SUSE-SU-2023:4582-1 Security update for slurm_22_05

This update for slurm2205 fixes the following issues: - CVE-2023-41914: Fixed a filesystem handling race condition that could have led to an attacker taking control of an arbitrary file, or removing entire directory contents bsc1216207. Bug fixes: - Add missing dependencies to slurm-config to...

SUSE-SU-2023:4581-1 Security update for slurm_22_05

This update for slurm2205 fixes the following issues: - CVE-2023-41914: Fixed a filesystem handling race condition that could have led to an attacker taking control of an arbitrary file, or removing entire directory contents bsc1216207. Bug fixes: - Add missing dependencies to slurm-config to...

SUSE-SU-2023:4580-1 Security update for slurm_22_05

This update for slurm2205 fixes the following issues: - CVE-2023-41914: Fixed a filesystem handling race condition that could have led to an attacker taking control of an arbitrary file, or removing entire directory contents bsc1216207. Bug fixes: - Add missing dependencies to slurm-config to...

SUSE-SU-2023:4579-1 Security update for slurm_22_05

This update for slurm2205 fixes the following issues: - CVE-2023-41914: Fixed a filesystem handling race condition that could have led to an attacker taking control of an arbitrary file, or removing entire directory contents bsc1216207. Bug fixes: - Add missing dependencies to slurm-config to...

SUSE-SU-2023:4578-1 Security update for slurm

This update for slurm fixes the following issues: - CVE-2023-41914: Fixed a filesystem handling race conditions that could have led to an attacker taking control of an arbitrary file, or removing entire directoy contents bsc1216207. Bug fixes: - Add missing dependencies to slurm-config to plugins...

PT-2024-14635

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the ocfs2 file system in the Linux kernel. The VFS does not lock a moved directory if its parent does not change, which can lead to file system corruption if the...

SUSE SLES12: libnss_slurm2_23_02 / libpmi0_23_02 / libslurm39 / perl-slurm_23_02 / etc (SUSE-SU-2023:4563-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4563-1 advisory. - CVE-2023-41914: Fixed a filesystem handling race conditions that could have led to an attacker taking control of an arbitrary file, or...

PT-2024-14636

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the reiserfs file system in the Linux kernel. The VFS does not lock a moved directory if its parent does not change. To address this, the reiserfs rename code has...

SUSE SLES15: libnss_slurm2_23_02 / libpmi0_23_02 / libslurm39 / perl-slurm_23_02 / etc (SUSE-SU-2023:4565-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2023:4565-1 advisory. - CVE-2023-41914: Fixed a filesystem handling race conditions that could have led to an attacker taking control of an arbitrary file, or removing entir...

SUSE SLES15: libnss_slurm2_23_02 / libpmi0_23_02 / libslurm39 / perl-slurm_23_02 / etc (SUSE-SU-2023:4566-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4566-1 advisory. - CVE-2023-41914: Fixed a filesystem handling race conditions that could have led to an attacker taking control of an arbitrary file, or...

SUSE SLES15: libnss_slurm2_23_02 / libpmi0_23_02 / libslurm39 / perl-slurm_23_02 / etc (SUSE-SU-2023:4564-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2023:4564-1 advisory. - CVE-2023-41914: Fixed a filesystem handling race conditions that could have led to an attacker taking control of an arbitrary file, or removing entir...

SUSE-SU-2023:4566-1 Security update for slurm_23_02

This update for slurm2302 fixes the following issues: - CVE-2023-41914: Fixed a filesystem handling race conditions that could have led to an attacker taking control of an arbitrary file, or removing entire directoy contents bsc1216207. Bug fixes: - Add missing dependencies to slurm-config to...

SUSE-SU-2023:4565-1 Security update for slurm_23_02

This update for slurm2302 fixes the following issues: - CVE-2023-41914: Fixed a filesystem handling race conditions that could have led to an attacker taking control of an arbitrary file, or removing entire directoy contents bsc1216207. Bug fixes: - Add missing dependencies to slurm-config to...

SUSE-SU-2023:4564-1 Security update for slurm_23_02

This update for slurm2302 fixes the following issues: - CVE-2023-41914: Fixed a filesystem handling race conditions that could have led to an attacker taking control of an arbitrary file, or removing entire directoy contents bsc1216207. Bug fixes: - Add missing dependencies to slurm-config to...

SUSE-SU-2023:4563-1 Security update for slurm_23_02

This update for slurm2302 fixes the following issues: - CVE-2023-41914: Fixed a filesystem handling race conditions that could have led to an attacker taking control of an arbitrary file, or removing entire directoy contents bsc1216207. Bug fixes: - Add missing dependencies to slurm-config to...

The vulnerability of the ovl_copy_up_one() function in the fs/overlayfs/copy_up.c file of the OverlayFS file system in the Linux operating system allows a hacker to gain increased privileges.

The vulnerability of the ovlcopyupone function in the fs/overlayfs/copyup.c file of the OverlayFS file system in the Linux operating system is related to incorrect handling of stuid and stgid. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2023-47251

In mprivacy-tools before 2.0.406g in m-privacy TightGate-Pro Server, a Directory Traversal in the print function of the VNC service allows authenticated attackers with access to a VNC session to automatically transfer malicious PDF documents by moving them into the .spool directory, and then...

Download to arbitrary folder can lead to RCE

Summary A web UI user can store files anywhere on the pyLoad server and gain command execution by abusing scripts. Details When a user creates a new package, a subdirectory is created within the /downloads folder to store files. This new directory name is derived from the package name, except a...

Node.js: Multiple permission model bypasses due to improper path traversal sequence sanitization

A vulnerability in the path traversal sanitization of Node.js versions 20 and 21 allowed bypass of the experimental filesystem permission model through path traversal attacks...

VulnCheck KEV: CVE-2011-3600

The /webtools/control/xmlrpc endpoint in OFBiz XML-RPC event handler is exposed to External Entity Injection by passing DOCTYPE declarations with executable payloads that discloses the contents of files in the filesystem. In addition, it can also be used to probe for open network ports, and figur...