Lucene search
K

39 matches found

NVD
NVD
added 2026/05/18 4:16 a.m.7 views

CVE-2026-8784

A vulnerability was detected in npitre cramfs-tools up to 2.2. Affected is the function changefilestatus of the file cramfsck.c. Performing a manipulation results in symlink following. The attack requires a local approach. The exploit is now public and may be used. The patch is named...

4.6CVSS0.00021EPSS
Exploits0References7
ATTACKERKB
ATTACKERKB
added 2026/05/18 2:30 a.m.6 views

CVE-2026-8784

A vulnerability was detected in npitre cramfs-tools up to 2.2. Affected is the function changefilestatus of the file cramfsck.c. Performing a manipulation results in symlink following. The attack requires a local approach. The exploit is now public and may be used. The patch is named...

4.6CVSS5.4AI score0.00021EPSS
Exploits0References7Affected Software1
Vulnrichment
Vulnrichment
added 2026/05/18 2:30 a.m.4 views

CVE-2026-8784 npitre cramfs-tools cramfsck.c change_file_status symlink

A vulnerability was detected in npitre cramfs-tools up to 2.2. Affected is the function changefilestatus of the file cramfsck.c. Performing a manipulation results in symlink following. The attack requires a local approach. The exploit is now public and may be used. The patch is named...

4.6CVSS5.4AI score0.00021EPSS
Exploits0References7
EUVD
EUVD
added 2026/05/18 2:30 a.m.6 views

EUVD-2026-30728

A vulnerability was detected in npitre cramfs-tools up to 2.2. Affected is the function changefilestatus of the file cramfsck.c. Performing a manipulation results in symlink following. The attack requires a local approach. The exploit is now public and may be used. The patch is named...

4.6CVSS5.4AI score0.00021EPSS
Exploits0References7
Cvelist
Cvelist
added 2026/05/18 2:30 a.m.27 views

CVE-2026-8784 npitre cramfs-tools cramfsck.c change_file_status symlink

A vulnerability was detected in npitre cramfs-tools up to 2.2. Affected is the function changefilestatus of the file cramfsck.c. Performing a manipulation results in symlink following. The attack requires a local approach. The exploit is now public and may be used. The patch is named...

4.6CVSS0.00021EPSS
Exploits0References7
CVE
CVE
added 2026/05/18 2:30 a.m.8 views

CVE-2026-8784

Technical details are not publicly available in the provided documents. Monitor for updates.

4.6CVSS5.4AI score0.00021EPSS
Exploits0References7
CNNVD
CNNVD
added 2026/05/18 12:0 a.m.6 views

cramfs-tools 后置链接漏洞

cramfs-tools is a compression read-only file system tool developed by Nicolas Pitre. Versions of cramfs-tools prior to 2.2 had a post-installation link vulnerability. This vulnerability stemmed from the operation of the changefilestatus function in the cramfsck.c file, which allowed symbolic link...

4.6CVSS5.8AI score0.00021EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/05/18 12:0 a.m.6 views

PT-2026-41632

A vulnerability was detected in npitre cramfs-tools up to 2.2. Affected is the function change file status of the file cramfsck.c. Performing a manipulation results in symlink following. The attack requires a local approach. The exploit is now public and may be used. The patch is named...

4.6CVSS5.4AI score0.00021EPSS
Exploits0References8
SUSE CVE
SUSE CVE
added 2026/05/11 2:16 p.m.3 views

SUSE CVE-2026-8274

A security vulnerability has been detected in npitre cramfs-tools up to 2.1. Affected is the function dodirectory of the file cramfsck.c of the component Directory Handler. Such manipulation leads to path traversal. The attack can only be performed from a local environment. The exploit has been...

5.3CVSS5.3AI score0.00009EPSS
Exploits0References3
EUVD
EUVD
added 2026/05/11 6:31 a.m.5 views

EUVD-2026-29032

A security vulnerability has been detected in npitre cramfs-tools up to 2.1. Affected is the function dodirectory of the file cramfsck.c of the component Directory Handler. Such manipulation leads to path traversal. The attack can only be performed from a local environment. The exploit has been...

