USN-6882-2: Cinder regression

USN-6882-1 fixed vulnerabilities in Cinder. The update caused a regression in certain environments due to incorrect privilege handling. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Martin Kaesberger discovered that Cinder incorrectly handled QCOW2...

Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS : Cinder regression (USN-6882-2)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6882-2 advisory. USN-6882-1 fixed vulnerabilities in Cinder. The update caused a regression in certain environments due to incorrect privilege...

CVE-2024-0105

CVE-2024-0105 concerns NVIDIA ConnectX firmware (and related BlueField DPU components) with an improper handling of insufficient privileges. The public materials describe the vulnerability as enabling denial of service, data tampering, and limited information disclosure when an attacker exploits ...

NVIDIA BlueField 安全漏洞

NVIDIA BlueField is a series of data processing units from NVIDIA. NVIDIA BlueField suffers from an authorization issue vulnerability that stems from mishandling of privileges, which can be exploited by an attacker to cause a denial of service, data tampering, and information disclosure...

The vulnerability of the Vijeo Designer software lies in its insecure handling of privileges, allowing attackers to perform arbitrary actions.

The vulnerability of the Vijeo Designer software is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to perform arbitrary actions...

CVE-2024-20506 ClamAV Privilege Handling Escalation Vulnerability

A vulnerability in the ClamD service module of Clam AntiVirus ClamAV versions 1.4.0, 1.3.2 and prior versions, all 1.2.x versions, 1.0.6 and prior versions, all 0.105.x versions, all 0.104.x versions, and 0.103.11 and all prior versions could allow an authenticated, local attacker to corrupt...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Aug-2024 Release 1 prior to version 1, which stems from a mishandling of insufficient...

The vulnerability of the software for automating the management of OpenText Content Manager documents lies in the insecure handling of privileges. This allows an attacker to elevate their privileges or perform arbitrary actions.

The vulnerability of the OpenText Content Manager software for document automation management is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to enhance their privileges or perform arbitrary actions remotely...

CVE-2024-20872

CVE-2024-20872 affects Samsung TalkBackSE prior to Android 14. The issue is an improper handling of insufficient privileges that allows a local attacker to modify TalkBackSE settings. The vulnerability is local and does not require user interaction. PT-Security notes that updating to Android 14 o...

CVE-2024-20854

Improper handling of insufficient privileges vulnerability in Samsung Camera prior to versions 12.1.0.31 in Android 12, 13.1.02.07 in Android 13, and 14.0.01.06 in Android 14 allows local attackers to access image data...

PT-2024-18764 · Samsung +1 · Samsung Camera +3

Name of the Vulnerable Software and Affected Versions: Samsung Camera versions prior to 12.1.0.31 in Android 12 Samsung Camera versions prior to 13.1.02.07 in Android 13 Samsung Camera versions prior to 14.0.01.06 in Android 14 Description: The issue is related to improper handling of insufficien...

Improper Handling of Insufficient Privileges (Leaky Vessels)

Overview Affected versions of this package are vulnerable to Improper Handling of Insufficient Privileges Leaky Vessels via APIs for running interactive containers based on built images. It is possible to use these APIs to ask BuildKit to run a container with elevated privileges. Normally, runnin...

Improper Handling of Insufficient Privileges (Leaky Vessels)

Overview Affected versions of this package are vulnerable to Improper Handling of Insufficient Privileges Leaky Vessels via APIs for running interactive containers based on built images. It is possible to use these APIs to ask BuildKit to run a container with elevated privileges. Normally, runnin...

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung SAMSUNG. A security vulnerability previously existed in SAMSUNG Mobile devices version 5.2.00.7, which stemmed from insufficient privileges or improper handling...

PT-2023-9633 · Nvidia · Nvidia Connectx Host Firmware

Name of the Vulnerable Software and Affected Versions: NVIDIA ConnectX Host Firmware for the BlueField Data Processing Unit DPU affected versions not specified Description: The issue is related to an improper handling of insufficient privileges, which may lead to denial of service, data tampering...

The vulnerability of the Management Central component of the IBM i operating system, which allows attackers to escalate their privileges.

The vulnerability of the Management Central component of the IBM i operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges and gain root access to the operating system...

The vulnerability of the libxpc library in MacOS operating systems allows a hacker to execute arbitrary code with root privileges.

The vulnerability of the libxpc library in MacOS operating systems is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to execute arbitrary code with root privileges...

The vulnerability of the kernel mode of NVIDIA GeForce, Studio, RTX/Quadro, NVS, and Tesla graphics processors allows attackers to perform spoofing attacks or induce service failures.

The vulnerability of the kernel mode of NVIDIA GeForce, Studio, RTX/Quadro, NVS, and Tesla graphics processors is related to improper handling of insufficient resolutions or privileges. Exploiting this vulnerability can allow attackers to perform spoofing attacks or cause service failures...

The vulnerability of the Crestron AirMedia collaborative presentation system lies in improper privilege handling, allowing an intruder to gain access to the command line with the SYSTEM privilege level.

The vulnerability of the Crestron AirMedia collaborative presentation system is related to incorrect privilege handling. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to the command line with SYSTEM privileges...

memos 安全漏洞

memos is an open source hosted memo center with knowledge management and social features. A security vulnerability exists in memos versions prior to 0.9.1, which stems from insufficient privileges or improper handling of privileges...