| The Vigil@nce team watches public vulnerabilities impacting your computers, and then offers security solutions, a database and tools to fix them. |
|
 |
|
|
Computer vulnerabilities of Fedora
Mitogen: privilege escalation via Unidirectional-routing Protection
Synthesis of the vulnerability
An attacker can bypass restrictions via Unidirectional-routing Protection of Mitogen, in order to escalate his privileges.
Impacted products: Fedora.
Severity: 1/4.
Consequences: data creation/edition.
Provenance: user account.
Creation date: 04/09/2019.
Identifiers: CVE-2019-15149, FEDORA-2019-1f17485159, FEDORA-2019-b25dd670a4, VIGILANCE-VUL-30235.
Description of the vulnerability
An attacker can bypass restrictions via Unidirectional-routing Protection of Mitogen, in order to escalate his privileges.
Full Vigil@nce bulletin... (Free trial) |
Linux kernel: denial of service via xfs_setattr_nonsize
Synthesis of the vulnerability
An attacker can trigger a fatal error via xfs_setattr_nonsize() of the Linux kernel, in order to trigger a denial of service.
Impacted products: Debian, Fedora, Linux, SUSE Linux Enterprise Desktop, SLES.
Severity: 1/4.
Consequences: denial of service on server, denial of service on service.
Provenance: user shell.
Creation date: 26/08/2019.
Identifiers: CVE-2019-15538, DLA-1919-1, DLA-1919-2, FEDORA-2019-4c91a2f76e, FEDORA-2019-97380355ae, SUSE-SU-2019:2412-1, SUSE-SU-2019:2424-1, VIGILANCE-VUL-30164.
Description of the vulnerability
An attacker can trigger a fatal error via xfs_setattr_nonsize() of the Linux kernel, in order to trigger a denial of service.
Full Vigil@nce bulletin... (Free trial) |
wpa_supplicant: information disclosure via Brainpool Curves Timing Differences
Synthesis of the vulnerability
An attacker can bypass access restrictions to data via Brainpool Curves Timing Differences of wpa_supplicant, in order to obtain sensitive information.
Impacted products: Fedora, Ubuntu.
Severity: 1/4.
Consequences: data reading.
Provenance: radio connection.
Creation date: 19/08/2019.
Identifiers: CVE-2019-13377, FEDORA-2019-97e9040197, USN-4098-1, VIGILANCE-VUL-30071.
Description of the vulnerability
An attacker can bypass access restrictions to data via Brainpool Curves Timing Differences of wpa_supplicant, in order to obtain sensitive information.
Full Vigil@nce bulletin... (Free trial) |
mgetty: infinite loop via g3/g32pbm.c
Synthesis of the vulnerability
An attacker can trigger an infinite loop via g3/g32pbm.c of mgetty, in order to trigger a denial of service.
Impacted products: Fedora.
Severity: 1/4.
Consequences: denial of service on service, denial of service on client.
Provenance: document.
Creation date: 19/08/2019.
Identifiers: CVE-2019-1010189, FEDORA-2019-732b5488c2, VIGILANCE-VUL-30069.
Description of the vulnerability
An attacker can trigger an infinite loop via g3/g32pbm.c of mgetty, in order to trigger a denial of service.
Full Vigil@nce bulletin... (Free trial) |
Intel 64-bit CPU: information disclosure via SWAPGS
Synthesis of the vulnerability
A local attacker can read a memory fragment via SWAPGS of Intel 64-bit CPU, in order to obtain sensitive information.
Impacted products: SNS, Arkoon FAST360, Debian, BIG-IP Hardware, TMOS, Fedora, Linux, Windows 10, Windows 2008 R0, Windows 2008 R2, Windows 2012, Windows 2016, Windows 2019, Windows 7, Windows 8, Windows (platform) ~ not comprehensive, Windows RT, NETASQ, OpenBSD, openSUSE Leap, RHEL, Slackware, SUSE Linux Enterprise Desktop, SLES, Synology DSM, Synology DS***, Synology RS***, Ubuntu, Unix (platform) ~ not comprehensive.
Severity: 1/4.
Consequences: data reading.
Provenance: user shell.
Creation date: 07/08/2019.