5.3CVSS5.3AI score0.00009EPSS
Exploits0References9
NVD
NVD
added 2026/05/11 5:16 a.m.8 views

CVE-2026-8274

A security vulnerability has been detected in npitre cramfs-tools up to 2.1. Affected is the function dodirectory of the file cramfsck.c of the component Directory Handler. Such manipulation leads to path traversal. The attack can only be performed from a local environment. The exploit has been...

5.3CVSS0.00009EPSS
Exploits0References8
Cvelist
Cvelist
added 2026/05/11 4:45 a.m.31 views

CVE-2026-8274 npitre cramfs-tools Directory cramfsck.c do_directory path traversal

A security vulnerability has been detected in npitre cramfs-tools up to 2.1. Affected is the function dodirectory of the file cramfsck.c of the component Directory Handler. Such manipulation leads to path traversal. The attack can only be performed from a local environment. The exploit has been...

5.3CVSS0.00009EPSS
Exploits0References8
ATTACKERKB
ATTACKERKB
added 2026/05/11 4:45 a.m.6 views

CVE-2026-8274

A security vulnerability has been detected in npitre cramfs-tools up to 2.1. Affected is the function dodirectory of the file cramfsck.c of the component Directory Handler. Such manipulation leads to path traversal. The attack can only be performed from a local environment. The exploit has been...

5.3CVSS5.6AI score0.00009EPSS
Exploits0References8Affected Software1
CVE
CVE
added 2026/05/11 4:45 a.m.15 views

CVE-2026-8274

CVE-2026-8274 affects npitre cramfs-tools up to version 2.1. The vulnerability is in the Directory Handler’s cramfsck.c do_directory function and enables local path traversal. Exploitation requires local access; the vulnerability is disclosed publicly. A fix is available in version 2.2, with patc...

5.3CVSS5.6AI score0.00009EPSS
Exploits0References8
Vulnrichment
Vulnrichment
added 2026/05/11 4:45 a.m.5 views

CVE-2026-8274 npitre cramfs-tools Directory cramfsck.c do_directory path traversal

A security vulnerability has been detected in npitre cramfs-tools up to 2.1. Affected is the function dodirectory of the file cramfsck.c of the component Directory Handler. Such manipulation leads to path traversal. The attack can only be performed from a local environment. The exploit has been...

5.3CVSS5.6AI score0.00009EPSS
Exploits0References8
CNNVD
CNNVD
added 2026/05/11 12:0 a.m.5 views

cramfs-tools 路径遍历漏洞

cramfs-tools is a compression read-only file system tool developed by Nicolas Pitre. Versions of cramfs-tools 2.1 and earlier contained a path traversal vulnerability, which originated from a function in the Directory Handler component called dodirectory in the cramfsck.c file, which allowed for...

5.3CVSS6AI score0.00009EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/05/11 12:0 a.m.8 views

PT-2026-39573

A security vulnerability has been detected in npitre cramfs-tools up to 2.1. Affected is the function do directory of the file cramfsck.c of the component Directory Handler. Such manipulation leads to path traversal. The attack can only be performed from a local environment. The exploit has been...

5.3CVSS5.6AI score0.00009EPSS
Exploits0References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2018-3491

Malware in sbrugna...

7.8CVSS7.9AI score0.00043EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2025/05/07 12:0 a.m.1 views

Ensure That Mounting for Unnecessary File System Is Removed

Linux supports multiple file systems through kernel objects loaded to the kernel. As a universal OS platform, openEuler provides various kernel object files in the /lib/modules/kernel version/kernel/fs/ directory to support different file systems. You can run the insmod or modprobe command to loa...

7.1AI score
Exploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 6:13 a.m.1 views

SUSE CVE-2006-5823

The zlibinflate function in Linux kernel 2.6.x allows local users to cause a denial of service crash via a malformed filesystem that uses zlib compression that triggers memory corruption, as demonstrated using cramfs...

4CVSS6.4AI score0.00101EPSS
Exploits0References4
Rows per page
Query Builder