Update Server Security Vulnerabilities
A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write(). This flaw allows a local user to gain unauthorized access to data from the FUSE filesystem, resulting in privilege...
7.8CVSS
7.7AI Score
0.0004EPSS
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page.....
A vulnerability was found in kvm_s390_guest_sida_op in the arch/s390/kvm/kvm-s390.c function in KVM for s390 in the Linux kernel. This flaw allows a local attacker with a normal user privilege to obtain unauthorized memory write access. This flaw affects Linux kernel versions prior to...
7.8CVSS
7.3AI Score
0.0004EPSS
There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects to, could trigger a Regular Expression Denial of Service (ReDOS) during an authentication request with a specially crafted payload that is.....
6.5CVSS
7.1AI Score
0.003EPSS
6.5CVSS
6.7AI Score
0.001EPSS
8.8CVSS
8.6AI Score
0.014EPSS
A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the "virt_ext" field, this issue could allow a...
8.8CVSS
8.6AI Score
0.0004EPSS
A memory leak flaw was found in the Linux kernel in the ccp_run_aes_gcm_cmd() function in drivers/crypto/ccp/ccp-ops.c, which allows attackers to cause a denial of service (memory consumption). This vulnerability is similar with the older...
5.5CVSS
6AI Score
0.001EPSS
.A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory, crash the system or escalate privileges. This race condition in net/can/bcm.c in the Linux kernel allows for local privilege escalation to...
7CVSS
7.2AI Score
0.0004EPSS
A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation...
7.8CVSS
8AI Score
0.095EPSS
The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver." Samba versions prior to 4.13.17, 4.14.12 and 4.15.5 with vfs_fruit configured allow out-of-bounds heap read and.....
8.8CVSS
8.9AI Score
0.18EPSS
A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication. The Samba AD DC, could become confused about the user a ticket represents if it did not strictly require a Kerberos PAC and always use the SIDs found within. The result...
7.2CVSS
7.5AI Score
0.001EPSS
A flaw was found in the way Samba maps domain users to local users. An authenticated attacker could use this flaw to cause possible privilege...
8.1CVSS
8.1AI Score
0.001EPSS
A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plaintext password sent over the wire even if Kerberos authentication was...
5.9CVSS
7.2AI Score
0.002EPSS
A flaw was found in the PKI-server, where the spkispawn command, when run in debug mode, stores admin credentials in the installation log file. This flaw allows a local attacker to retrieve the file to obtain the admin password and gain admin privileges to the Dogtag CA manager. The highest threat....
7.8CVSS
7.3AI Score
0.0004EPSS
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count....
7.8CVSS
7.9AI Score
0.0004EPSS
A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to output of wrong hostnames which might potentially lead to Domain Hijacking. The highest threat from this vulnerability is to confidentiality and integrity as...
5.6CVSS
5.9AI Score
0.002EPSS
5.5CVSS
5.5AI Score
0.0004EPSS
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the UpdateServer component of Bitdefender GravityZone allows an attacker to execute arbitrary code on vulnerable instances. This issue affects: Bitdefender GravityZone versions prior to...
9.8CVSS
9.5AI Score
0.003EPSS
6.5CVSS
6.7AI Score
0.004EPSS
8CVSS
7.5AI Score
0.0004EPSS
9CVSS
8.3AI Score
0.004EPSS
7.5CVSS
7.3AI Score
0.002EPSS
8CVSS
8.5AI Score
0.0005EPSS
8CVSS
8.5AI Score
0.0004EPSS
7.2CVSS
8.3AI Score
0.013EPSS
An information disclosure vulnerability was found in libvirt in versions before 6.3.0. HTTP cookies used to access network-based disks were saved in the XML dump of the guest domain. This flaw allows an attacker to access potentially sensitive information in the domain configuration via the...
6.5CVSS
6.8AI Score
0.001EPSS
6.5CVSS
6.5AI Score
0.11EPSS
6.5CVSS
7.5AI Score
0.917EPSS
7.8CVSS
8.2AI Score
0.015EPSS
9.8CVSS
9.2AI Score
0.041EPSS
8.8CVSS
9.2AI Score
0.017EPSS
9CVSS
9.2AI Score
0.003EPSS
7.8CVSS
8AI Score
0.0005EPSS
7.8CVSS
8AI Score
0.001EPSS
7.8CVSS
8AI Score
0.0005EPSS
6.5CVSS
6.3AI Score
0.014EPSS