149 matches found
USN-4916-2: Linux kernel regression
USN-4916-1 fixed vulnerabilities in the Linux kernel. Unfortunately, the fix for CVE-2021-3493 introduced a memory leak in some situations. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that the overlayfs implementation in the Linu...
USN-4916-2 linux, linux-aws, linux-gke-5.3, linux-hwe, linux-kvm, linux-lts-xenial, linux-oem-5.6, linux-raspi2, linux-raspi2-5.3, linux-snapdragon regression
USN-4916-1 fixed vulnerabilities in the Linux kernel. Unfortunately, the fix for CVE-2021-3493 introduced a memory leak in some situations. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that the overlayfs implementation in the Linu...
Exploit for Privilege Context Switching Error in Canonical Ubuntu_Linux
CVE-2021-3493 Ubuntu OverlayFS Local Privesc Affected Vers...
Ubuntu: Security Advisory (USN-4916-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-3493
creationtimestamp| type| source ---|---|--- 2021-04-21 10:26:15+00:00| published-proof-of-concept| https://t.me/pwnwikizhchannel/222 2021-04-26 11:02:21+00:00| seen| https://t.me/CyberSecurityTechnologies/3219 2021-05-08 12:54:09+00:00| published-proof-of-concept|...
ubuntu特权提升漏洞（CVE-2021-3493）
...
Exploit for Privilege Context Switching Error in Canonical Ubuntu_Linux
CVE-2021-3493 Ubuntu OverlayFS Local Privesc Affected Vers...
CVE-2021-3493
The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting of file capabilities on files in an underlying file system. Due to the combination of unprivileged user namespaces along with a patch carried in the Ubuntu kernel to allow...
CVE-2021-3493
The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting of file capabilities on files in an underlying file system. Due to the combination of unprivileged user namespaces along with a patch carried in the Ubuntu kernel to allow...
CVE-2021-3493
Summary: CVE-2021-3493 is a Linux kernel overlayfs privilege-escalation issue where overlayfs does not properly validate file capabilities against user namespaces, enabling local privilege escalation on systems using unprivileged user namespaces with Ubuntu overlay patches. The vulnerability is r...
CVE-2021-3493
A flaw was found in the Linux kernel. The overlayfs stacking file system does not properly validate the application of file capabilities against user namespaces. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...
Ubuntu: Security Advisory (USN-4915-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 16.04 LTS / 18.04 LTS : Linux kernel vulnerabilities (USN-4916-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4916-1 advisory. It was discovered that the overlayfs implementation in the Linux kernel did not properly validate the application of file system capabilities...
Ubuntu: Security Advisory (USN-4916-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-4917-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-4917-1: Linux kernel vulnerabilities
It was discovered that the overlayfs implementation in the Linux kernel did not properly validate the application of file system capabilities with respect to user namespaces. A local attacker could use this to gain elevated privileges. CVE-2021-3493 Vincent Dehors discovered that the shiftfs file...
USN-4916-1: Linux kernel vulnerabilities
It was discovered that the overlayfs implementation in the Linux kernel did not properly validate the application of file system capabilities with respect to user namespaces. A local attacker could use this to gain elevated privileges. CVE-2021-3493 Piotr Krysiuk discovered that the BPF JIT...
USN-4915-1: Linux kernel (OEM) vulnerabilities
It was discovered that the overlayfs implementation in the Linux kernel did not properly validate the application of file system capabilities with respect to user namespaces. A local attacker could use this to gain elevated privileges. CVE-2021-3493 Vincent Dehors discovered that the shiftfs file...
CVE-2020-3493
Cisco IOS XE Software for Catalyst 9000 Family Wireless Controllers (CAPWAP processing) is affected by multiple DoS vulnerabilities including CVE-2020-3493. The issue stems from insufficient validation of CAPWAP packets, allowing an unauthenticated, adjacent attacker to send malformed CAPWAP fram...
CVE-2013-3493
CVE-2013-3493 affects XnView 2.03 and is described as an integer overflow vulnerability. The connected documents confirm the affected product/version and the (root) cause as an overflow, with NVD listing both CVSS v2 (7.5, HIGH) and CVSS v3.1 (9.8, CRITICAL) metrics, indicating network attack vec...