Lucene search
+L

222 matches found

OSV
OSV
•added 2025/06/20 12:00 a.m.•12 views

ALSA-2025:A006 Important: libblockdev security update

libblockdev is a C library supporting GObject introspection for manipulation of block devices. It has a plugin-based architecture where each technology like LVM, Btrfs, MD RAID, Swap,... is implemented in a separate plugin, possibly with multiple implementations e.g. using LVM CLI or the new LVM...

7CVSS7.1AI score0.00469EPSS
SaveExploits18References3
AlmaLinux
AlmaLinux
•added 2025/06/20 12:00 a.m.•16 views

Important: libblockdev security update

libblockdev is a C library supporting GObject introspection for manipulation of block devices. It has a plugin-based architecture where each technology like LVM, Btrfs, MD RAID, Swap,... is implemented in a separate plugin, possibly with multiple implementations e.g. using LVM CLI or the new LVM...

7CVSS7.2AI score0.00469EPSS
SaveExploits18References3
OSV
OSV
•added 2025/06/20 12:00 a.m.•15 views

ALSA-2025:A004 Important: libblockdev security update

libblockdev is a C library supporting GObject introspection for manipulation of block devices. It has a plugin-based architecture where each technology like LVM, Btrfs, MD RAID, Swap,... is implemented in a separate plugin, possibly with multiple implementations e.g. using LVM CLI or the new LVM...

7CVSS7.1AI score0.00469EPSS
SaveExploits18References3
OSV
OSV
•added 2025/06/20 12:00 a.m.•17 views

ALSA-2025:A005 Important: libblockdev security update

libblockdev is a C library supporting GObject introspection for manipulation of block devices. It has a plugin-based architecture where each technology like LVM, Btrfs, MD RAID, Swap,... is implemented in a separate plugin, possibly with multiple implementations e.g. using LVM CLI or the new LVM...

7CVSS7.1AI score0.00469EPSS
SaveExploits18References3
AlmaLinux
AlmaLinux
•added 2025/06/20 12:00 a.m.•29 views

Important: libblockdev security update

libblockdev is a C library supporting GObject introspection for manipulation of block devices. It has a plugin-based architecture where each technology like LVM, Btrfs, MD RAID, Swap,... is implemented in a separate plugin, possibly with multiple implementations e.g. using LVM CLI or the new LVM...

7CVSS7.2AI score0.00469EPSS
SaveExploits18References3
OSV
OSV
•added 2025/06/19 12:15 p.m.•16 views

AZL-64187 CVE-2025-6019 affecting package libblockdev 2.28-3

A Local Privilege Escalation LPE vulnerability was found in libblockdev. Generally, the "allowactive" setting in Polkit permits a physically present user to take certain actions based on the session type. Due to the way libblockdev interacts with the udisks daemon, an "allowactive" user on a syst...

7CVSS7.4AI score0.00469EPSS
SaveExploits18References1
OSV
OSV
•added 2025/06/19 12:15 p.m.•14 views

AZL-64190 CVE-2025-6019 affecting package libblockdev 3.2.0-1

A Local Privilege Escalation LPE vulnerability was found in libblockdev. Generally, the "allowactive" setting in Polkit permits a physically present user to take certain actions based on the session type. Due to the way libblockdev interacts with the udisks daemon, an "allowactive" user on a syst...

7CVSS7.2AI score0.00469EPSS
SaveExploits18References1
NVD
NVD
•added 2025/06/19 12:15 p.m.•17 views

CVE-2025-6019

A Local Privilege Escalation LPE vulnerability was found in libblockdev. Generally, the "allowactive" setting in Polkit permits a physically present user to take certain actions based on the session type. Due to the way libblockdev interacts with the udisks daemon, an "allowactive" user on a syst...

7CVSS0.00469EPSS
SaveExploits18References20
OSV
OSV
•added 2025/06/19 12:15 p.m.•11 views

DEBIAN-CVE-2025-6019

A Local Privilege Escalation LPE vulnerability was found in libblockdev. Generally, the "allowactive" setting in Polkit permits a physically present user to take certain actions based on the session type. Due to the way libblockdev interacts with the udisks daemon, an "allowactive" user on a syst...

7CVSS7.7AI score0.00469EPSS
SaveExploits18References1
attackerkb
attackerkb
•added 2025/06/19 11:55 a.m.•7 views

CVE-2025-6019

A Local Privilege Escalation LPE vulnerability was found in libblockdev. Generally, the "allowactive" setting in Polkit permits a physically present user to take certain actions based on the session type. Due to the way libblockdev interacts with the udisks daemon, an "allowactive" user on a syst...

