30 matches found
CVE-2021-20269
A flaw was found in the permissions of a log file created by kexec-tools. This flaw allows a local unprivileged user to read this file and leak kernel internal information from a previous panic. The highest threat from this vulnerability is to confidentiality. This flaw affects kexec-tools shippe...
AlmaLinux 8 : kexec-tools (ALSA-2021:4404)
The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2021:4404 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 70300 C Tenable Network...
CentOS 8 : kexec-tools (CESA-2021:4404)
The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2021:4404 advisory. - kexec-tools: incorrect permissions on kdump dmesg file CVE-2021-20269 Note that Nessus has not tested for this issue but has instead relied only on the...
RHEL 8 : kexec-tools (RHSA-2021:4404)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2021:4404 advisory. The kexec-tools packages contain the /sbin/kexec binary and utilities that together form the user-space component of the kernel's kexec feature. The...
Low: Red Hat Security Advisory: kexec-tools security, bug fix, and enhancement update
An update for kexec-tools is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
RLSA-2021:4404 Low: kexec-tools security, bug fix, and enhancement update
The kexec-tools packages contain the /sbin/kexec binary and utilities that together form the user-space component of the kernel's kexec feature. The /sbin/kexec binary facilitates a new kernel to boot using the kernel's kexec feature either on a normal or a panic reboot. The kexec fastboot...
CVE-2020-20269
creationtimestamp| type| source ---|---|--- 2021-01-26 20:46:27+00:00| seen| https://t.me/cibsecurity/22632...
CVE-2020-20269
Caret Editor (pre-4.0.0-rc22) is affected by CVE-2020-20269 due to a crafted Markdown document that can trigger execution of malicious JavaScript. The vulnerability, scored high (CRITICAL) with CVSSv3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), suggests a remote-like attack vector via a Markdown payl...
