Lucene search
+L

166 matches found

Tenable Nessus
Tenable Nessus
•added 2022/12/07 12:00 a.m.•40 views

Amazon Linux 2 : util-linux (ALAS-2022-1878)

The version of util-linux installed on the remote host is prior to 2.30.2-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1878 advisory. A command injection flaw was found in the way util-linux implements umount autocompletion in Bash. An attacker with the ability...

7.8CVSS7.8AI score0.00432EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2022/07/31 12:00 a.m.•14 views

Fedora: Security Advisory for golang-github-posener-complete (FEDORA-2022-37aef44d1e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Fedora
Fedora
•added 2022/07/30 2:00 a.m.•20 views

[SECURITY] Fedora 36 Update: golang-github-posener-complete-2-2.0.1~alpha.13-6.fc36

Bash completion written in go + bash completion for go command...

1.9AI score
SaveExploits0
Fedora
Fedora
•added 2022/07/30 2:00 a.m.•18 views

[SECURITY] Fedora 36 Update: golang-github-posener-complete-1.2.3-9.fc36

Package Complete provides a tool for bash writing bash completion in go, and bash completion for the go command line. Writing bash completion scripts is a hard work. This package provides an easy way to create bash completion scripts for any command, and also an easy way to install/uninstall the...

7.4AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2022/07/18 12:00 a.m.•24 views

Fedora: Security Advisory for golang-github-posener-complete (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3CVSS8.9AI score0.0995EPSS
SaveExploits4References2
Fedora
Fedora
•added 2022/07/17 1:16 a.m.•33 views

[SECURITY] Fedora 35 Update: golang-github-posener-complete-2-2.0.1~alpha.13-5.fc35

Bash completion written in go + bash completion for go command...

9.3CVSS1.9AI score0.0995EPSS
SaveExploits4
Fedora
Fedora
•added 2022/07/17 1:16 a.m.•33 views

[SECURITY] Fedora 35 Update: golang-github-posener-complete-1.2.3-8.fc35

Package Complete provides a tool for bash writing bash completion in go, and bash completion for the go command line. Writing bash completion scripts is a hard work. This package provides an easy way to create bash completion scripts for any command, and also an easy way to install/uninstall the...

9.3CVSS8.1AI score0.0995EPSS
SaveExploits4
OpenVAS
OpenVAS
•added 2022/07/06 12:00 a.m.•25 views

Fedora: Security Advisory for golang-github-posener-complete (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3CVSS8.9AI score0.0995EPSS
SaveExploits4References2
Fedora
Fedora
•added 2022/07/04 1:35 a.m.•26 views

[SECURITY] Fedora 36 Update: golang-github-posener-complete-1.2.3-8.fc36

Package Complete provides a tool for bash writing bash completion in go, and bash completion for the go command line. Writing bash completion scripts is a hard work. This package provides an easy way to create bash completion scripts for any command, and also an easy way to install/uninstall the...

9.3CVSS8.1AI score0.0995EPSS
SaveExploits4
Fedora
Fedora
•added 2022/07/04 1:35 a.m.•23 views

[SECURITY] Fedora 36 Update: golang-github-posener-complete-2-2.0.1~alpha.13-5.fc36

Bash completion written in go + bash completion for go command...

9.3CVSS8.2AI score0.0995EPSS
SaveExploits4
Rockylinux
Rockylinux
•added 2022/05/17 8:02 a.m.•21 views

new packages: bash-completion

An update is available for bash-completion. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

2.2AI score
SaveExploits0
osv_suse
osv_suse
•added 2022/04/04 3:48 p.m.•21 views

SUSE-SU-2022:1105-1 Security update for util-linux

This update for util-linux fixes the following issues: - Improve throughput and reduce clock sequence increments for high load situation with time based version 1 uuids. bsc1194642 - Prevent root owning of /var/lib/libuuid/clock.txt. bsc1194642 - Warn if uuidd lock state is not usable. bsc1194642...

5.5CVSS6.7AI score0.00661EPSS
SaveExploits1References24
osv_suse
osv_suse
•added 2022/04/04 3:48 p.m.•14 views

SUSE-SU-2022:1103-1 Security update for util-linux

This update for util-linux fixes the following issues: - Improve throughput and reduce clock sequence increments for high load situation with time based version 1 uuids. bsc1194642 - Prevent root owning of /var/lib/libuuid/clock.txt. bsc1194642 - Warn if uuidd lock state is not usable. bsc1194642...

5.5CVSS6.7AI score0.00661EPSS
SaveExploits1References26
Mageia
Mageia
•added 2022/03/21 8:18 p.m.•38 views

Updated stunnel packages fix security vulnerability

Update to 5.62 including new features and bugfixes: Security bugfixes - The "redirect" option was fixed to properly handle unauthenticated requests bsc1182529. - Fixed a double free with OpenSSL older than 1.1.0. - Added hardening to systemd service bsc1181400. New features - Added new...

1.9AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2022/03/01 9:04 p.m.•62 views

Possible privilege escalation via bash completion script

The bash completion script for fscrypt through v0.3.2 allows injection of commands via crafted mountpoint paths, allowing privilege escalation under a specific set of circumstances. A local user who has control over mountpoint paths could potentially escalate their privileges if they create a...

7.3CVSS3.2AI score0.00202EPSS
SaveExploits0References2Affected Software1
osv_ghsa
osv_ghsa
•added 2022/03/01 9:04 p.m.•54 views

GHSA-W4F8-FXQ2-J35V Possible privilege escalation via bash completion script

The bash completion script for fscrypt through v0.3.2 allows injection of commands via crafted mountpoint paths, allowing privilege escalation under a specific set of circumstances. A local user who has control over mountpoint paths could potentially escalate their privileges if they create a...

6.4AI score
SaveExploits0References2
osv_ghsa
osv_ghsa
•added 2022/02/26 12:00 a.m.•42 views

GHSA-WXJG-P59J-6C92 Command injection in github.com/google/fscrypt

The bashcompletion script for fscrypt allows injection of commands via crafted mountpoint paths, allowing privilege escalation under a specific set of circumstances. A local user who has control over mountpoint paths could potentially escalate their privileges if they create a malicious mountpoin...

5CVSS6.4AI score0.00202EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2022/02/26 12:00 a.m.•44 views

Command injection in github.com/google/fscrypt

The bashcompletion script for fscrypt allows injection of commands via crafted mountpoint paths, allowing privilege escalation under a specific set of circumstances. A local user who has control over mountpoint paths could potentially escalate their privileges if they create a malicious mountpoin...

7.3CVSS3.3AI score0.00202EPSS
SaveExploits0References3Affected Software1
osv_debian
osv_debian
•added 2022/02/25 11:15 a.m.•20 views

DEBIAN-CVE-2022-25328

The bashcompletion script for fscrypt allows injection of commands via crafted mountpoint paths, allowing privilege escalation under a specific set of circumstances. A local user who has control over mountpoint paths could potentially escalate their privileges if they create a malicious mountpoin...

7.3CVSS7.2AI score0.00202EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2022/02/25 11:15 a.m.•13 views

UBUNTU-CVE-2022-25328

The bashcompletion script for fscrypt allows injection of commands via crafted mountpoint paths, allowing privilege escalation under a specific set of circumstances. A local user who has control over mountpoint paths could potentially escalate their privileges if they create a malicious mountpoin...

7.3CVSS7.1AI score0.00202EPSS
SaveExploits0References4
Rows per page
Query Builder