7CVSS7.3AI score0.00469EPSS
SaveExploits18References15
Vulnrichment
Vulnrichment
•added 2025/06/19 11:55 a.m.•14 views

CVE-2025-6019 Libblockdev: lpe from allow_active to root in libblockdev via udisks

A Local Privilege Escalation LPE vulnerability was found in libblockdev. Generally, the "allowactive" setting in Polkit permits a physically present user to take certain actions based on the session type. Due to the way libblockdev interacts with the udisks daemon, an "allowactive" user on a syst...

7CVSS7.8AI score0.00469EPSS
SaveExploits18References14
CVE
CVE
•added 2025/06/19 11:55 a.m.•355 views

CVE-2025-6019

CVE-2025-6019 is a local privilege escalation in libblockdev that leverages the interaction with the udisks daemon and the Polkit “allow_active” setting to allow a physically present user to escalate to root. The issue arises when an attacker crafts an XFS image containing a SUID-root shell and m...

7CVSS7.4AI score0.00469EPSS
SaveIn wildExploits18References20
Debian CVE
Debian CVE
•added 2025/06/19 11:55 a.m.•16 views

CVE-2025-6019

A Local Privilege Escalation LPE vulnerability was found in libblockdev. Generally, the "allowactive" setting in Polkit permits a physically present user to take certain actions based on the session type. Due to the way libblockdev interacts with the udisks daemon, an "allowactive" user on a syst...

7CVSS7.7AI score0.00469EPSS
SaveExploits18
OSV
OSV
•added 2025/06/19 11:55 a.m.•21 views

CVE-2025-6019 Libblockdev: lpe from allow_active to root in libblockdev via udisks

A Local Privilege Escalation LPE vulnerability was found in libblockdev. Generally, the "allowactive" setting in Polkit permits a physically present user to take certain actions based on the session type. Due to the way libblockdev interacts with the udisks daemon, an "allowactive" user on a syst...

7CVSS7.2AI score
SaveExploits0References24
Cvelist
Cvelist
•added 2025/06/19 11:55 a.m.•51 views

CVE-2025-6019 Libblockdev: lpe from allow_active to root in libblockdev via udisks

A Local Privilege Escalation LPE vulnerability was found in libblockdev. Generally, the "allowactive" setting in Polkit permits a physically present user to take certain actions based on the session type. Due to the way libblockdev interacts with the udisks daemon, an "allowactive" user on a syst...

7CVSS0.00469EPSS
SaveExploits18References14
SUSE CVE
SUSE CVE
•added 2025/06/19 3:29 a.m.•14 views

SUSE CVE-2025-6019

A Local Privilege Escalation LPE vulnerability was found in libblockdev. Generally, the "allowactive" setting in Polkit permits a physically present user to take certain actions based on the session type. Due to the way libblockdev interacts with the udisks daemon, an "allowactive" user on a syst...

7CVSS7.2AI score0.00469EPSS
SaveExploits18References10
CNNVD
CNNVD
•added 2025/06/19 12:00 a.m.•5 views

Storaged libblockdev 安全漏洞

Storaged libblockdev is a Storaged open source library for manipulating block devices. A security vulnerability exists in Storaged libblockdev that stems from interacting with the udisks daemon in an improper manner, which could lead to local elevation of privilege...

7CVSS7.2AI score0.00469EPSS
SaveExploits18References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/19 12:00 a.m.•0 views

CVE-2025-6019: Execution with Unnecessary Privileges

A Local Privilege Escalation LPE vulnerability was found in libblockdev. Generally, the "allowactive" setting in Polkit permits a physically present user to take certain actions based on the session type. Due to the way libblockdev interacts with the udisks daemon, an "allowactive" user on a syst...

7CVSS6AI score0.00469EPSS
SaveExploits18References2
OpenVAS
OpenVAS
•added 2025/06/19 12:00 a.m.•5 views

Ubuntu: Security Advisory (USN-7577-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7CVSS7AI score0.00469EPSS
SaveExploits18References2
OpenVAS
OpenVAS
•added 2025/06/19 12:00 a.m.•15 views

Ubuntu: Security Advisory (USN-7577-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7CVSS7AI score0.00469EPSS
SaveExploits18References2
Rows per page
Query Builder