Privilege escalation

Privilege escalation vulnerability in Lamassu Bitcoin ATM Douro machines, in its 7.1 version, which could allow a local user to acquire root permissions by modifying the updatescript.js, inserting special code inside the script and creating the done.txt file. This would cause the watchdog process...

CVE-2024-0676 Weak password requirement vulnerability in Lamassu Bitcoin ATM Douro machines

Weak password requirement vulnerability in Lamassu Bitcoin ATM Douro machines, in its 7.1 version , which allows a local user to interact with the machine where the application is installed, retrieve stored hashes from the machine and crack long 4-character passwords using a dictionary attack...

CVE-2024-0676 Weak password requirement vulnerability in Lamassu Bitcoin ATM Douro machines

Weak password requirement vulnerability in Lamassu Bitcoin ATM Douro machines, in its 7.1 version , which allows a local user to interact with the machine where the application is installed, retrieve stored hashes from the machine and crack long 4-character passwords using a dictionary attack...

CVE-2024-0676

Lamassu Bitcoin ATM Douro 7.1 is affected by a weak password requirement vulnerability. A local attacker can interact with the machine hosting the application, access stored hashes and perform a dictionary attack to crack short passwords (up to 4 characters). Affected component: the ATM software ...

CLSA-2024-1706617379 Fix of 12 CVEs

Jammy update: v5.15.140 upstream stable release LP: 2050038 // CVE-url: https://ubuntu.com/security/CVE-2024-0607 - netfilter: nftables: fix pointer math issue in nftbyteordereval CVE-url: https://ubuntu.com/security/CVE-2024-0607 - netfilter: nftables: Introduce new 64-bit helper register...

CVE-2024-0675 Improper checking for unusual or exceptional conditions vulnerability in Lamassu Bitcoin ATM Douro machines

Vulnerability of improper checking for unusual or exceptional conditions in Lamassu Bitcoin ATM Douro machines, in its 7.1 version, the exploitation of which could allow an attacker with physical access to the ATM to escape kiosk mode, access the underlying Xwindow interface and execute arbitrary...

CVE-2024-0675 Improper checking for unusual or exceptional conditions vulnerability in Lamassu Bitcoin ATM Douro machines

Vulnerability of improper checking for unusual or exceptional conditions in Lamassu Bitcoin ATM Douro machines, in its 7.1 version, the exploitation of which could allow an attacker with physical access to the ATM to escape kiosk mode, access the underlying Xwindow interface and execute arbitrary...

CVE-2024-0675

Lamassu Bitcoin ATM Douro, version 7.1, is affected by a vulnerability described as improper checking for unusual or exceptional conditions. The issue could allow a physical attacker to exit kiosk mode, access the underlying Xwindow interface, and execute arbitrary commands as an unprivileged use...

CVE-2024-0674 Privilege escalation vulnerability in Lamassu Bitcoin ATM Douro machines

Privilege escalation vulnerability in Lamassu Bitcoin ATM Douro machines, in its 7.1 version, which could allow a local user to acquire root permissions by modifying the updatescript.js, inserting special code inside the script and creating the done.txt file. This would cause the watchdog process...

CVE-2024-0674 Privilege escalation vulnerability in Lamassu Bitcoin ATM Douro machines

Privilege escalation vulnerability in Lamassu Bitcoin ATM Douro machines, in its 7.1 version, which could allow a local user to acquire root permissions by modifying the updatescript.js, inserting special code inside the script and creating the done.txt file. This would cause the watchdog process...

CVE-2024-0674

CVE-2024-0674 describes a privilege-escalation in Lamassu Bitcoin ATM Douro machines (version 7.1). A local user can modify updatescript.js and create done.txt, causing the watchdog to run as root and execute the payload in updatescript.js. Connected sources corroborate this root-level impact and...

Lamassu Bitcoin ATM Douro Security Breach

Lamassu Bitcoin ATM Douro is a bitcoin ATM from Lamassu. A security vulnerability exists in the Lamassu Bitcoin ATM Douro version 7.1. An attacker can exploit this vulnerability to gain root privileges and execute the payload stored in updatescript.js...

PT-2024-15740 · Lamassu · Lamassu Bitcoin Atm Douro

Name of the Vulnerable Software and Affected Versions: Lamassu Bitcoin ATM Douro version 7.1 Description: The issue allows a local user to interact with the machine, retrieve stored hashes, and crack long 4-character passwords using a dictionary attack. This is due to a weak password requirement...

Lamassu Bitcoin ATM Douro Code Issue Vulnerability

Lamassu Bitcoin ATM Douro is a Bitcoin ATM from Lamassu. A code issue vulnerability exists in Lamassu Bitcoin ATM Douro version 7.1, which stems from improper checking of exceptions or special cases. An attacker could use this vulnerability to escape kiosk mode, access the underlying Xwindow...

OESA-2024-1088 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: A flaw was found in the Bluetooth subsystem of the Linux kernel. A race condition between the btsockrecvmsg and btsockioctl functions could lead to a use-after-free on a socket buffer "skb". This flaw allows a local user to cause...

OESA-2024-1086 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: A flaw was found in the Bluetooth subsystem of the Linux kernel. A race condition between the btsockrecvmsg and btsockioctl functions could lead to a use-after-free on a socket buffer "skb". This flaw allows a local user to cause...

CVE-2023-51780

An issue was discovered in the Linux kernel before 6.6.8. dovccioctl in net/atm/ioctl.c has a use-after-free because of a vccrecvmsg race condition...

UBUNTU-CVE-2023-51780

An issue was discovered in the Linux kernel before 6.6.8. dovccioctl in net/atm/ioctl.c has a use-after-free because of a vccrecvmsg race condition...

CVE-2023-51780

A use-after-free flaw was found in the Linux kernel's net/atm/ioctl.c ATM networking technology driver: dovccioctl in net/atm/ioctl.c is vulnerable to use-after-free due to a race condition in vccrecvmsg. This issue can allow an attacker to possibly gain unauthorized access, escalate privileges, ...

CVE-2023-51780

An issue was discovered in the Linux kernel before 6.6.8. dovccioctl in net/atm/ioctl.c has a use-after-free because of a vccrecvmsg race condition...