CVE-2020-16019

Inappropriate implementation in filesystem in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process to bypass noexec restrictions via a malicious file...

MGASA-2021-0006 Updated dash packages fix a security vulnerability

Code was executed even if noexec "-n" was specified. bdo58288 / bsc1178978...

Updated dash packages fix a security vulnerability

Code was executed even if noexec "-n" was specified. bdo58288 / bsc1178978...

PT-2021-30829

Name of the Vulnerable Software and Affected Versions No specific software or version is mentioned in the provided description. Description The issue involves code execution despite the specification of noexec "-n". Recommendations At the moment, there is no information about a newer version that...

CVE-2020-16019: Undefined Security Weakness

Inappropriate implementation in filesystem in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process to bypass noexec restrictions via a malicious file...

CVE-2020-16035: Undefined Security Weakness

Insufficient data validation in cros-disks in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process to bypass noexec restrictions via a malicious file...

openSUSE Security Update : dash (openSUSE-2020-2065)

This update for dash fixes the following issues : - Fixed an issue where code was executed even if noexec '-n' was specified bsc1178978. This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin wer...

openSUSE Security Update : dash (openSUSE-2020-2046)

This update for dash fixes the following issues : - Fixed an issue where code was executed even if noexec '-n' was specified bsc1178978. This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin wer...

PT-2020-21626

Name of the Vulnerable Software and Affected Versions dash affected versions not specified Description The issue concerns the execution of code even when the noexec option '-n' is specified. This could potentially lead to unintended code execution. Recommendations At the moment, there is no...

OPENSUSE-SU-2020:2046-1 Security update for dash

This update for dash fixes the following issues: - Fixed an issue where code was executed even if noexec '-n' was specified bsc1178978. This update was imported from the SUSE:SLE-15:Update update project...

PT-2020-21625

Name of the Vulnerable Software and Affected Versions dash affected versions not specified Description The issue concerns the execution of code even when the noexec option '-n' is specified. This could potentially lead to unintended code execution. Recommendations At the moment, there is no...

SUSE-SU-2020:3480-1 Security update for dash

This update for dash fixes the following issues: - Fixed an issue where code was executed even if noexec '-n' was specified bsc1178978...

PT-2020-22754

Name of the Vulnerable Software and Affected Versions dash affected versions not specified Description The issue concerns the execution of code even when the noexec option '-n' is specified. This could potentially lead to unintended code execution. Recommendations At the moment, there is no...

CVE-2020-16035

Insufficient data validation in cros-disks in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process to bypass noexec restrictions via a malicious file...

PT-2020-5023

Name of the Vulnerable Software and Affected Versions Google Chrome on ChromeOS versions prior to 87.0.4280.66 Description The issue is related to an inappropriate implementation in the filesystem of Google Chrome on ChromeOS, which can be exploited by a remote attacker who has compromised the...

PT-2020-5046

Name of the Vulnerable Software and Affected Versions Google Chrome on ChromeOS versions prior to 87.0.4280.66 Description The issue is related to insufficient data validation in the cros-disks component of Google Chrome on ChromeOS. This allows a remote attacker who has compromised the browser...

Linux: noexec option on /tmp

The noexec mount option specifies that the filesystem cannot contain executable binaries. Since the /tmp filesystem is only intended for temporary file storage, set this option to ensure that users cannot run executable binaries from /tmp. SPDX-FileCopyrightText: 2020 Greenbone AG Some text...

Linux: noexec option on /var/tmp

The noexec mount option specifies that the filesystem cannot contain special devices. Since the /var/tmp filesystem is not intended to support devices, set this option to ensure that users cannot attempt to create block or character special devices in /var/tmp. SPDX-FileCopyrightText: 2020...

USN-3968-3 sudo vulnerabilities

USN-3968-1 fixed several vulnerabilities in Sudo. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: Florian Weimer discovered that Sudo incorrectly handled the noexec restriction when used with certain applications. A local attacker could possibly use...

Linux: Mount data file partitions, CD/DVD, and USB partitions in noexec mode

Mounting data file partitions in noexec mode can make all files in the partitions nonexecutable, thus preventing security risks. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...