4574 matches found
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003038)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003038 advisory. nfsd in the Linux kernel through 4.6.3 allows local users to bypass intended file-permission restrictions by setting a POSIX ACL, related to nfs2acl.c, nfs3acl.c, an...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001787)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001787 advisory. The nfs4getacluncached function in fs/nfs/nfs4proc.c in the NFSv4 implementation in the Linux kernel before 3.3.2 uses an incorrect length variable during a copy...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002272)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002272 advisory. The NFSv4 implementation in the Linux kernel before 3.2.2 does not properly handle bitmap sizes in GETACL replies, which allows remote NFS servers to cause a denial ...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002487)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002487 advisory. The overlayfs implementation in the Linux kernel through 4.5.2 does not properly maintain POSIX ACL xattr data, which allows local users to gain privileges by...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002145)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002145 advisory. The nfs4getacluncached function in fs/nfs/nfs4proc.c in the NFSv4 implementation in the Linux kernel before 3.3.2 uses an incorrect length variable during a copy...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001835)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001835 advisory. nfsd in the Linux kernel through 4.6.3 allows local users to bypass intended file-permission restrictions by setting a POSIX ACL, related to nfs2acl.c, nfs3acl.c, an...
kernel: Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync
A flaw was found in the Linux kernel’s Bluetooth subsystem HCI. Specifically, in the function hciaclcreateconnsync and related path hcilecreateconnsync, a connection object in state BTOPEN that is still pending command submission may be freed prematurely, leading to a use-after-free condition. An...
MiracleLinux 3 : dovecot-1.0.7-7.1AXS3 (AXSA:2009-18:01)
The remote MiracleLinux 3 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2009-18:01 advisory. Dovecot is an IMAP server for Linux/UNIX-like systems, written with security primarily in mind. It also contains a small POP3 server. It supports mail...
CVE-2025-68803
In the Linux kernel, the following vulnerability has been resolved: NFSD: NFSv4 file creation neglects setting ACL An NFSv4 client that sets an ACL with a named principal during file creation retrieves the ACL afterwards, and finds that it is only a default ACL based on the mode bits and not the...
AZL-74297 CVE-2025-68803 affecting package kernel for versions less than 6.6.121.1-1
In the Linux kernel, the following vulnerability has been resolved: NFSD: NFSv4 file creation neglects setting ACL An NFSv4 client that sets an ACL with a named principal during file creation retrieves the ACL afterwards, and finds that it is only a default ACL based on the mode bits and not the...
CVE-2025-68803
In the Linux kernel, the following vulnerability has been resolved: NFSD: NFSv4 file creation neglects setting ACL An NFSv4 client that sets an ACL with a named principal during file creation retrieves the ACL afterwards, and finds that it is only a default ACL based on the mode bits and not the...
CVE-2025-68803 NFSD: NFSv4 file creation neglects setting ACL
In the Linux kernel, the following vulnerability has been resolved: NFSD: NFSv4 file creation neglects setting ACL An NFSv4 client that sets an ACL with a named principal during file creation retrieves the ACL afterwards, and finds that it is only a default ACL based on the mode bits and not the...
CVE-2025-14360
Missing Authorization vulnerability in Kaira Blockons blockons allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Blockons: from n/a through = 1.2.19...
CVE-2025-67913
Missing Authorization vulnerability in Aruba.it Dev Aruba HiSpeed Cache aruba-hispeed-cache allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Aruba HiSpeed Cache: from n/a through 3.0.3...
CVE-2005-1720
AFP Server for Mac OS X 10.4.1, when using an ACL enabled volume, does not properly remove an ACL when a file is copied to a directory that does not use ACLs, which will override the POSIX file permissions for that ACL...
CVE-2023-43137
TPLINK TL-ER5120G 4.0 2.0.0 Build 210817 Rel.80868n has a command injection vulnerability, when an attacker adds ACL rules after authentication, and the rule name parameter has injection points...
CVE-2016-10830
cPanel before 55.9999.141 allows ACL bypass for AppConfig applications via magicrevision SEC-100...
CVE-2016-10852
cPanel before 11.54.0.4 lacks ACL enforcement in the AppConfig subsystem SEC-85...