Lucene search
K

43 matches found

RedhatCVE
RedhatCVE
added 2026/05/08 12:14 p.m.4 views

CVE-2026-43003

A flaw was found in OpenStack ironic-python-agent IPA. The Ironic Python Agent sometimes executes the grub-install command from within a chroot environment of a deployed partition image. This allows an attacker, by providing a malicious image, to achieve arbitrary code execution within the system...

8.5CVSS6.1AI score0.0006EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/05/01 12:0 a.m.2 views

CVE-2026-43003

An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0. Ironic Python Agent IPA sometimes executes grub-install from within a chroot of the deployed partition image, leading to code execution in the case of a malicious image...

8CVSS6.2AI score0.0006EPSS
Exploits0References3Affected Software1
RedhatCVE
RedhatCVE
added 2026/02/20 4:29 p.m.3 views

CVE-2026-21620

A flaw was found in Erlang OTP tftpfile modules. This vulnerability allows an attacker to exploit a weakness in how file paths are handled, known as Relative Path Traversal. By manipulating these paths, an attacker could gain unauthorized access to sensitive files on the system, potentially leadi...

4.2CVSS5.8AI score0.00039EPSS
Exploits0References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2000-1129

Malware in sbrugna...

2.1CVSS6.4AI score0.01148EPSS
Exploits1References6
GithubExploit
GithubExploit
added 2025/07/03 4:24 a.m.457 views

Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo

PoC exploit for CVE-2025-32463, a Sudo Local Privilege Escalatio...

9.3CVSS7.3AI score0.57345EPSS
Exploits69
RedhatCVE
RedhatCVE
added 2025/05/22 10:42 p.m.6 views

CVE-2022-28657

Apport does not disable python crash handler before entering chroot...

7.8CVSS6.8AI score0.0005EPSS
Exploits0References1
Gentoo Linux
Gentoo Linux
added 2022/10/31 12:0 a.m.28 views

schroot: Denial of Service

Background schroot is a utility to execute commands in a chroot environment. Description schroot is unecessarily permissive in rules regarding chroot and session names. Impact A crafted chroot or session name can break the internal state of the schroot service, leading to denial of service...

4.3CVSS4.1AI score0.00343EPSS
Exploits0
CNVD
CNVD
added 2021/05/28 12:0 a.m.10 views

Fedora has an unspecified vulnerability

Fedora is a set of Linux operating systems from the Fedora community. A security vulnerability exists in Fedora's Mounting /proc filesystem, which can be exploited by an attacker to bypass the chroot environment and gain write access to files...

5.5CVSS6.9AI score0.00041EPSS
Exploits1References1
Cvelist
Cvelist
added 2021/05/27 12:28 p.m.18 views

CVE-2008-2544

Mounting /proc filesystem via chroot command silently mounts it in read-write mode. The user could bypass the chroot environment and gain write access to files, he would never have otherwise...

5.7AI score0.00041EPSS
Exploits1References1
Debian CVE
Debian CVE
added 2021/05/27 12:28 p.m.31 views

CVE-2008-2544

Mounting /proc filesystem via chroot command silently mounts it in read-write mode. The user could bypass the chroot environment and gain write access to files, he would never have otherwise...

5.5CVSS6.1AI score0.00041EPSS
Exploits1
OSV
OSV
added 2019/07/10 4:15 p.m.15 views

CVE-2018-19572

GitLab CE 8.17 and later and EE 8.3 and later have a symlink time-of-check-to-time-of-use race condition that would allow unauthorized access to files in the GitLab Pages chroot environment. This is fixed in versions 11.5.1, 11.4.8, and 11.3.11...

5.9CVSS6.4AI score
Exploits0References2
NVD
NVD
added 2019/07/10 4:15 p.m.17 views

CVE-2018-19572

GitLab CE 8.17 and later and EE 8.3 and later have a symlink time-of-check-to-time-of-use race condition that would allow unauthorized access to files in the GitLab Pages chroot environment. This is fixed in versions 11.5.1, 11.4.8, and 11.3.11...

5.9CVSS5.4AI score0.00098EPSS
Exploits0References2
Prion
Prion
added 2019/07/10 4:15 p.m.16 views

Race condition

GitLab CE 8.17 and later and EE 8.3 and later have a symlink time-of-check-to-time-of-use race condition that would allow unauthorized access to files in the GitLab Pages chroot environment. This is fixed in versions 11.5.1, 11.4.8, and 11.3.11...

4.3CVSS5.7AI score0.00098EPSS
Exploits0References2Affected Software1
Fedora
Fedora
added 2018/09/06 2:32 a.m.22 views

[SECURITY] Fedora 27 Update: obs-build-20180816-291.1.1.fc27

This package provides a script for building packages in a chroot environmen t. It is commonly used with the Open Build Service as the engine for building packages for a wide variety of distributions...

9.9CVSS2.3AI score0.00431EPSS
Exploits0
Fedora
Fedora
added 2018/08/26 5:41 p.m.25 views

[SECURITY] Fedora 28 Update: obs-build-20180816-291.1.1.fc28

This package provides a script for building packages in a chroot environmen t. It is commonly used with the Open Build Service as the engine for building packages for a wide variety of distributions...

9.9CVSS2.3AI score0.00431EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2017/04/14 12:0 a.m.62 views

CentOS 7 : util-linux (CESA-2017:0907)

An update for util-linux is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

5.5CVSS5.9AI score0.00062EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2017/04/13 12:0 a.m.23 views

Scientific Linux Security Update : util-linux on SL7.x x86_64 (20170412)

Security Fixes : - A race condition was found in the way su handled the management of child processes. A local authenticated attacker could use this flaw to kill other processes with root privileges under specific conditions. CVE-2017-2616 Bug Fixes : - The 'findmnt --target ' command prints all...

5.5CVSS5.8AI score0.00062EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2017/04/12 12:25 p.m.68 views

Moderate: Red Hat Security Advisory: util-linux security and bug fix update

An update for util-linux is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

5.5CVSS6.2AI score0.00062EPSS
Exploits0References3
Kitploit
Kitploit
added 2015/06/15 3:33 p.m.96 views

Crouton - Chromium OS Universal Chroot Environment

crouton is a set of scripts that bundle up into an easy-to-use, Chromium OS-centric chroot generator. Currently Ubuntu and Debian are supported using debootstrap behind the scenes, but "Chromium OS Debian, Ubuntu, and Probably Other Distros Eventually Chroot Environment" doesn't acronymize as wel...

7.2AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2014/10/01 12:0 a.m.29 views

CentOS 5 : bind97 (CESA-2014:1244)

Updated bind97 packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

2.6CVSS6.4AI score0.51542EPSS
Exploits1References2
Rows per page
Query Builder