CVE-2023-1304

CVE-2023-1304 affects InsightCloudSec. An authenticated attacker can use an exposed getattr() via a Jinja template to smuggle OS commands and invoke actions normally restricted to private methods. Affected are InsightCloudSec versions prior to the fixes; the issue was resolved in Managed and SaaS...

CVE-2023-1304: Improper Control of Generation of Code

An authenticated attacker can leverage an exposed getattr method via a Jinja template to smuggle OS commands and perform other actions that are normally expected to be private methods. This issue was resolved in the Managed and SaaS deployments on February 1, 2023, and in version 23.2.1 of the...

InsightCloudSec 代码注入漏洞

InsightCloudSec is a fully integrated cloud-native security platform from InsightCloudSec. A security vulnerability exists in versions of InsightCloudSec prior to 23.3.21 that stems from an attacker being able to execute OS commands via a Jinja template utilizing the publicly available getattr...

PT-2023-16876 · Unknown · Insightcloudsec

Name of the Vulnerable Software and Affected Versions: InsightCloudSec versions prior to 23.2.1 Description: An authenticated attacker can leverage an exposed getattr method via a Jinja template to smuggle OS commands and perform other actions that are normally expected to be private methods. Thi...

mysql-selinux bug fix and enhancement update

An update is available for mysql-selinux. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list mysql-selinux package holds SELinux rules for the mariadb and mysql...

GSD-2022-1004829 afs: Fix dynamic root getattr

afs: Fix dynamic root getattr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.250 by commit 65c24caf1b9f5b08397c6e805ec24ebc390c6e4d, it w...

GSD-2022-1004628 afs: Fix dynamic root getattr

afs: Fix dynamic root getattr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.127 by commit 7b564e3254b7db5fbfbf11a824627a6c31b932b4, it w...

GSD-2022-1004466 afs: Fix dynamic root getattr

afs: Fix dynamic root getattr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.51 by commit 2b2bba96526f25f2eba74ecadb031de2e05a83ce, it wa...

PT-2022-33091

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v4.19.245 through v4.19.249 Description The issue is related to a potential security vulnerability in the Linux Kernel, specifically with dynamic root getattr. The actual impact and attack plausibility have not yet been...

PT-2022-33005

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.4.196 through v5.4.201 Description The issue is related to a dynamic root getattr in the afs component. It was introduced in version v5.4.196 and fixed in version v5.4.202. The actual impact and attack plausibility hav...

PT-2022-32523

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.18 through v5.18.7 Description The issue is related to a dynamic root getattr in the afs component. It was introduced in version v5.18 and fixed in version v5.18.8. The actual impact and attack plausibility have not ye...

PT-2025-8621

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been resolved, related to the dynamic root getattr in the afs module. The problem occurred when the afs getattr function consulted the server without...

PT-2022-38109

Уязвимость функции afs getattr модуля fs/afs/inode.c файловой системы Andrew AFS ядра операционной системы Linux связана с разыменованием указателей. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

kernel: fuse: fuse_do_getattr() calls make_bad_inode() in inappropriate situations

A denial of service flaw was found in fusedogetattr in fs/fuse/dir.c in the kernel side of the FUSE filesystem in the Linux kernel. A local user could use this flaw to crash the system...

GSD-2021-1000216 ceph: fix inode leak on getattr error in __fh_to_dentry

ceph: fix inode leak on getattr error in fhtodentry This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.5 by commit...

GSD-2021-1000415 ceph: fix inode leak on getattr error in __fh_to_dentry

ceph: fix inode leak on getattr error in fhtodentry This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.120 by commit...

UVI-2021-1000415 ceph: fix inode leak on getattr error in __fh_to_dentry

ceph: fix inode leak on getattr error in fhtodentry This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.120 by commit...

PT-2021-28681

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.5 Description The issue is related to an inode leak on getattr error in fh to dentry. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-28798

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.38 Description A potential issue exists where an inode leak occurs on getattr error in fh to dentry. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-24687

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.5 Description The issue is related to an inode leak on getattr error in fh to dentry. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...