Critical Photon OS Security Update - PHSA-2021-0077

Updates of 'glibc', 'falco', 'mysql' packages of Photon OS have been released...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2021-2.0-0376

An update of 'falco' packages of Photon OS has been released...

Important Photon OS Security Update - PHSA-2021-3.0-0280

Updates of 'falco' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2021-0280

Updates of 'falco' packages of Photon OS have been released...

CVE-2021-33505

A local malicious user can circumvent the Falco detection engine through 0.28.1 by running a program that alters arguments of system calls being executed. Issue is fixed in Falco versions = 0.29.1...

CVE-2021-33505

A local malicious user can circumvent the Falco detection engine through 0.28.1 by running a program that alters arguments of system calls being executed. Issue is fixed in Falco versions = 0.29.1...

Code injection

A local malicious user can circumvent the Falco detection engine through 0.28.1 by running a program that alters arguments of system calls being executed. Issue is fixed in Falco versions = 0.29.1...

CVE-2021-33505

CVE-2021-33505 affects Falco detection engine. A local attacker can bypass detection by running a program that alters arguments of system calls, as described in Red Hat’s advisory. The issue is present in Falco 0.28.1 and was fixed in Falco 0.29.1 and later releases. Connected sources corroborate...

CVE-2021-33505

A local malicious user can circumvent the Falco detection engine through 0.28.1 by running a program that alters arguments of system calls being executed. Issue is fixed in Falco versions = 0.29.1...

Falco 安全漏洞

Falco is a runtime sandbox environment. A security vulnerability exists in Falco, which stems from the fact that version 0.28.1 of Falco has a Time to Check and Time to Use TOCTOU contention condition...

Exploit for Off-by-one Error in Sudo_Project Sudo

CVE-2021-3156 Note: These instructions are my own and not...

UPDATE: Sysdig Falco v0.18.0

Sysdig Falco v0.18.0 was released a while ago which I detected when I was using this tool and hence this blog. It has been some time since I last blogged about this open source behavorial activity monitor which has container support and a lot has changed in this version as well. What is Sysdig...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-2.0-0163

An update of 'falco', 'bubblewrap' packages of Photon OS has been released...

UPDATE: Sysdig Falco v0.15.1

PenTestIT RSS Feed Three days ago, an updated version – Sysdig Falco v0.15.1 – was released. It has been some time since I last blogged about this open source behavorial activity monitor which has container support. This release remediates integration issues with Anchore by updating urllib3 and...

Important Photon OS Security Update - PHSA-2019-0163

Updates of 'bubblewrap', 'falco' packages of Photon OS have been released...

CVE-2019-8339

An issue was discovered in Falco through 0.14.0. A missing indicator for insufficient resources allows local users to bypass the detection engine...

CVE-2019-8339

An issue was discovered in Falco through 0.14.0. A missing indicator for insufficient resources allows local users to bypass the detection engine...

Design/Logic Flaw

An issue was discovered in Falco through 0.14.0. A missing indicator for insufficient resources allows local users to bypass the detection engine...

CVE-2019-8339

An issue was discovered in Falco through 0.14.0. A missing indicator for insufficient resources allows local users to bypass the detection engine...

CVE-2019-8339

CVE-2019-8339 affects Falco through 0.14.0, where a missing indicator for insufficient resources allows local users to bypass detection. The Connected Documents show Photon OS advisories updating Falco packages (PHSA-2019-3.0-0023, PHSA-2019-2.0-0167, PHSA-2019-3.0-0023) indicating remediation vi...