SUSE: Security Advisory (SUSE-SU-2012:1155-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2012:1155-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2014:1146-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated polkit packages fix a security vulnerability

A flaw was found in polkit. When a requesting process disconnects from dbus-daemon just before the call to polkitsystembusnamegetcredssync starts, the process cannot get a unique uid and pid of the process and it cannot verify the privileges of the requesting process CVE-2021-3560...

CVE-2020-1690

An improper authorization flaw was discovered in openstack-selinux's applied policy where it does not prevent a non-root user in a container from privilege escalation. A non-root attacker in one or more Red Hat OpenStack RHOSP containers could send messages to the dbus. With access to the dbus, t...

CVE-2020-1690

An improper authorization flaw was discovered in openstack-selinux's applied policy where it does not prevent a non-root user in a container from privilege escalation. A non-root attacker in one or more Red Hat OpenStack RHOSP containers could send messages to the dbus. With access to the dbus, t...

PT-2021-10076

Name of the Vulnerable Software and Affected Versions: openstack-selinux versions prior to 0.8.24 Description: An improper authorization flaw was discovered in openstack-selinux's applied policy, allowing a non-root user in a container to escalate privileges. A non-root attacker in one or more Re...

CVE-2020-1690: Improper Authorization

An improper authorization flaw was discovered in openstack-selinux's applied policy where it does not prevent a non-root user in a container from privilege escalation. A non-root attacker in one or more Red Hat OpenStack RHOSP containers could send messages to the dbus. With access to the dbus, t...

FreeBSD : polkit -- local privilege escalation using polkit_system_bus_name_get_creds_sync (36a35d83-c560-11eb-84ab-e0d55e2a8bf9)

Cedric Buissart reports : The function polkitsystembusnamegetcredssync is used to get the uid and pid of the process requesting the action. It does this by sending the unique bus name of the requesting process, which is typically something like ':1.96', to dbus-daemon. These unique names are...

polkit 代码问题漏洞

polkit is a component for controlling system-wide permissions in Unix-like operating systems. It enables communication between processes of different priority by defining and auditing permission rules. A code issue vulnerability exists in polkit that stems from the inability of a requesting proce...

polkit -- local privilege escalation using polkit_system_bus_name_get_creds_sync

Cedric Buissart reports: The function polkitsystembusnamegetcredssync is used to get the uid and pid of the process requesting the action. It does this by sending the unique bus name of the requesting process, which is typically something like ":1.96", to dbus-daemon. These unique names are...

CVE-2021-33590

GattLib 0.3-rc1 has a stack-based buffer over-read in getdevicepathfrommac in dbus/gattlib.c...

Stack overflow

GattLib 0.3-rc1 has a stack-based buffer over-read in getdevicepathfrommac in dbus/gattlib.c...

CVE-2021-33590

GattLib 0.3-rc1 has a stack-based buffer over-read in getdevicepathfrommac in dbus/gattlib.c...

CVE-2021-33590

GattLib 0.3-rc1 has a stack-based buffer over-read in getdevicepathfrommac in dbus/gattlib.c...

GattLib 缓冲区错误漏洞

GattLib is a library for accessing GATT Generic Attribute Profile information for BLE Bluetooth Low Energy devices. GattLib 0.3-rc1 suffers from a buffer overflow vulnerability in getdevicepathfrommac in dbus/gattlib.c, which originates from a buffer overload read of the stack. No detailed...

CVE-2021-33590: Out-of-bounds Read

GattLib 0.3-rc1 has a stack-based buffer over-read in getdevicepathfrommac in dbus/gattlib.c...

PT-2021-28372

Name of the Vulnerable Software and Affected Versions: GattLib version 0.3-rc1 Description: The issue is related to a stack-based buffer over-read in the get device path from mac function located in dbus/gattlib.c. Recommendations: For GattLib version 0.3-rc1, at the moment, there is no informati...

PT-2021-20216

Name of the Vulnerable Software and Affected Versions GattLib version 0.3-rc1 Description The issue is a stack-based buffer over-read in the get device path from mac function located in dbus/gattlib.c. Recommendations For GattLib version 0.3-rc1, consider restricting access to the get device path...

virt:ol and virt-devel:rhel security, bug fix, and enhancement update

libvirt 6.0.0-35.0.1 - Set SOURCEDATEEPOCH from changelog Orabug: 32019554 - Add runtime deps for pkg librbd1 = 1:10.2.5 Keshav Sharma - Disable parallel builds Karl Heubaum libvirt-dbus 1.3.0 - Resolves: bz1810193 Upgrade components in virt:rhel module:stream for RHEL-8.3 release libvirt-python...