oss-sec: CVE-2019-5736: runc container breakout (all versions)
CVE-2019-5736: runc container breakout (all versions) From: Aleksa Sarai <cyphar () cyphar com> Date: Tue, 12 Feb 2019 00:05:20 +1100 [[ Patch CRD: 2019-02-11 15:00 CET ]] [[ Exploit Code CRD: 2019-02-18 15:00 CET ]] Hello, I am one of the maintainers of runc (the underlying container runtime underneath Docker, cri-o, containerd, Kubernetes, and so on). We recently had a vulnerability reported whi
oss-sec: CVE-2018-6554 and CVE-2018-6555: Linux kernel: irda memory leak and use after free
CVE-2018-6554 and CVE-2018-6555: Linux kernel: irda memory leak and use after free From: Tyler Hicks <tyhicks () canonical com> Date: Tue, 4 Sep 2018 11:47:06 -0500 Two issues were discovered in the irda subsystem within the Linux kernel. The irda subsystem has been removed from the upstream kernel starting in v4.17 but it is present in many distro kernels and the stable kernel tree. Memory leak i
tcpdump: capturing the netlink socket on Linux
capturing the netlink socket on Linux From: Michael Richardson <mcr () sandelman ca> Date: Thu, 23 Oct 2014 14:29:31 -0400 Please correct my understanding. The libpcap/pcap-netfilter-linux.c file is about capturing NFLOG packets from the netlink socket, i.e. ones that came from netfilter's --log target. On the other hand, we have: /* * Link-layer header type for the netlink protocol (nlmon devices
Full Disclosure: Apache Killer
Apache Killer From: "HI-TECH ." <isowarez.isowarez.isowarez () googlemail com> Date: Sat, 20 Aug 2011 00:23:26 +0200 (see attachment) /Kingcope Attachment: killapache.pl Description: _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/ Current thread:
1
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
oss-sec: Re: CVE-2019-5736: runc container breakout (all versions)
oss-sec: Apache web server use after free bugs (unfixed)
oss-sec: Re: KASAN stack out of bound bug
oss-sec: Re: Linux kernel: FS_IOC_FSSETXATTR will lead to EXT4-fs shut down
oss-sec: Linux kernel: FS_IOC_FSSETXATTR will lead to EXT4-fs shut down
oss-sec: CVE-2017-5123 Linux kernel v4.13 waitid() not calling access_ok()
Full Disclosure: Apache 2.2.17 exploit?
Full Disclosure: Vulnerability in multiple themes for Drupal
Full Disclosure: sshd logins without a source
Full Disclosure: XSS and FPD vulnerabilities in Adobe ColdFusion
Full Disclosure: Possibility to exploit bash "*" processing