UBUNTU-CVE-2022-3560

A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the 'pesign' group. However, the script doesn't check for...

CVE-2022-3560

A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the 'pesign' group. However, the script doesn't check for...

CVE-2022-3560

A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the 'pesign' group. However, the script doesn't check for...

CVE-2022-3560

A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the 'pesign' group. However, the script doesn't check for...

CVE-2022-3560

CVE-2022-3560 affects the pesign package. A systemd service used to start the pesign daemon runs a script that sets ACLs for /etc/pki/pesign and /run/pesign but does not validate symbolic links, enabling a potential path traversal to access privileged files. The issue is described as a local priv...

CVE-2022-3560

A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the 'pesign' group. However, the script doesn't check for...

CVE-2022-3560

A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the 'pesign' group. However, the script doesn't check for...

pesign 路径遍历漏洞

pesign is a tool for signing PE-COFF binaries, hoping to be at least vaguely compliant with the PE and Authenticode specifications. A security vulnerability exists in pesign. An attacker could exploit this vulnerability to access privileged files and directories via a path traversal attack...

pesign bug fix and enhancement update

An update is available for pesign. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.1...

pesign bug fix and enhancement update

An update is available for pesign. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 8.6...

ALBA-2022:1834 pesign bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

pesign bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

CVE-2022-1249

A NULL pointer dereference flaw was found in pesign's cmssetpwdata function of the cmscommon.c file. The function fails to handle the NULL pwdata invocation from daemon.c, which leads to an explicit NULL dereference and crash on all attempts to daemonize pesign...

CVE-2022-1249

A NULL pointer dereference flaw was found in pesign's cmssetpwdata function of the cmscommon.c file. The function fails to handle the NULL pwdata invocation from daemon.c, which leads to an explicit NULL dereference and crash on all attempts to daemonize pesign...

CVE-2022-1249

A NULL pointer dereference flaw was found in pesign's cmssetpwdata function of the cmscommon.c file. The function fails to handle the NULL pwdata invocation from daemon.c, which leads to an explicit NULL dereference and crash on all attempts to daemonize pesign...

AZL-9655 CVE-2022-1249 affecting package pesign 0.112-32

A NULL pointer dereference flaw was found in pesign's cmssetpwdata function of the cmscommon.c file. The function fails to handle the NULL pwdata invocation from daemon.c, which leads to an explicit NULL dereference and crash on all attempts to daemonize pesign...

CVE-2022-1249

A NULL pointer dereference flaw was found in pesign's cmssetpwdata function of the cmscommon.c file. The function fails to handle the NULL pwdata invocation from daemon.c, which leads to an explicit NULL dereference and crash on all attempts to daemonize pesign...

UBUNTU-CVE-2022-1249

A NULL pointer dereference flaw was found in pesign's cmssetpwdata function of the cmscommon.c file. The function fails to handle the NULL pwdata invocation from daemon.c, which leads to an explicit NULL dereference and crash on all attempts to daemonize pesign...

Null pointer dereference

A NULL pointer dereference flaw was found in pesign's cmssetpwdata function of the cmscommon.c file. The function fails to handle the NULL pwdata invocation from daemon.c, which leads to an explicit NULL dereference and crash on all attempts to daemonize pesign...

CVE-2022-1249

A NULL pointer dereference flaw was found in pesign's cmssetpwdata function of the cmscommon.c file. The function fails to handle the NULL pwdata invocation from daemon.c, which leads to an explicit NULL dereference and crash on all attempts to daemonize pesign...