8928 matches found
CVE-2025-24965 .krun_config.json symlink attack creates or overwrites file on the host in crun
crun is an open source OCI Container Runtime fully written in C. In affected versions A malicious container image could trick the krun handler into escaping the root filesystem, allowing file creation or modification on the host. No special permissions are needed, only the ability for the current...
CVE-2025-24965 .krun_config.json symlink attack creates or overwrites file on the host in crun
crun is an open source OCI Container Runtime fully written in C. In affected versions A malicious container image could trick the krun handler into escaping the root filesystem, allowing file creation or modification on the host. No special permissions are needed, only the ability for the current...
Fedora: Security Advisory (FEDORA-2025-e717eae403)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Azure Linux 3.0 Security Update: kernel (CVE-2007-4998)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2007-4998 advisory. - cp, when running with an option to preserve symlinks on multiple OSes, allows local, user-assisted attackers ...
Fedora 40 : stalld (2025-e717eae403)
The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-e717eae403 advisory. Add code to deal with schedsetattr not being exported in glibc 2.41 Address CVE-2024-54159 denial of services via symlink attack Tenable has extracted the...
Fedora 41 : stalld (2025-3dc53b7f76)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-3dc53b7f76 advisory. Add code to deal with schedsetattr not being exported in glibc 2.41 Address CVE-2024-54159 denial of services via symlink attack Tenable has extracted the...
DEBIAN-CVE-2024-45339
When logs are written to a widely-writable directory the default, an unprivileged attacker may predict a privileged process's log file path and pre-create a symbolic link to a sensitive file in its place. When that privileged process runs, it will follow the planted symlink and overwrite that...
AZL-56078 CVE-2024-45339 affecting package sriov-network-device-plugin for versions less than 3.7.0-3
When logs are written to a widely-writable directory the default, an unprivileged attacker may predict a privileged process's log file path and pre-create a symbolic link to a sensitive file in its place. When that privileged process runs, it will follow the planted symlink and overwrite that...
AZL-56379 CVE-2024-45339 affecting package glog 0.3.5-16
When logs are written to a widely-writable directory the default, an unprivileged attacker may predict a privileged process's log file path and pre-create a symbolic link to a sensitive file in its place. When that privileged process runs, it will follow the planted symlink and overwrite that...
AZL-56075 CVE-2024-45339 affecting package vitess for versions less than 17.0.7-4
When logs are written to a widely-writable directory the default, an unprivileged attacker may predict a privileged process's log file path and pre-create a symbolic link to a sensitive file in its place. When that privileged process runs, it will follow the planted symlink and overwrite that...
AZL-56066 CVE-2024-45339 affecting package vitess for versions less than 19.0.4-4
When logs are written to a widely-writable directory the default, an unprivileged attacker may predict a privileged process's log file path and pre-create a symbolic link to a sensitive file in its place. When that privileged process runs, it will follow the planted symlink and overwrite that...
CVE-2024-45339
CVE-2024-45339 affects the Go glog package. The issue arises when logs are written to a widely-writable directory: an unprivileged attacker could predict a privileged process’s log path and pre-create a symlink to a sensitive file, causing the process to overwrite it. The fix is to have glog exit...
SUSE CVE-2024-54148
Gogs is an open source self-hosted Git service. A malicious user is able to commit and edit a crafted symlink file to a repository to gain SSH access to the server. The vulnerability is fixed in 0.13.1...
CVE-2024-52535
Dell SupportAssist for Home PCs versions 4.6.1 and prior and Dell SupportAssist for Business PCs versions 4.5.0 and prior, contain a symbolic link symlink attack vulnerability in the software remediation component. A low-privileged authenticated user could potentially exploit this vulnerability,...
CVE-2024-52535
Dell SupportAssist for Home PCs versions 4.6.1 and prior and Dell SupportAssist for Business PCs versions 4.5.0 and prior, contain a symbolic link symlink attack vulnerability in the software remediation component. A low-privileged authenticated user could potentially exploit this vulnerability,...
CVE-2024-52535
CVE-2024-52535 affects Dell SupportAssist for Home PCs (versions ≤ 4.6.1) and Dell SupportAssist for Business PCs (versions ≤ 4.5.0). The issue is a symbolic link (symlink) attack in the software remediation component that could be exploited by a low-privileged authenticated user to escalate priv...
Gogs 安全漏洞
Gogs Go Git Service is a self-service Git hosting service based on the Go language by the Gogs team, which supports creating and migrating public/private repositories, adding and deleting repository collaborators, and so on. A security vulnerability exists in Gogs versions prior to 0.13.1, which...
[SECURITY] [DLA 3987-1] renderdoc security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-3987-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk December 08, 2024 https://wiki.debian.org/LTS -...
Debian dla-3987 : librenderdoc - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3987 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3987-1 [email protected]...