CVE-2016-5486

CVE-2016-5486 concerns an unspecified vulnerability in the Sun ZFS Storage Appliance Kit (AK) 2013 within Oracle Sun Systems Products Suite AK, affecting confidentiality via Core Services and exploitable by local users with low complexity. Connected sources indicate the issue is tied to the Core ...

CVE-2016-5503

CVE-2016-5503 concerns the Sun ZFS Storage Appliance Kit (AK) 2013, specifically the Core Services subcomponent. The affected software is the AK (2013) in Oracle Sun Systems Products Suite AK 2013, with a local-privilege/vector scenario that could affect confidentiality, integrity, and availabili...

CVE-2016-5481

CVE-2016-5481 describes an unspecified vulnerability in the Sun ZFS Storage Appliance Kit (AK) 2013 within the Oracle Sun Systems Products Suite AK, specifically affecting the Core Services component. The impact as documented is a confidentiality breach that could be exploited by remote attackers...

CVE-2016-5492

Unspecified vulnerability in the Sun ZFS Storage Appliance Kit AK component in Oracle Sun Systems Products Suite AK 2013 allows local users to affect confidentiality and integrity via vectors related to SMB Users...

CVE-2016-5486: Undefined Security Weakness

Unspecified vulnerability in the Sun ZFS Storage Appliance Kit AK component in Oracle Sun Systems Products Suite AK 2013 allows local users to affect confidentiality via vectors related to Core Services...

PT-2016-6491

Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite AK version 2013 Description The issue affects confidentiality, integrity, and availability. It is related to vectors concerning Core Services in the Sun ZFS Storage Appliance Kit component. Recommendations For...

CVE-2016-5492: Improper Access Control

Unspecified vulnerability in the Sun ZFS Storage Appliance Kit AK component in Oracle Sun Systems Products Suite AK 2013 allows local users to affect confidentiality and integrity via vectors related to SMB Users...

PT-2016-6473

Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite AK version 2013 Description The issue affects confidentiality and can be exploited remotely. It is related to vectors in the Core Services of the Sun ZFS Storage Appliance Kit component. Recommendations For...

PT-2016-6476

Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite AK version 2013 Description The issue affects confidentiality and is related to the Core Services in the Sun ZFS Storage Appliance Kit component. It can be exploited by local users. Recommendations For Oracle...

CVE-2016-5481: Exposure of Sensitive Information to an Unauthorized Actor

Unspecified vulnerability in the Sun ZFS Storage Appliance Kit AK component in Oracle Sun Systems Products Suite AK 2013 allows remote attackers to affect confidentiality via vectors related to Core Services...

CVE-2016-5503: Undefined Security Weakness

Unspecified vulnerability in the Sun ZFS Storage Appliance Kit AK component in Oracle Sun Systems Products Suite AK 2013 allows local users to affect confidentiality, integrity, and availability via vectors related to Core Services...

Oracle Sun Systems Products Sun ZFS Storage Appliance Kit Component Unauthorized Access Vulnerability

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation.Sun ZFS Storage Appliance Kit AK is one of the ZFS storage appliance kits. An unauthorized access vulnerability exists in the Core Services subcomponent of the AK 2013 release of the Sun ZFS Storage AK...

Oracle Sun Systems Products Suite Sun ZFS Storage Appliance Kit Component Remote Data Read Vulnerability

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation.Sun ZFS Storage Appliance Kit AK is one of the ZFS storage appliance kits. A remote data read vulnerability exists in the Core Services subcomponent of the AK 2013 release of the Sun ZFS Storage AK...

CVE-2016-1581

LXD before 2.0.2 uses world-readable permissions for /var/lib/lxd/zfs.img when setting up a loop based ZFS pool, which allows local users to copy and read data from arbitrary containers via unspecified vectors...

Code injection

LXD before 2.0.2 uses world-readable permissions for /var/lib/lxd/zfs.img when setting up a loop based ZFS pool, which allows local users to copy and read data from arbitrary containers via unspecified vectors...

CVE-2016-1581

LXD before 2.0.2 uses world-readable permissions for /var/lib/lxd/zfs.img when setting up a loop based ZFS pool, which allows local users to copy and read data from arbitrary containers via unspecified vectors...

USN-2988-1: LXD vulnerabilities

Robie Basak discovered that LXD incorrectly set permissions when setting up a loop based ZFS pool. A local attacker could use this issue to copy and read the data of any LXD container. CVE-2016-1581 Robie Basak discovered that LXD incorrectly set permissions when switching an unprivileged contain...

USN-2988-1 lxd vulnerabilities

Robie Basak discovered that LXD incorrectly set permissions when setting up a loop based ZFS pool. A local attacker could use this issue to copy and read the data of any LXD container. CVE-2016-1581 Robie Basak discovered that LXD incorrectly set permissions when switching an unprivileged contain...

UBUNTU-CVE-2016-1581

LXD before 2.0.2 uses world-readable permissions for /var/lib/lxd/zfs.img when setting up a loop based ZFS pool, which allows local users to copy and read data from arbitrary containers via unspecified vectors...

PT-2016-4872

Name of the Vulnerable Software and Affected Versions LXD versions prior to 2.0.2 Description The issue allows local users to copy and read data from arbitrary containers due to world-readable permissions for /var/lib/lxd/zfs.img when setting up a loop-based ZFS pool. Recommendations For versions...