ubuntu-cve-2019-14287-patch-manager

Ubuntu CVE-2019-14287 패치 관리자 Ubuntu CVE-2019-14287 패치 관리자는 sudo 권한 상승 취약점인 CVE-2019-14287에 대한 확인, 완화 및 보호 검증을 위한 GUI 기반 실습 도구입니다. 이 프로젝트는 Ubuntu 19.04 amd64 실습 환경을 위해 개발되었습니다. 프로젝트 목적 CVE-2019-14287은 오래된 sudo 버전에 영향을 미칩니다. 이 취약점으로 인해 루트를 제외하는 sudoers 규칙을 가진 사용자가 -1 또는 4294967295와 같이 조작된 숫자 사용자 ID...

EUVD-2021-2563

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2019-19232

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Sudo through 1.8.29, an attacker with access to a Runas ALL sudoer account can impersonate a nonexistent user by invoking sudo with a numeric uid that is not...

K000148897: Sudo vulnerability CVE-2019-19232

Security Advisory Description In Sudo through 1.8.29, an attacker with access to a Runas ALL sudoer account can impersonate a nonexistent user by invoking sudo with a numeric uid that is not associated with any user. NOTE: The software maintainer believes that this is not a vulnerability because...

Privilege Elevation in runc

libcontainer/user/user.go in runC before 0.1.0, as used in Docker before 1.11.2, improperly treats a numeric UID as a potential username, which allows local users to gain privileges via a numeric username in the password file in a container...

libcontainer/user/user.go in runC before 0.1.0 as used in Docker before 1.11.2 improperly treats a numeric UID as a potential username which allows local users to gain privileges via a numeric username in the password file in a container.

...

CVE-2019-19232

In Sudo through 1.8.29, an attacker with access to a Runas ALL sudoer account can impersonate a nonexistent user by invoking sudo with a numeric uid that is not associated with any user. NOTE: The software maintainer believes that this is not a vulnerability because running a command via sudo as ...

CVE-2019-19232

In Sudo through 1.8.29, an attacker with access to a Runas ALL sudoer account can impersonate a nonexistent user by invoking sudo with a numeric uid that is not associated with any user. NOTE: The software maintainer believes that this is not a vulnerability because running a command via sudo as ...

CVE-2019-19232

In Sudo through 1.8.29, an attacker with access to a Runas ALL sudoer account can impersonate a nonexistent user by invoking sudo with a numeric uid that is not associated with any user. NOTE: The software maintainer believes that this is not a vulnerability because running a command via sudo as ...

Privilege Escalation

github.com/opencontainers/runc is vulnerable to privilege escalation attacks. These attacks are possible because github.com/opencontainers/runc treats a numeric UID as a potential username. This allows local users to gain privileges though a numeric username in the password file. This transitivel...

Privilege Escalation

github.com/opencontainers/runc is vulnerable to privilege escalation attacks. These attacks are possible because github.com/opencontainers/runc treats a numeric UID as a potential username. This allows local users to gain privileges though a numeric username in the password file. This transitivel...

DEBIAN-CVE-2016-3697

libcontainer/user/user.go in runC before 0.1.0, as used in Docker before 1.11.2, improperly treats a numeric UID as a potential username, which allows local users to gain privileges via a numeric username in the password file in a container...

CVE-2016-3697

CVE-2016-3697 affects Docker runtimes (libcontainer/user/user.go in runC) up to Docker 1.11.2, where a numeric UID is misinterpreted as a username in /etc/passwd inside a container, enabling local privilege escalation. The issue is tied to the runC/opencontainers code path (libcontainer) and allo...

KLA10820 Privilege escalation vulnerability in Docker

An improper treating of a numeric UID was found in Docker. By exploiting this vulnerability malicious users can escalate privileges. This vulnerability can be exploited locally via a numeric username in the password file. Technical details This vulnerability is related to libcontainer/user/user.g...