Linux - Nested User Namespace idmap Limit Local Privilege Escalation (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Linux Nested User Namespace idmap Limit Local Privilege Escalation', 'Description' = %q This module exploits a vulnerability in Linux kernels...

Linux Nested User Namespace idmap Limit Local Privilege Escalation Exploit

This Metasploit module exploits a vulnerability in Linux kernels 4.15.0 to 4.18.18, and 4.19.0 to 4.19.1, where broken uid/gid mappings between nested user namespaces and kernel uid/gid mappings allow elevation to root CVE-2018-18955. The target system must have unprivileged user namespaces enabl...

SUSE-SU-2018:3161-1 Security update for samba

Samba was updated to 4.6.15, bringing bug and security fixes. bsc1110943 Following security issues were fixed: - CVE-2018-10919: Fix unauthorized attribute access via searches. bsc1095057; Non-security bugs fixed: - Fix ctdbmutexcephradoshelper deadlock bsc1102230. - Allow idmaprid to have primar...

Debian: Security Advisory (DLA-1429-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES11 Security Update : samba (SUSE-SU-2016:0032-1)

This update for Samba fixes the following security issues : - CVE-2015-5330: Remote read memory exploit in LDB bnc958586. - CVE-2015-5252: Insufficient symlink verification file access outside the share bnc958582. - CVE-2015-5296: No man in the middle protection when forcing smb encryption on the...

Oracle Sun Solaris Kernel IDMap Subcomponent Denial of Service Vulnerability

Oracle Sun Solaris is a set of Unix-like operating systems from Oracle. A security vulnerability exists in the Kernel IDMap subcomponent in Oracle Sun Solaris version 11.2. A remote attacker could exploit this vulnerability to cause a denial of service...

CVE-2015-2578

Unspecified vulnerability in Oracle Sun Solaris 11.2 allows remote attackers to affect availability via vectors related to Kernel IDMap...

Design/Logic Flaw

Unspecified vulnerability in Oracle Sun Solaris 11.2 allows remote attackers to affect availability via vectors related to Kernel IDMap...

CVE-2015-2578

Unspecified vulnerability in Oracle Sun Solaris 11.2 allows remote attackers to affect availability via vectors related to Kernel IDMap...

Oracle Solaris Critical Patch Update : apr2015_SRU11_2_8_5_0

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: ZFS File system. The supported version that is affected is 11.2. Easily exploitable vulnerability requiring logon to...

PT-2015-5788

Name of the Vulnerable Software and Affected Versions Oracle Sun Solaris version 11.2 Description The issue affects the availability of the system. It is related to vectors concerning Kernel IDMap in Oracle Sun Solaris. Recommendations For Oracle Sun Solaris version 11.2, at the moment, there is ...

CVE-2015-2578: Undefined Security Weakness

Unspecified vulnerability in Oracle Sun Solaris 11.2 allows remote attackers to affect availability via vectors related to Kernel IDMap...

SuSE 11.2 Security Update : Samba (SAT Patch Number 8170)

The Samba server suite received a security update to fix a denial of service problem in integer wrap protection. CVE-2013-4124. Additionally, the following stability fixes are included in this update : - Do not restart the smbfs service on pre-11.3 systems during dhcp lease renewal when the IP...

CVE-2009-2012

Unspecified vulnerability in idmap in Sun OpenSolaris snv88 through snv110, when a CIFS server is enabled, allows local users to cause a denial of service idpmapd daemon crash and idmapd outage via unknown vectors...

CVE-2009-2012

CVE-2009-2012 affects Sun OpenSolaris with CIFS server enabled, in idmap within SNV builds snv_88 through snv_110. A local-privilege context allows denial of service, causing idpmapd daemon crash and idmapd outage via unknown vectors. The public records do not provide concrete exploitation detail...

CVE-2009-2012

Unspecified vulnerability in idmap in Sun OpenSolaris snv88 through snv110, when a CIFS server is enabled, allows local users to cause a denial of service idpmapd daemon crash and idmapd outage via unknown vectors...

CVE-2009-2012: Undefined Security Weakness

Unspecified vulnerability in idmap in Sun OpenSolaris snv88 through snv110, when a CIFS server is enabled, allows local users to cause a denial of service idpmapd daemon crash and idmapd outage via unknown vectors...