Debian DLA-30-1 : acpi-support security update

CESG discovered a race condition in acpi-support which may allow an unprivileged user to execute arbitrary code as a different user, including root. NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to...

[DLA 30-1] acpi-support security update

Package : acpi-support Version : 0.137-5+deb6u1 CVE ID : CVE-2014-1419 CESG discovered a race condition in acpi-support which may allow an unprivileged user to execute arbitrary code as a different user, including root...

[USN-2297-1] acpi-support vulnerability

========================================================================== Ubuntu Security Notice USN-2297-1 July 22, 2014 acpi-support vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

CVE-2014-1419

CVE-2014-1419 describes a race condition in the power policy functions of the ACPI helper component acpi-support , affecting versions before 0.142. The flaw could allow a local attacker to gain privileges (including root) by exploiting privileged operations during power-management handling. Publi...

Debian DSA-2984-1 : acpi-support - security update

CESG discovered a root escalation flaw in the acpi-support package. An unprivileged user can inject the DBUSSESSIONBUSADDRESS environment variable to run arbitrary commands as root user via the policy-funcs script. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

[SECURITY] [DSA 2984-1] acpi-support security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2984-1 [email protected] http://www.debian.org/security/ Luciano Bello July 22, 2014 http://www.debian.org/security/faq -...