EUVD-2020-28594

Malware in sbrugna...

Wasmer Security Breach

Wasmer is a Wasmer open source application that enables lightweight containers to run anywhere. A security vulnerability exists in Wasmer versions prior to 4.3.2 that stems from bypassing the file system sandbox...

File System Sandbox Breakout

github.com/lima-vm/lima is vulnerable to a File System Sandbox Breakout. The vulnerability exists due to differential disk images used as the base image, which allows an attacker to aread files off the host machine...

CVE-2020-7468

In FreeBSD 12.2-STABLE before r365772, 11.4-STABLE before r365773, 12.1-RELEASE before p10, 11.4-RELEASE before p4 and 11.3-RELEASE before p14 a ftpd8 bug in the implementation of the file system sandbox, combined with capabilities available to an authenticated FTP user, can be used to escape the...

CVE-2020-7468

In FreeBSD 12.2-STABLE before r365772, 11.4-STABLE before r365773, 12.1-RELEASE before p10, 11.4-RELEASE before p4 and 11.3-RELEASE before p14 a ftpd8 bug in the implementation of the file system sandbox, combined with capabilities available to an authenticated FTP user, can be used to escape the...

Information disclosure

In FreeBSD 12.2-STABLE before r365772, 11.4-STABLE before r365773, 12.1-RELEASE before p10, 11.4-RELEASE before p4 and 11.3-RELEASE before p14 a ftpd8 bug in the implementation of the file system sandbox, combined with capabilities available to an authenticated FTP user, can be used to escape the...

CVE-2020-7468

CVE-2020-7468 affects FreeBSD ftpd (ftpd(8)) with ftpchroot; a bug in the filesystem sandbox, when combined with capabilities available to an authenticated FTP user, can escape ftpchroot restrictions and allow a malicious client to gain root privileges. Public sources describe the vulnerability i...