407 matches found
Updated python-rstlib packages fix security vulnerability
Open-iSCSI rtslib-fb through 2.1.72 has weak permissions for /etc/target/saveconfig.json because shutil.copyfile instead of shutil.copy is used and thus permissions are not preserved upon editing. An adversary with prior access to /etc/target/saveconfig.json could access a later version, resultin...
rtslib-fb Code Execution
The vulnerability in the /etc/target/saveconfig.json file of the rtslib-fb library is related to incorrect default access permissions settings. Exploiting this vulnerability could allow an attacker to execute arbitrary code by sending specially crafted data to the application...
openSUSE Security Update : python-rtslib-fb (openSUSE-2020-1156)
This update for python-rtslib-fb fixes the following issues : - Update to version v2.1.73 bsc1173257 CVE-2020-14019 : - version 2.1.73 - savetofile: fix fd open mode - saveconfig: copy temp configfile with permissions - saveconfig: open the temp configfile with modes set - Fix 'is not' with a...
openSUSE: Security Advisory for python-rtslib-fb (openSUSE-SU-2020:1156-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
OPENSUSE-SU-2020:1156-1 Security update for python-rtslib-fb
This update for python-rtslib-fb fixes the following issues: - Update to version v2.1.73 bsc1173257 CVE-2020-14019: version 2.1.73 savetofile: fix fd open mode saveconfig: copy temp configfile with permissions saveconfig: open the temp configfile with modes set Fix 'is not' with a literal...
Security update for python-rtslib-fb (moderate)
openSUSE Security Update: Security update for python-rtslib-fb Announcement ID: openSUSE-SU-2020:1156-1 Rating: moderate References: 1173257 Cross-References: CVE-2020-14019 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for...
openSUSE: Security Advisory for targetcli-fb (openSUSE-SU-2020:1144-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
openSUSE Security Update : targetcli-fb (openSUSE-2020-1144)
This update for targetcli-fb fixes the following issues : - CVE-2020-13867: Fixed the permissions in /etc/target bsc1172743 This update was imported from the SUSE:SLE-15-SP2:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extract...
openSUSE Security Update : targetcli-fb (openSUSE-2020-1141)
This update for targetcli-fb fixes the following issues : - CVE-2020-13867: Fixed the permissions in /etc/target bsc1172743 This update was imported from the SUSE:SLE-15-SP1:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extract...
Security update for targetcli-fb (moderate)
openSUSE Security Update: Security update for targetcli-fb Announcement ID: openSUSE-SU-2020:1144-1 Rating: moderate References: 1172743 Cross-References: CVE-2020-13867 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for...
openSUSE: Security Advisory for targetcli-fb (openSUSE-SU-2020:1141-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
OPENSUSE-SU-2020:1144-1 Security update for targetcli-fb
This update for targetcli-fb fixes the following issues: - CVE-2020-13867: Fixed the permissions in /etc/target bsc1172743 This update was imported from the SUSE:SLE-15-SP2:Update update project...
OPENSUSE-SU-2020:1141-1 Security update for targetcli-fb
This update for targetcli-fb fixes the following issues: - CVE-2020-13867: Fixed the permissions in /etc/target bsc1172743 This update was imported from the SUSE:SLE-15-SP1:Update update project...
SUSE-SU-2020:2109-1 Security update for python-rtslib-fb
This update for python-rtslib-fb fixes the following issues: - Update to version v2.1.73 bsc1173257 CVE-2020-14019: version 2.1.73 savetofile: fix fd open mode saveconfig: copy temp configfile with permissions saveconfig: open the temp configfile with modes set Fix 'is not' with a literal...
Security update for targetcli-fb (moderate)
openSUSE Security Update: Security update for targetcli-fb Announcement ID: openSUSE-SU-2020:1141-1 Rating: moderate References: 1172743 Cross-References: CVE-2020-13867 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for...
SUSE-SU-2020:2101-1 Security update for targetcli-fb
This update for targetcli-fb fixes the following issues: - CVE-2020-13867: Fixed the permissions in /etc/target bsc1172743...
SUSE-SU-2020:2086-1 Security update for targetcli-fb
This update for targetcli-fb fixes the following issues: - CVE-2020-13867: Fixed the permissions in /etc/target bsc1172743...
CVE-2020-14019
A flaw was found in Open-iSCSI rtslib-fb through versions 2.1.72, where it has weak permissions for /etc/target/saveconfig.json because the shutil.copyfile, instead of shutil.copy is used, and permissions are not preserved upon editing. This flaw allows an attacker with prior access to...
Unspecified vulnerability in Open-iSCSI rtslib-fb
Open-iSCSI rtslib-fb is an object-based Python library for configuring LIO general purpose SCSI targets in the Linux kernel. A security vulnerability exists in Open-iSCSI rtslib-fb version 2.1.72 and earlier. No detailed vulnerability details are provided at this time...
