913 matches found
Ubuntu 22.04 LTS : Linux kernel vulnerabilities (USN-6260-1)
The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6260-1 advisory. It was discovered that the NTFS file system implementation in the Linux kernel did not properly check buffer indexes in certain situations, leading to an...
Ubuntu: Security Advisory (USN-6251-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE CVE-2023-32629
Local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovlcopyupmetainodedata skip permission checks when calling ovldosetxattr on Ubuntu kernels...
CVE-2023-32629
Local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovlcopyupmetainodedata skip permission checks when calling ovldosetxattr on Ubuntu kernels...
CVE-2023-32629
Local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovlcopyupmetainodedata skip permission checks when calling ovldosetxattr on Ubuntu kernels...
CVE-2023-32629
Local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovlcopyupmetainodedata skip permission checks when calling ovldosetxattr on Ubuntu kernels...
CVE-2023-32629
Local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovlcopyupmetainodedata skip permission checks when calling ovldosetxattr on Ubuntu kernels...
CVE-2023-32629
CVE-2023-32629 is an OverlayFS local privilege escalation in Ubuntu kernels. The issue arises when OverlayFS copy-up uses host credentials while preserving xattrs, allowing an unprivileged user (with user namespaces) to gain real root outside the namespace by exploiting a trusted cap_setuid xattr...
CVE-2023-2640
CVE-2023-2640 describes a local privilege-escalation in Ubuntu kernels where overlayfs allows an unprivileged user to set privileged trusted.overlayfs.* xattrs on mounted files due to a skip-permission-check in overlayfs. This affects Ubuntu kernel builds carrying the c914c0e27eb0 change paired w...
Canonical Ubuntu 安全漏洞
Canonical Ubuntu is a GNU/Linux operating system for desktop applications from Canonical, a British company. A security vulnerability exists in Canonical Ubuntu that stems from Overlayfs ovlcopyupmetainodedata skipping privilege checking when ovldosetxattr is called on the Ubuntu kernel...
Ubuntu 22.04 LTS : Linux kernel (OEM) vulnerabilities (USN-6248-1)
The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6248-1 advisory. It was discovered that the network queuing discipline implementation in the Linux kernel contained a null pointer dereference in some situations. A local...
Canonical Ubuntu Linux 安全漏洞
Canonical Ubuntu Linux is a Linux operating system from Canonical, a British company. Canonical Ubuntu Linux suffers from a security vulnerability that stems from OverlayFS in the kernel not performing privilege checks, resulting in an elevation of privilege vulnerability...
Critical Photon OS Security Update - PHSA-2023-3.0-0618
Updates of 'fuse-overlayfs-snapshotter' packages of Photon OS have been released...
USN-6250-1: Linux kernel vulnerabilities
Stonejiajia, Shir Tamari and Sagi Tzadik discovered that the OverlayFS implementation in the Ubuntu Linux kernel did not properly perform permission checks in certain situations. A local attacker could possibly use this to gain elevated privileges. CVE-2023-2640 It was discovered that the IP-VLAN...
USN-6248-1 linux-oem-6.0 vulnerabilities
It was discovered that the network queuing discipline implementation in the Linux kernel contained a null pointer dereference in some situations. A local attacker could use this to cause a denial of service system crash. CVE-2022-47929 It was discovered that a race condition existed in Adreno GPU...
USN-6248-1: Linux kernel (OEM) vulnerabilities
It was discovered that the network queuing discipline implementation in the Linux kernel contained a null pointer dereference in some situations. A local attacker could use this to cause a denial of service system crash. CVE-2022-47929 It was discovered that a race condition existed in Adreno GPU...
Ubuntu 16.04 ESM : Linux kernel vulnerabilities (USN-6221-1)
The remote Ubuntu 16.04 ESM host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6221-1 advisory. It was discovered that a race condition existed in the overlay file system implementation in the Linux kernel. A local attacker could use this to cause a...
Critical Photon OS Security Update - PHSA-2023-4.0-0429
Updates of 'podman', 'fuse-overlayfs-snapshotter', 'bindutils' packages of Photon OS have been released...