Lucene search
K

44 matches found

RedhatCVE
RedhatCVE
added 2026/05/08 12:14 p.m.9 views

CVE-2026-43003

A flaw was found in OpenStack ironic-python-agent IPA. The Ironic Python Agent sometimes executes the grub-install command from within a chroot environment of a deployed partition image. This allows an attacker, by providing a malicious image, to achieve arbitrary code execution within the system...

8.5CVSS6.1AI score0.00701EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/05/01 12:0 a.m.2 views

CVE-2026-43003

An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0. Ironic Python Agent IPA sometimes executes grub-install from within a chroot of the deployed partition image, leading to code execution in the case of a malicious image...

8CVSS6.2AI score0.00701EPSS
Exploits0References3Affected Software1
RedhatCVE
RedhatCVE
added 2026/02/20 4:29 p.m.7 views

CVE-2026-21620

A flaw was found in Erlang OTP tftpfile modules. This vulnerability allows an attacker to exploit a weakness in how file paths are handled, known as Relative Path Traversal. By manipulating these paths, an attacker could gain unauthorized access to sensitive files on the system, potentially leadi...

4.2CVSS5.8AI score0.00461EPSS
Exploits0References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2000-1129

Malware in sbrugna...

2.1CVSS6.4AI score0.01187EPSS
Exploits1References6
GithubExploit
GithubExploit
added 2025/07/03 4:24 a.m.470 views

Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo

PoC exploit for CVE-2025-32463, a Sudo Local Privilege Escalatio...

9.3CVSS7.3AI score0.47467EPSS
Exploits70
RedhatCVE
RedhatCVE
added 2025/05/22 10:42 p.m.6 views

CVE-2022-28657

Apport does not disable python crash handler before entering chroot...

7.8CVSS6.8AI score0.00228EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2024/01/29 12:0 a.m.3 views

The vulnerability of the chroot environment manager used for creating RPM packages for Mock allows for arbitrary code execution due to insufficient input validation.

The vulnerability of the chroot environment manager used for creating RPM packages for Mock is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.6AI score0.01552EPSS
Exploits1References8Affected Software3
Gentoo Linux
Gentoo Linux
added 2022/10/31 12:0 a.m.31 views

schroot: Denial of Service

Background schroot is a utility to execute commands in a chroot environment. Description schroot is unecessarily permissive in rules regarding chroot and session names. Impact A crafted chroot or session name can break the internal state of the schroot service, leading to denial of service...

4.3CVSS4.1AI score0.00786EPSS
Exploits0
CNVD
CNVD
added 2021/05/28 12:0 a.m.12 views

Fedora has an unspecified vulnerability

Fedora is a set of Linux operating systems from the Fedora community. A security vulnerability exists in Fedora's Mounting /proc filesystem, which can be exploited by an attacker to bypass the chroot environment and gain write access to files...

5.5CVSS6.9AI score0.00303EPSS
Exploits1References1
Cvelist
Cvelist
added 2021/05/27 12:28 p.m.27 views

CVE-2008-2544

Mounting /proc filesystem via chroot command silently mounts it in read-write mode. The user could bypass the chroot environment and gain write access to files, he would never have otherwise...

5.7AI score0.00303EPSS
Exploits1References1
Debian CVE
Debian CVE
added 2021/05/27 12:28 p.m.31 views

CVE-2008-2544

Mounting /proc filesystem via chroot command silently mounts it in read-write mode. The user could bypass the chroot environment and gain write access to files, he would never have otherwise...

5.5CVSS6.1AI score0.00303EPSS
Exploits1
NVD
NVD
added 2019/07/10 4:15 p.m.24 views

CVE-2018-19572

GitLab CE 8.17 and later and EE 8.3 and later have a symlink time-of-check-to-time-of-use race condition that would allow unauthorized access to files in the GitLab Pages chroot environment. This is fixed in versions 11.5.1, 11.4.8, and 11.3.11...

5.9CVSS5.4AI score0.00925EPSS
Exploits0References2
OSV
OSV
added 2019/07/10 4:15 p.m.17 views

CVE-2018-19572

GitLab CE 8.17 and later and EE 8.3 and later have a symlink time-of-check-to-time-of-use race condition that would allow unauthorized access to files in the GitLab Pages chroot environment. This is fixed in versions 11.5.1, 11.4.8, and 11.3.11...

5.9CVSS6.4AI score
Exploits0References2
Prion
Prion
added 2019/07/10 4:15 p.m.19 views

Race condition

GitLab CE 8.17 and later and EE 8.3 and later have a symlink time-of-check-to-time-of-use race condition that would allow unauthorized access to files in the GitLab Pages chroot environment. This is fixed in versions 11.5.1, 11.4.8, and 11.3.11...

4.3CVSS5.7AI score0.00925EPSS
Exploits0References2Affected Software1
Fedora
Fedora
added 2018/09/06 2:32 a.m.32 views

[SECURITY] Fedora 27 Update: obs-build-20180816-291.1.1.fc27

This package provides a script for building packages in a chroot environmen t. It is commonly used with the Open Build Service as the engine for building packages for a wide variety of distributions...

9.9CVSS2.3AI score0.01744EPSS
Exploits0
Fedora
Fedora
added 2018/08/26 5:41 p.m.37 views

[SECURITY] Fedora 28 Update: obs-build-20180816-291.1.1.fc28

This package provides a script for building packages in a chroot environmen t. It is commonly used with the Open Build Service as the engine for building packages for a wide variety of distributions...

9.9CVSS2.3AI score0.01744EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2017/04/14 12:0 a.m.64 views

CentOS 7 : util-linux (CESA-2017:0907)

An update for util-linux is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

5.5CVSS5.9AI score0.00282EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2017/04/13 12:0 a.m.23 views

Scientific Linux Security Update : util-linux on SL7.x x86_64 (20170412)

Security Fixes : - A race condition was found in the way su handled the management of child processes. A local authenticated attacker could use this flaw to kill other processes with root privileges under specific conditions. CVE-2017-2616 Bug Fixes : - The 'findmnt --target ' command prints all...

5.5CVSS5.8AI score0.00282EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2017/04/12 12:25 p.m.71 views

Moderate: Red Hat Security Advisory: util-linux security and bug fix update

An update for util-linux is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

5.5CVSS6.2AI score0.00282EPSS
Exploits0References3
Kitploit
Kitploit
added 2015/06/15 3:33 p.m.100 views

Crouton - Chromium OS Universal Chroot Environment

crouton is a set of scripts that bundle up into an easy-to-use, Chromium OS-centric chroot generator. Currently Ubuntu and Debian are supported using debootstrap behind the scenes, but "Chromium OS Debian, Ubuntu, and Probably Other Distros Eventually Chroot Environment" doesn't acronymize as wel...

7.2AI score
Exploits0References1
Rows per page
Query Builder