Skip to content
OpenAdvisories

Archive

6 August 2020

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • High 7.0

    TOCTOU in apport

    TOCTOU Race Condition vulnerability in apport allows a local attacker to escalate privileges and execute arbitrary code. An attacker may exit the crashed process and exploit PID recycling to spawn a root process with the same PID as the crashed process, which…

  • High 7.7

    Denial of Service in etcd

    In etcd before versions 3.3.23 and 3.4.10, the etcd gateway is a simple TCP proxy to allow for basic service discovery and access. However, it is possible to include the gateway address as an endpoint. This results in a denial of service, since the endpoint c…

  • High 8.4

    Certain Zyxel products have a locally accessible binary that allows a non-root user to generate a password for an undoc…

  • High 8.4
    CVE-2020-7352 Public exploit

    GOG Galaxy GalaxyClientService Privilege Escalation

    The GalaxyClientService component of GOG Galaxy runs with elevated SYSTEM privileges in a Windows environment. Due to the software shipping with embedded, static RSA private key, an attacker with this key material and local user permissions can effectively se…