USN-6444-1: Linux kernel vulnerabilities

Ross Lagerwall discovered that the Xen netback backend driver in the Linux kernel did not properly handle certain unusual packets from a paravirtualized network frontend, leading to a buffer overflow. An attacker in a guest VM could use this to cause a denial of service host system crash or...

USN-6441-1: Linux kernel vulnerabilities

Ross Lagerwall discovered that the Xen netback backend driver in the Linux kernel did not properly handle certain unusual packets from a paravirtualized network frontend, leading to a buffer overflow. An attacker in a guest VM could use this to cause a denial of service host system crash or...

Privilege Escalation

kOps is vulnerable to Privilege Escalation. The vulnerability is caused when running kOps with the GCP Provider in Gossip Mode, where Node service account credentials could be used by a container running in the cluster to retrieve sensitive information from the state storage bucket and escalate t...

GHSA-8GWJ-M6VH-2G6J kOps privilege escalation vulnerability

Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode...

kOps privilege escalation vulnerability

Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode...

CVE-2023-1943

Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode...

Privilege escalation

Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode...

CVE-2023-1943 Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode

Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode...

CVE-2023-1943 Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode

Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode...

CVE-2023-1943 Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode

Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode...

CVE-2023-1943

KOps Privilege Escalation (CVE-2023-1943): A vulnerability occurs when using the GCE/GCP provider in Gossip Mode, where node service account credentials could be accessed by a container in the cluster to retrieve sensitive information from the state storage bucket and escalate to cluster-admin pe...

CVE-2023-1943

Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode...

CVE-2023-1943: Execution with Unnecessary Privileges

Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: gitness, kind, hey, dgraph, dynamic-localpv-provisioner, kubernetes-csi-livenessprobe, scorecard, grpcurl, spark-operator, rqlite, sigstore-scaffolding, secrets-store-csi-driver-provider-gcp, nats, kots, nginx-stable, slsa-verifier, flux-notification-controller,...

Ubuntu: Security Advisory (USN-6396-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-6340-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6338-2: Linux kernel vulnerabilities

Zi Fan Tan discovered that the binder IPC implementation in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2023-21255 It was discovered that a race condition existed in th...

USN-6340-1: Linux kernel vulnerabilities

Ruihan Li discovered that the bluetooth subsystem in the Linux kernel did not properly perform permissions checks when handling HCI sockets. A physically proximate attacker could use this to cause a denial of service bluetooth communication. CVE-2023-2002 Zi Fan Tan discovered that the binder IPC...

Ubuntu: Security Advisory (USN-6330-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-6329-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...