EvilAbigail

Initrd 加密根文件系统攻击 场景 笔记本电脑处于关机状态，全盘加密（FDE）已开启 攻击者从 USB/CD/网络启动 脚本执行并后门化 initrd 用户返回笔记本电脑，正常启动 被后门化的 initrd 加载： Debian/Ubuntu/Kali 将 .so 文件注入 /sbin/init 启动过程中，弹出 shell Fedora/CentOS 通过 LDPRELOAD 将 .so 注入 DefaultEnviroment，全局加载，弹出 shell 支持的发行版 Ubuntu 14.04.3 Debian 8.2.0 Kali 2.0 Fedora 23 CentOS 7...

CLSA-2024-1723806933 Fix of 55 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-39467 - f2fs: fix to do sanity check on ixattrnid in sanitycheckinode CVE-url: https://ubuntu.com/security/CVE-2024-36940 - pinctrl: core: delete incorrect free in pinctrlenable CVE-url: https://ubuntu.com/security/CVE-2024-38659 - enic: Validate leng...

SUSE CVE-2014-3462

The ".encfs6.xml" configuration file in encfs before 1.7.5 allows remote attackers to access sensitive data by setting "blockMACBytes" to 0 and adding 8 to "blockMACRandBytes"...

kernel: Stack overflow via ecryptfs and /proc/$pid/environ

It was found that stacking a file system over procfs in the Linux kernel could lead to a kernel stack overflow due to deep nesting, as demonstrated by mounting ecryptfs over procfs and creating a recursion by mapping /proc/environ. An unprivileged, local user could potentially use this flaw to...

[SECURITY] Fedora 23 Update: fuse-encfs-1.8.1-1.fc23

EncFS implements an encrypted filesystem in userspace using FUSE. FUSE provides a Linux kernel module which allows virtual filesystems to be writt en in userspace. EncFS encrypts all data and filenames in the filesystem and passes access through to the underlying filesystem. Similar to CFS except...

[SECURITY] Fedora 22 Update: fuse-encfs-1.8.1-1.fc22

EncFS implements an encrypted filesystem in userspace using FUSE. FUSE provides a Linux kernel module which allows virtual filesystems to be writt en in userspace. EncFS encrypts all data and filenames in the filesystem and passes access through to the underlying filesystem. Similar to CFS except...

[SECURITY] Fedora 24 Update: fuse-encfs-1.8.1-1.fc24

EncFS implements an encrypted filesystem in userspace using FUSE. FUSE provides a Linux kernel module which allows virtual filesystems to be writt en in userspace. EncFS encrypts all data and filenames in the filesystem and passes access through to the underlying filesystem. Similar to CFS except...

Linux Kernel 2.6.x Cryptoloop Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13775/info Both cryptoloop and dm-crypt are reported prone to an information disclosure vulnerability. Reports indicate that certain watermarked files may be detected on a filesystem that is encrypted using the affected...

[SECURITY] Fedora 14 Update: pam_mount-2.5-1.fc14

This module is aimed at environments with central file servers that a user wishes to mount on login and unmount on logout, such as semi-diskless stations where many users can logon. The module also supports mounting local filesystems of any kind the normal mount utility supports, with extra code ...

Fedora Update for fuse-encfs FEDORA-2010-14254

Check for the Version of fuse-encfs OpenVAS Vulnerability Test Fedora Update for fuse-encfs FEDORA-2010-14254 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

[SECURITY] Fedora 14 Update: fuse-encfs-1.7.2-1.fc14

EncFS implements an encrypted filesystem in userspace using FUSE. FUSE provides a Linux kernel module which allows virtual filesystems to be writt en in userspace. EncFS encrypts all data and filenames in the filesystem and passes access through to the underlying filesystem. Similar to CFS except...

[SECURITY] Fedora 12 Update: fuse-encfs-1.7.2-1.fc12

EncFS implements an encrypted filesystem in userspace using FUSE. FUSE provides a Linux kernel module which allows virtual filesystems to be writt en in userspace. EncFS encrypts all data and filenames in the filesystem and passes access through to the underlying filesystem. Similar to CFS except...

[SECURITY] Fedora 12 Update: pam_mount-2.5-1.fc12

This module is aimed at environments with central file servers that a user wishes to mount on login and unmount on logout, such as semi-diskless stations where many users can logon. The module also supports mounting local filesystems of any kind the normal mount utility supports, with extra code ...

Fedora Update for pam_mount FEDORA-2008-7976

Check for the Version of pammount OpenVAS Vulnerability Test Fedora Update for pammount FEDORA-2008-7976 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Linux Kernel Cryptoloop encrypted filesystem weak encryption

Weak IV Initial Vector generation algorithm allows data watermarking, making it possible to detect data in filesystem...

Linux Kernel 2.6.x - Cryptoloop Information Disclosure

source: https://www.securityfocus.com/bid/13775/info Both cryptoloop and dm-crypt are reported prone to an information disclosure vulnerability. Reports indicate that certain watermarked files may be detected on a filesystem that is encrypted using the affected loop device encryption schemes. It...

Linux Kernel 2.6.x - Cryptoloop Information Disclosure

Linux Kernel 2.6.x - Cryptoloop Information Disclosure source: https://www.securityfocus.com/bid/13775/info Both cryptoloop and dm-crypt are reported prone to an information disclosure vulnerability. Reports indicate that certain watermarked files may be detected on a filesystem that is encrypted...