Fedorahosted : Security Vulnerabilities, CVEs,
File descriptor leak in cronie 1.4.8, when running in certain environments, might allow local users to read restricted files, as demonstrated by reading /etc/crontab.
Max CVSS
4.3
EPSS Score
0.08%
Published
2013-04-09
Updated
2013-04-10
The pam_parse_in_data_v2 function in src/responder/pam/pamsrv_cmd.c in the PAM responder in SSSD 1.5.0, 1.4.x, and 1.3 allows local users to cause a denial of service (infinite loop, crash, and login prevention) via a crafted packet.
Max CVSS
2.1
EPSS Score
0.04%
Published
2011-01-25
Updated
2017-08-17
The edit_cmd function in crontab.c in (1) cronie before 1.4.4 and (2) Vixie cron (vixie-cron) allows local users to change the modification times of arbitrary files, and consequently cause a denial of service, via a symlink attack on a temporary file in the /tmp directory.
Max CVSS
3.3
EPSS Score
0.04%
Published
2010-02-25
Updated
2023-02-13
Heap-based buffer overflow in textbox.c in newt 0.51.5, 0.51.6, and 0.52.2 allows local users to cause a denial of service (application crash) or possibly execute arbitrary code via a request to display a crafted text dialog box.
Max CVSS
4.6
EPSS Score
0.04%
Published
2009-09-29
Updated
2017-09-19
The local_handler_callback function in server/responder/pam/pam_LOCAL_domain.c in sssd 0.4.1 does not properly handle blank-password accounts in the SSSD BE database, which allows context-dependent attackers to obtain access by sending the account's username, in conjunction with an arbitrary password, over an ssh connection.
Max CVSS
7.5
EPSS Score
0.63%
Published
2009-07-30
Updated
2017-08-17
5 vulnerabilities found