Clusterlabs Redhat
Products
Pacemaker Enterprise Linux Enterprise Linux Server and 1 more
CVE-2016-6814

Groovy: Remote code execution via deserialization

When an application with unsupported Codehaus versions of Groovy from 1.7.0 to 2.4.3, Apache Groovy 2.4.4 to 2.4.7 on classpath uses standard Java serialization mechanisms, e.g. to communicate between servers or to store local data, it was possible for an attacker to bake a special serialized object that will execute code directly when deserialized. All applications which rely on serialization and do not isolate the code which deserializes objects were subject to this vulnerability.

CVSS 3.0 · 9.8 Critical EPSS 17.2% KEV · Not listed
Vendors
Apache Redhat
Products
Groovy Enterprise Linux Enterprise Linux Server and 4 more
CVE-2016-5314

libtiff: Out-of-bounds write in PixarLogDecode() function

Buffer overflow in the PixarLogDecode function in tif_pixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted TIFF image, as demonstrated by overwriting the vgetparent function pointer with rgb2ycbcr.

CVSS 3.0 · 8.8 High EPSS 4.4% KEV · Not listed
Vendors
Debian Libtiff Opensuse and 1 more
Products
Debian Linux Libtiff Leap and 2 more
CVE-2016-5285

nss: Missing NULL check in PK11_SignWithSymKey / ssl3_ComputeRecordMACConstantTime causes server crash

A Null pointer dereference vulnerability exists in Mozilla Network Security Services due to a missing NULL check in PK11_SignWithSymKey / ssl3_ComputeRecordMACConstantTime, which could let a remote malicious user cause a Denial of Service.

CVSS 3.1 · 7.5 High EPSS 2.3% KEV · Not listed
Vendors
Avaya Debian Mozilla and 2 more
Products
Aura Application Enablement Services Aura Application Server 5300 Aura Communication Manager and 29 more
CVE-2016-4983

dovecot insecure SSL/TLS key and certificate file creation

A postinstall script in the dovecot rpm allows local users to read the contents of newly created SSL/TLS key files.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Dovecot Opensuse Redhat
Products
Dovecot Leap Opensuse and 1 more
CVE-2016-4975

mod_userdir CRLF injection

Possible CRLF injection allowing HTTP response splitting attacks for sites which use mod_userdir. This issue was mitigated by changes made in 2.4.25 and 2.2.32 which prohibit CR or LF injection into the "Location" or other outbound header key or value. Fixed in Apache HTTP Server 2.4.25 (Affected 2.4.1-2.4.23). Fixed in Apache HTTP Server 2.2.32 (Affected 2.2.0-2.2.31).

CVSS 3.0 · 6.1 Medium EPSS 19.9% KEV · Not listed
Vendors
Apache Redhat
Products
Http Server Enterprise Linux Jboss Core Services
CVE-2016-2125

samba: Unconditional privilege delegation to Kerberos servers in trusted realms

It was found that Samba before versions 4.5.3, 4.4.8, 4.3.13 always requested forwardable tickets when using Kerberos authentication. A service to which Samba authenticated using Kerberos could subsequently use the ticket to impersonate Samba to other services or domain users.

CVSS 3.1 · 6.5 Medium EPSS 9.2% KEV · Not listed
Vendors
Redhat Samba
Products
Enterprise Linux Enterprise Linux Desktop Enterprise Linux Server and 7 more
CVE-2016-2124

samba: SMB1 client connections can be downgraded to plaintext authentication

A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plaintext password sent over the wire even if Kerberos authentication was required.

CVSS 3.1 · 5.9 Medium EPSS 1.8% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 2 more
Products
Ubuntu Linux Debian Linux Fedora and 23 more
CVE-2016-10741

kernel: race condition between direct and memory-mapped I/O in fs/xfs/xfs_aops.c

In the Linux kernel before 4.9.3, fs/xfs/xfs_aops.c allows local users to cause a denial of service (system crash) because there is a race condition between direct and memory-mapped I/O (associated with a hole) that is handled with BUG_ON instead of an I/O failure.

CVSS 3.0 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Debian Linux Redhat
Products
Debian Linux Linux Kernel Enterprise Linux and 2 more