Identifiers: CERTFR-2019-AVI-375, CERTFR-2019-AVI-376, CERTFR-2019-AVI-381, CERTFR-2019-AVI-390, CERTFR-2019-AVI-391, CERTFR-2019-AVI-392, CERTFR-2019-AVI-417, CERTFR-2019-AVI-418, CERTFR-2019-AVI-428, CERTFR-2019-AVI-440, CVE-2019-1125, DLA-1884-1, DLA-1885-1, DSA-4495-1, DSA-4497-1, FEDORA-2019-6bda4c81f4, FEDORA-2019-e37c348348, K31085564, openSUSE-SU-2019:1923-1, openSUSE-SU-2019:1924-1, RHSA-2019:2405-01, RHSA-2019:2411-01, RHSA-2019:2473-01, RHSA-2019:2476-01, RHSA-2019:2600-01, RHSA-2019:2609-01, RHSA-2019:2695-01, RHSA-2019:2696-01, RHSA-2019:2730-01, SSA:2019-226-01, STORM-2019-007, SUSE-SU-2019:14157-1, SUSE-SU-2019:2068-1, SUSE-SU-2019:2069-1, SUSE-SU-2019:2070-1, SUSE-SU-2019:2071-1, SUSE-SU-2019:2072-1, SUSE-SU-2019:2073-1, SUSE-SU-2019:2262-1, SUSE-SU-2019:2263-1, SUSE-SU-2019:2299-1, SWAPGS, Synology-SA-19:32, USN-4093-1, USN-4094-1, USN-4095-1, USN-4095-2, USN-4096-1, VIGILANCE-VUL-29962.
Description of the vulnerability
A local attacker can read a memory fragment via SWAPGS of Intel 64-bit CPU, in order to obtain sensitive information.
Full Vigil@nce bulletin... (Free trial) |
Linux kernel: denial of service via Bluetooth hci_uart
Synthesis of the vulnerability
An attacker can trigger a fatal error via Bluetooth hci_uart() of the Linux kernel, in order to trigger a denial of service.
Impacted products: Debian, Fedora, Linux, openSUSE Leap, Slackware, SUSE Linux Enterprise Desktop, SLES, Ubuntu.
Severity: 1/4.
Consequences: denial of service on server, denial of service on service.
Provenance: user shell.
Creation date: 02/08/2019.
Identifiers: CERTFR-2019-AVI-381, CERTFR-2019-AVI-392, CERTFR-2019-AVI-418, CERTFR-2019-AVI-419, CERTFR-2019-AVI-441, CVE-2019-10207, DLA-1884-1, DLA-1885-1, DSA-4495-1, DSA-4497-1, FEDORA-2019-7aecfe1c4b, openSUSE-SU-2019:1923-1, openSUSE-SU-2019:1924-1, SSA:2019-226-01, SUSE-SU-2019:2263-1, SUSE-SU-2019:2299-1, SUSE-SU-2019:2412-1, SUSE-SU-2019:2424-1, USN-4115-1, USN-4115-2, USN-4118-1, VIGILANCE-VUL-29937.
Description of the vulnerability
An attacker can trigger a fatal error via Bluetooth hci_uart() of the Linux kernel, in order to trigger a denial of service.
Full Vigil@nce bulletin... (Free trial) |
Linux kernel: buffer overflow via parse_hid_report_descriptor
Synthesis of the vulnerability
An attacker can trigger a buffer overflow via parse_hid_report_descriptor() of the Linux kernel, in order to trigger a denial of service, and possibly to run code.
Impacted products: Debian, Fedora, Linux, openSUSE Leap, Slackware, SUSE Linux Enterprise Desktop, SLES, Ubuntu.
Severity: 1/4.
Consequences: administrator access/rights, denial of service on server.
Provenance: user shell.
Creation date: 26/07/2019.
