3627 matches found
CVE-2020-35517
A flaw was found in qemu. A host privilege escalation issue was found in the virtio-fs shared file system daemon where a privileged guest user is able to create a device special file in the shared directory and use it to r/w access host devices...
CVE-2020-35517
A flaw was found in qemu. A host privilege escalation issue was found in the virtio-fs shared file system daemon where a privileged guest user is able to create a device special file in the shared directory and use it to r/w access host devices...
CVE-2020-35517: Improper Privilege Management
A flaw was found in qemu. A host privilege escalation issue was found in the virtio-fs shared file system daemon where a privileged guest user is able to create a device special file in the shared directory and use it to r/w access host devices...
The vulnerability in the fs/block_dev.c file of the Linux operating system, related to the use of memory after it is freed, allows a hacker to increase their privileges or cause service failures.
The vulnerability in the fs/blockdev.c file of the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges or cause service interruptions...
f2fs-tools: Multiple vulnerabilities
Background Tools for Flash-Friendly File System F2FS. Description Multiple vulnerabilities have been discovered in f2fs-tools. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no known workaround a...
openSUSE Security Update : the Linux Kernel (openSUSE-2021-60)
The openSUSE Leap 15.2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2020-27835: A use after free in the Linux kernel infiniband hfi1 driver was found in the way user calls Ioctl after open dev file and fork. A local user could use thi...
CVE-2020-35517
A flaw was found in qemu. A host privilege escalation issue was found in the virtio-fs shared file system daemon where a privileged guest user is able to create a device special file in the shared directory and use it to r/w access host devices. The highest threat from this vulnerability is to da...
PT-2021-28387
Name of the Vulnerable Software and Affected Versions: tower-http affected versions not specified Description: The issue arises from the tower http::services::fs::ServeDir function not correctly validating Windows paths, allowing access to files outside the intended directory. This means paths li...
CVE-2021-3178: Improper Limitation of a Pathname to a Restricted Directory
fs/nfsd/nfs3xdr.c in the Linux kernel through 5.10.8, when there is an NFS export of a subdirectory of a filesystem, allows remote attackers to traverse to other parts of the filesystem via READDIRPLUS. NOTE: some parties argue that such a subdirectory export is not intended to prevent this attac...
SUSE SLES15 Security Update : kernel (SUSE-SU-2021:0108-1)
The SUSE Linux Enterprise 15 SP2 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-36158: Fixed a potential remote code execution in the Marvell mwifiex driver bsc1180559. CVE-2020-27825: Fixed a race in the traceopen and buffer resi...
PT-2021-7324 · Qemu +8 · Qemu +8
Name of the Vulnerable Software and Affected Versions: qemu affected versions not specified Description: A flaw was found in the virtio-fs shared file system daemon of qemu, which is related to insecure privilege management. This issue allows a privileged guest user to create a device special fil...
CVE-2021-1670
Windows Projected File System FS Filter Driver Information Disclosure Vulnerability...
CVE-2021-1663
Windows Projected File System FS Filter Driver Information Disclosure Vulnerability...
CVE-2021-1672
Windows Projected File System FS Filter Driver Information Disclosure Vulnerability...
Information disclosure
Windows Projected File System FS Filter Driver Information Disclosure Vulnerability...
CVE-2021-1672
CVE-2021-1672 refers to a Windows vulnerability in the Projected File System (PFS) FS Filter Driver that enables information disclosure. The connected MSRC entry and NVD record confirm the affected component is the Windows PFS FS Filter Driver, with root cause described as an information disclosu...
CVE-2021-1670 Windows Projected File System FS Filter Driver Information Disclosure Vulnerability
...
CVE-2021-1670
CVE-2021-1670 is a Windows vulnerability affecting the Projected File System FS Filter Driver that leads to information disclosure. The issue is characterized in public sources as a local-information-disclosure flaw in the FS filter driver, with the CVE tracked by Microsoft as CVE-2021-1670 and l...
CVE-2021-1663
CVE-2021-1663 affects the Windows Projected File System FS Filter Driver and is categorized as an Information Disclosure vulnerability. Public details in connected documents identify the vulnerable component as the Windows FS Filter Driver and indicate partial/high confidentiality impact (CVSS 3....
