5 matches found
EulerOS Virtualization 3.0.6.0 : kernel (EulerOS-SA-2023-2252)
According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow. This could lead t...
The vulnerability of the verity_ctr() function in the drivers/md/dm-verity-target.c module of the device-mapper subsystem in the Linux operating system allows a attacker to execute arbitrary code and connect vulnerable hardware devices.
The vulnerability of the verityctr function in the drivers/md/dm-verity-target.c file of the device-mapper subsystem in the Linux operating system is related to the lack of verification for the types of tables that are loaded. Exploiting this vulnerability allows an attacker with administrative...
EulerOS 2.0 SP11 : kernel (EulerOS-SA-2023-1574)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In veritytarget of dm-verity-target.c, there is a possible way to modify read-only files due to a missing permission check. This could lead to...
CVE-2022-20572
In veritytarget of dm-verity-target.c, there is a possible way to modify read-only files due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...
kernel: missing DM_TARGET_IMMUTABLE feature flag in verity_target in drivers/md/dm-verity-target.c
A flaw was found in the Linux kernel, where it is possible to modify read-only files due to a missing permission check. This flaw can lead to local privilege escalation...