359 matches found
USN-7578-1: UDisks vulnerability
It was discovered that UDisks incorrectly handled mount options when resizing certain filesystems. A local attacker with an active session on the console can use this issue to escalate their privileges to root...
[SECURITY] [DLA 4221-1] libblockdev security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4221-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz June 17, 2025 https://wiki.debian.org/LTS -...
[SECURITY] [DSA 5943-1] libblockdev security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5943-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 17, 2025 https://www.debian.org/security/faq -...
Qualys TRU Uncovers Chained LPE: SUSE 15 PAM to Full Root via libblockdev/udisks
The Qualys Threat Research Unit TRU has discovered two linked local privilege escalation LPE flaws. The first CVE-2025-6018 resides in the PAM configuration of openSUSE Leap 15 and SUSE Linux Enterprise 15. Using this vulnerability, an unprivileged local attacker—for example, via SSH—can elevate ...
UBUNTU-CVE-2025-6019
A Local Privilege Escalation LPE vulnerability was found in libblockdev. Generally, the "allowactive" setting in Polkit permits a physically present user to take certain actions based on the session type. Due to the way libblockdev interacts with the udisks daemon, an "allowactive" user on a syst...
Debian dsa-5943 : gir1.2-blockdev-2.0 - security update
The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5943 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5943-1 [email protected] https://www.debian.org/security/...
Linux Distros Unpatched Vulnerability : CVE-2018-17336
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UDisks 2.8.0 has a format string vulnerability in udiskslog in udiskslogging.c, allowing attackers to obtain sensitive information stack contents, cause a denia...
Linux Distros Unpatched Vulnerability : CVE-2010-4661
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - udisks before 1.0.3 allows a local user to load arbitrary Linux kernel modules. CVE-2010-4661 Note that Nessus relies on the presence of the package as reported...
RHSA-2014:0293 Red Hat Security Advisory: udisks security update
Bulletin has no description...
OPENSUSE-SU-2024:10408-1 udisks-1.0.5-5.10 on GA media
These are all security issues fixed in the udisks-1.0.5-5.10 package on the GA media of openSUSE Tumbleweed...
RHEL 6 : udisks (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - udisks: Format string vulnerability in udiskslog in udiskslogging.c CVE-2018-17336 - udisks before 1.0.3...
RHEL 6 : udisks (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - udisks: Format string vulnerability in udiskslog in udiskslogging.c CVE-2018-17336 Note that Nessus has not tested...
SUSE CVE-2010-4661
udisks before 1.0.3 allows a local user to load arbitrary Linux kernel modules...
SUSE CVE-2014-0004
Stack-based buffer overflow in udisks before 1.0.5 and 2.x before 2.1.3 allows local users to cause a denial of service crash and possibly execute arbitrary code via a long mount point...
SUSE CVE-2018-17336
UDisks 2.8.0 has a format string vulnerability in udiskslog in udiskslogging.c, allowing attackers to obtain sensitive information stack contents, cause a denial of service memory corruption, or possibly have unspecified other impact via a malformed filesystem label, as demonstrated by %d or %n...
The program’s vulnerability regarding requests and device management for Udisks, which are used by file systems of types ext2/3/4, allows a hacker to trigger a service failure.
The vulnerability of the program for querying and managing UDisks storage devices for file systems ext2/3/4 lies in the fact that system shutdown upon an error is the default configuration. Exploiting this vulnerability allows a malicious actor to trigger a service failure using a specially creat...
Slackware: Security Advisory (SSA:2014-070-01)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2014-0129)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DEBIAN-CVE-2021-3802
A vulnerability found in udisks2. This flaw allows an attacker to input a specially crafted image file/USB leading to kernel panic. The highest threat from this vulnerability is to system availability...
