CVE-2021-29157

Dovecot before 2.3.15 allows ../ Path Traversal. An attacker with access to the local filesystem can trick OAuth2 authentication into using an HS256 validation key from an attacker-controlled location. This occurs during use of local JWT validation with the posix fs driver...

Unbreakable Enterprise kernel security update

5.4.17-2102.202.5 - sctp: delay autoasconf init until binding the first addr Xin Long Orabug: 32907967 CVE-2021-23133 CVE-2021-23133 - dm ioctl: fix out of bounds array access when no devices Mikulas Patocka Orabug: 32860491 CVE-2021-31916 - uek-rpm: update kABI lists for the new symbols Saeed...

SUSE: Security Advisory (SUSE-SU-2021:1301-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-36387

An issue was discovered in the Linux kernel before 5.8.2. fs/iouring.c has a use-after-free related to ioasynctaskfunc and ctx reference holding, aka CID-6d816e088c35...

Double free

An issue was discovered in the Linux kernel before 5.8.2. fs/iouring.c has a use-after-free related to ioasynctaskfunc and ctx reference holding, aka CID-6d816e088c35...

CVE-2020-36387

CVE-2020-36387 affects the Linux kernel up to version 5.8.2, where a use-after-free exists in fs/io_uring.c related to io_async_task_func and ctx reference holding (CID-6d816e088c35). Multiple connected advisories reference Linux kernels before 5.8.2 and indicate that patch/update to 5.8.2 or lat...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. A race condition getoldroot in fs/btrfs/ctree.c allows attackers to cause a denial of service due to the lack of locking on an extent buffer before a cloning operation...

Denial Of Service (DoS)

linux is vulnerable to denial of service. An issue was discovered in fs/fuse/fusei.h in the Linux kernel. A "stall on CPU" can occur because a retry loop continually finds the same bad inode, aka CID-775c5033a0d1...

The vulnerability of the Windows Container Isolation FS Filter driver on Microsoft Windows operating systems allows a hacker to exploit their privileges.

The vulnerability of the Windows Container Isolation FS Filter driver in Microsoft Windows is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Stack overflow

FS: Buffer Overflow when enabling Long File Names in FATFS and calling fsstat. Zephyr versions = v1.14.2, = v2.3.0 contain Stack-based Buffer Overflow CWE-121. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-7fhv-rgxr-x56h...

CVE-2021-31190

Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability...

CVE-2021-31191

Windows Projected File System FS Filter Driver Information Disclosure Vulnerability...

CVE-2021-31191

Windows Projected File System FS Filter Driver Information Disclosure Vulnerability...

CVE-2021-31190

Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability...

Information disclosure

Windows Projected File System FS Filter Driver Information Disclosure Vulnerability...

Privilege escalation

Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability...

CVE-2021-31191

CVE-2021-31191 refers to a Windows Projected File System FS Filter Driver information disclosure vulnerability. The available sources identify the affected component as the FS Filter Driver in Windows and indicate a potential confidentiality impact. CVSS metrics from NVD/Microsoft show: CVSS v3.1...

CVE-2021-31191 Windows Projected File System FS Filter Driver Information Disclosure Vulnerability

...

CVE-2021-31190 Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability

...

CVE-2021-31190

CVE-2021-31190 is a Windows Container Isolation FS Filter Driver elevation of privilege vulnerability. Affects Windows components including Windows 10 (1809) and Windows Server 2019 family and related Server Core variants; CVSSv3.1 base score 7.8 (LOCAL, Privileges Required: LOW, User Interaction...