Lucene search
K

54 matches found

AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.2 views

Astra Linux - уязвимость в dpkg

It was discovered that dpkg-deb does not properly sanitize directory permissions when extracting a control member into a temporary directory. This behavior is documented as being a safe operation even on untrusted data. This may result in temporary files being left behind during cleanup. Given...

8.2CVSS7.4AI score0.00265EPSS
Exploits0References2
OSV
OSV
added 2026/04/24 3:16 p.m.1 views

DEBIAN-CVE-2026-31556

In the Linux kernel, the following vulnerability has been resolved: xfs: scrub: unlock dquot before early return in quota scrub xchkquotaitem can return early after calling xchkfblockprocesserror. When that helper returns false, the function returned immediately without dropping dq-qqlock, which...

5.5CVSS5.3AI score0.00015EPSS
Exploits0References1
NVD
NVD
added 2026/04/24 3:16 p.m.0 views

CVE-2026-31556

In the Linux kernel, the following vulnerability has been resolved: xfs: scrub: unlock dquot before early return in quota scrub xchkquotaitem can return early after calling xchkfblockprocesserror. When that helper returns false, the function returned immediately without dropping dq-qqlock, which...

5.5CVSS0.00015EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/04/22 1:53 p.m.26 views

CVE-2026-31454 xfs: save ailp before dropping the AIL lock in push callbacks

In the Linux kernel, the following vulnerability has been resolved: xfs: save ailp before dropping the AIL lock in push callbacks In xfsinodeitempush and xfsqmdquotlogitempush, the AIL lock is dropped to perform buffer IO. Once the cluster buffer no longer protects the log item from reclaim, the...

7.8CVSS0.00015EPSS
Exploits0References8
RedhatCVE
RedhatCVE
added 2026/01/09 11:47 a.m.8 views

CVE-2010-0064

DesktopServices in Apple Mac OS X 10.6 before 10.6.3 preserves file ownership during an authenticated Finder copy, which might allow local users to bypass intended disk-quota restrictions and have unspecified other impact by copying files owned by other users...

6.9CVSS6.6AI score0.00039EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2025/12/09 1:29 a.m.2 views

CVE-2023-53835

Removed by vendor...

7AI score
Exploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2010-0096

Malware in sbrugna...

6.9CVSS4.5AI score0.00039EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2007-2402

Malware in sbrugna...

4CVSS6.1AI score0.06255EPSS
Exploits1References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2001-1528

Malware in sbrugna...

2.1CVSS6.4AI score0.00083EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2018-11896

Malware in sbrugna...

6.5CVSS6.5AI score0.00515EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-19670

Malicious code in bioql PyPI...

8.2CVSS6.2AI score0.00265EPSS
Exploits0References1
SUSE Linux
SUSE Linux
added 2025/08/20 11:43 a.m.1 views

Security update for dpkg

This update for dpkg fixes the following issues: CVE-2025-6297: Fixed improper sanitization of directory permissions leading to DoS via disk quota exhaustion due to files left behind on cleanup bsc1245573 Patch Instructions: To install this SUSE update use the SUSE recommended installation method...

6.7CVSS6.3AI score0.00265EPSS
Exploits0References4
OSV
OSV
added 2025/08/20 11:40 a.m.1 views

SUSE-SU-2025:20562-1 Security update for dpkg

This update for dpkg fixes the following issues: - CVE-2025-6297: Fixed improper sanitization of directory permissions leading to DoS via disk quota exhaustion due to files left behind on cleanup bsc1245573...

8.2CVSS5.8AI score0.00265EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2025/07/01 11:38 p.m.2 views

SUSE CVE-2025-6297

It was discovered that dpkg-deb does not properly sanitize directory permissions when extracting a control member into a temporary directory, which is documented as being a safe operation even on untrusted data. This may result in leaving temporary files behind on cleanup. Given automated and...

5.5CVSS7.2AI score0.00265EPSS
Exploits0References6
OSV
OSV
added 2025/07/01 5:15 p.m.2 views

CVE-2025-6297

It was discovered that dpkg-deb does not properly sanitize directory permissions when extracting a control member into a temporary directory, which is documented as being a safe operation even on untrusted data. This may result in leaving temporary files behind on cleanup. Given automated and...

8.2CVSS6.4AI score
Exploits0References1
OSV
OSV
added 2025/07/01 5:15 p.m.1 views

AZL-64641 CVE-2025-6297 affecting package dpkg 1.20.10-1

It was discovered that dpkg-deb does not properly sanitize directory permissions when extracting a control member into a temporary directory, which is documented as being a safe operation even on untrusted data. This may result in leaving temporary files behind on cleanup. Given automated and...

8.2CVSS7.5AI score0.00265EPSS
Exploits0References1
OSV
OSV
added 2025/07/01 5:15 p.m.4 views

DEBIAN-CVE-2025-6297

It was discovered that dpkg-deb does not properly sanitize directory permissions when extracting a control member into a temporary directory, which is documented as being a safe operation even on untrusted data. This may result in leaving temporary files behind on cleanup. Given automated and...

8.2CVSS8AI score0.00265EPSS
Exploits0References1
OSV
OSV
added 2025/07/01 5:15 p.m.0 views

UBUNTU-CVE-2025-6297

It was discovered that dpkg-deb does not properly sanitize directory permissions when extracting a control member into a temporary directory, which is documented as being a safe operation even on untrusted data. This may result in leaving temporary files behind on cleanup. Given automated and...

8.2CVSS7.4AI score0.00265EPSS
Exploits0References3
CVE
CVE
added 2025/07/01 4:16 p.m.48 views

CVE-2025-6297

The CVE-2025-6297 issue affects the dpkg-deb component, where improper sanitization of directory permissions when extracting a control member into a temporary directory can leave temporary files and lead to DoS via disk quota exhaustion or full disks. Affected: dpkg- and debian-based tooling acro...

8.2CVSS6.8AI score0.00265EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/21 7:40 p.m.3 views

CVE-2001-1551

Linux kernel 2.2.19 enables CAPSYSRESOURCE for setuid processes, which allows local users to exceed disk quota restrictions during execution of setuid programs...

2.1CVSS6.7AI score0.00083EPSS
Exploits0References1
Rows per page
Query Builder