runc: vulnerable to symlink exchange attack

The runc package is vulnerable to a symlink exchange attack whereby an attacker can request a seemingly innocuous container configuration that results in the host filesystem being bind-mounted into the container. The highest threat from this vulnerability is to data confidentiality and integrity ...

runc: vulnerable to symlink exchange attack

The runc package is vulnerable to a symlink exchange attack whereby an attacker can request a seemingly innocuous container configuration that results in the host filesystem being bind-mounted into the container. The highest threat from this vulnerability is to data confidentiality and integrity ...

PT-2021-28951

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.9.267 through 4.9.268 Description The issue is related to a use-after-free error in the llcp sock bind/connect function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kern...

PT-2021-28927

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.19.187 through 4.19.190 Description A use-after-free issue was discovered in the net/nfc component, specifically affecting llcp sock bind and connect functions. The actual impact and attack plausibility have not yet bee...

PT-2021-24780

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.12 through v5.12.3 Description The issue is related to a use-after-free error in the llcp sock bind/connect functionality. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-24957

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.9.267 through 4.9.268 Description: The issue is related to a use-after-free error in the llcp sock bind/connect function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2021-24961

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.4.267 through 4.4.268 Description: The issue is related to a use-after-free error in the llcp sock bind/connect function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2021-28955

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.4.267 through 4.4.268 Description The issue is related to a use-after-free error in the llcp sock bind/connect function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kern...

PT-2021-3824

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.12.10 Description The issue is related to a NULL pointer dereference in the net/nfc/llcp sock.c component of the Linux kernel. It can be exploited by local unprivileged users to cause a denial of service by...

PT-2021-28774

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.12 through v5.12.3 Description The issue is related to a use-after-free error in the llcp sock bind/connect function. This problem was introduced in version v5.12 and is fixed in version v5.12.4. The actual impact and...

PT-2021-28905

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.4.112 through 5.4.118 Description A use-after-free issue exists in the net/nfc component, specifically affecting llcp sock bind and connect functions. The actual impact and attack plausibility have not yet been proven...

Oracle Linux 8 : bind (ELSA-2021-1989)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-1989 advisory. 32:9.11.26-4 - Possible assertion failure on DNAME processing CVE-2021-25215 Tenable has extracted the preceding description block directly from the Oracle Linu...

runc: vulnerable to symlink exchange attack

The runc package is vulnerable to a symlink exchange attack whereby an attacker can request a seemingly innocuous container configuration that results in the host filesystem being bind-mounted into the container. The highest threat from this vulnerability is to data confidentiality and integrity ...

bind security update

32:9.11.26-4 - Possible assertion failure on DNAME processing CVE-2021-25215...

idm:DL1 and idm:client security, bug fix, and enhancement update

bind-dyndb-ldap 11.6-2 - Rebuild against bind 9.11.26 - Resolves: rhbz1904612 11.6-1 - New upstream release - Resolves: rhbz1891735 ipa 4.9.2-3.0.1 - Set IPAPLATFORM=rhel when build on Oracle Linux Orabug: 29516674 4.9.2-3 - ipa-client-install displays false message 'sudo binary does not seem to ...

The vulnerability of the libuv library for DNS-servers like Bind9, which allows a hacker to cause a service failure.

The vulnerability of the libuv library for DNS-servers like Bind9 is related to the insufficient use of the assert function. Exploiting this vulnerability could allow a malicious actor to cause service failures...

PT-2024-11218

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak has been resolved in the Linux kernel, specifically in the smsc75xx bind function. The issue occurred due to non-freed memory in case of errors after memory allocation. The...

Important: bind

Issue Overview: A flaw was found in bind. The way DNAME records are processed may trigger the same RRset to the ANSWER section to be added more than once which causes an assertion check to fail. The highest threat from this flaw is to system availability. CVE-2021-25215 Affected Packages: bind...

Amazon Linux 2 : bind (ALAS-2021-1635)

The version of bind installed on the remote host is prior to 9.11.4-26.P2. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1635 advisory. A flaw was found in bind. The way DNAME records are processed may trigger the same RRset to the ANSWER section to be added more...

MGASA-2021-0220 Updated bind packages fix security vulnerabilities

A broken inbound incremental zone update IXFR can cause named to terminate unexpectedlyCVE-2021-25214. Mageia 7 version not affected. An assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itself CVE-2021-25215. This affects both...