Identifiers: CERTFR-2019-AVI-376, CERTFR-2019-AVI-381, CERTFR-2019-AVI-392, CERTFR-2019-AVI-417, CERTFR-2019-AVI-418, CERTFR-2019-AVI-419, CERTFR-2019-AVI-441, CVE-2019-13631, DLA-1884-1, DLA-1885-1, DSA-4495-1, DSA-4497-1, FEDORA-2019-3dbfaeac73, FEDORA-2019-9d3fe6fd5b, openSUSE-SU-2019:1923-1, openSUSE-SU-2019:1924-1, RHBUG-1731000, SSA:2019-226-01, SUSE-SU-2019:14157-1, SUSE-SU-2019:2068-1, SUSE-SU-2019:2069-1, SUSE-SU-2019:2070-1, SUSE-SU-2019:2071-1, SUSE-SU-2019:2072-1, SUSE-SU-2019:2073-1, SUSE-SU-2019:2262-1, SUSE-SU-2019:2263-1, SUSE-SU-2019:2299-1, USN-4115-1, USN-4115-2, USN-4118-1, VIGILANCE-VUL-29889.
Description of the vulnerability
An attacker can trigger a buffer overflow via parse_hid_report_descriptor() of the Linux kernel, in order to trigger a denial of service, and possibly to run code.
Full Vigil@nce bulletin... (Free trial) |
Linux kernel: denial of service via Powerpc Hardware Transactional Memory
Synthesis of the vulnerability
An attacker can trigger a fatal error via Powerpc Hardware Transactional Memory of the Linux kernel, in order to trigger a denial of service.
Impacted products: Debian, Fedora, Linux, openSUSE Leap, Slackware, SUSE Linux Enterprise Desktop, SLES, Ubuntu.
Severity: 1/4.
Consequences: denial of service on server.
Provenance: document.
Creation date: 22/07/2019.
Identifiers: CERTFR-2019-AVI-376, CERTFR-2019-AVI-381, CERTFR-2019-AVI-392, CERTFR-2019-AVI-418, CERTFR-2019-AVI-419, CERTFR-2019-AVI-441, CVE-2019-13648, DLA-1885-1, DSA-4495-1, DSA-4497-1, FEDORA-2019-7aecfe1c4b, openSUSE-SU-2019:1923-1, openSUSE-SU-2019:1924-1, SSA:2019-226-01, SUSE-SU-2019:2068-1, SUSE-SU-2019:2069-1, SUSE-SU-2019:2070-1, SUSE-SU-2019:2071-1, SUSE-SU-2019:2072-1, SUSE-SU-2019:2073-1, SUSE-SU-2019:2262-1, SUSE-SU-2019:2263-1, USN-4114-1, USN-4115-1, USN-4115-2, USN-4116-1, VIGILANCE-VUL-29846.
Description of the vulnerability
An attacker can trigger a fatal error via Powerpc Hardware Transactional Memory of the Linux kernel, in order to trigger a denial of service.
Full Vigil@nce bulletin... (Free trial) |
GNU patch: read-write access via Symlink Following
Synthesis of the vulnerability
An attacker can bypass access restrictions via Symlink Following of GNU patch, in order to read or alter data.
Impacted products: Debian, Fedora, Ubuntu.
Severity: 2/4.
Consequences: data reading, data creation/edition, data deletion.
Provenance: document.
Creation date: 22/07/2019.
Identifiers: CVE-2019-13636, DLA-1856-1, DSA-4489-1, FEDORA-2019-ac709da87f, USN-4071-1, USN-4071-2, VIGILANCE-VUL-29843.
Description of the vulnerability
An attacker can bypass access restrictions via Symlink Following of GNU patch, in order to read or alter data.
Full Vigil@nce bulletin... (Free trial) |
Knot Resolver: privilege escalation via DNSSEC Downgrade
Synthesis of the vulnerability
An attacker can bypass restrictions via DNSSEC Downgrade of Knot Resolver, in order to escalate his privileges.
Impacted products: Fedora.
Severity: 2/4.
Consequences: data creation/edition.
Provenance: internet client.
Creation date: 19/07/2019.
Identifiers: CVE-2019-10191, FEDORA-2019-20f95b0b39, FEDORA-2019-fdb50c675d, VIGILANCE-VUL-29826.
Description of the vulnerability
An attacker can bypass restrictions via DNSSEC Downgrade of Knot Resolver, in order to escalate his privileges.
Full Vigil@nce bulletin... (Free trial) |
Our database contains other pages. You can request a free trial to read them.
Display information about Fedora:
|