PT-2021-23838

Name of the Vulnerable Software and Affected Versions GNU Hurd versions prior to 0.9 20210404-9 Description An issue was discovered that allows exploitation to gain full root access. This occurs when trying to exec a setuid executable, creating a window of time where the process has new privilege...

Gnu Hurd 资源管理错误漏洞

Gnu Hurd is a Gnu Project replacement for the Unix kernel. Used to implement the file system, network protocols, file access control, and other features implemented by the Unix kernel or similar kernels such as Linux, GNU Hurd has a security vulnerability that could be exploited by an attacker to...

GNU Hurd 安全漏洞

Gnu Hurd is a Gnu project replacement for the Unix kernel. A security vulnerability exists in GNU Hurd, which stems from the fact that in versions of GNU Hurd prior to 0.9 20210404-9 each person who maps a file shares a page navigation port, allowing anyone to modify any file they can read. any...

PT-2021-23840

Name of the Vulnerable Software and Affected Versions GNU Hurd versions prior to 0.9 20210404-9 Description An issue was discovered that allows anyone to modify any files they can read, potentially leading to full root access. This is because a single pager port is shared among all users who mmap...

PT-2021-23839

Name of the Vulnerable Software and Affected Versions GNU Hurd versions prior to 0.9 20210404-9 Description An issue in libports allows it to accept fake notification messages from any client on any port. This can lead to a port use-after-free situation, which can be exploited for local privilege...

CVE-2021-43412: Use After Free

An issue was discovered in GNU Hurd before 0.9 20210404-9. libports accepts fake notification messages from any client on any port, which can lead to port use-after-free. This can be exploited for local privilege escalation to get full root access...

GNU Hurd 竞争条件问题漏洞

Gnu Hurd is a Gnu project replacement for the Unix kernel. It is used to implement file systems, network protocols, file access control, and other features implemented by the Unix kernel or similar kernels such as Linux. A security vulnerability exists in GNU Hurd, which originated in GNU Hurd...

PT-2021-23841 · Gnu Hurd · Gnu Hurd

Name of the Vulnerable Software and Affected Versions: GNU Hurd versions prior to 0.9 20210404-9 Description: An issue in the authentication protocol used by the proc server makes it vulnerable to man-in-the-middle attacks. This can be exploited for local privilege escalation, allowing attackers ...

CVE-2021-43411: Concurrent Execution using Shared Resource with Improper Synchronization

An issue was discovered in GNU Hurd before 0.9 20210404-9. When trying to exec a setuid executable, there's a window of time when the process already has the new privileges, but still refers to the old task and is accessible through the old process port. This can be exploited to get full root...

GNU Hurd 授权问题漏洞

Gnu Hurd is a Gnu project replacement for the Unix kernel. It is used to implement the file system, network protocols, file access control, and other features implemented by the Unix kernel or similar kernels such as Linux. GNU Hurd suffers from a security vulnerability that stems from the use of...

CVE-2021-43414: Improper Authentication

An issue was discovered in GNU Hurd before 0.9 20210404-9. The use of an authentication protocol in the proc server is vulnerable to man-in-the-middle attacks, which can be exploited for local privilege escalation to get full root access...

NZXT CAM WinRing0x64 driver IRP 0x9c40a148 privilege escalation vulnerability

Summary A privilege escalation vulnerability exists in the WinRing0x64 Driver IRP 0x9c40a148 functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet IRP can cause an adversary to obtain elevated privileges. An attacker can send a malicious IRP to trigger this vulnerability. Tested...

Sierra Wireless AirLink ES450 SNMPD Hard-Coded Credentials

Talos Vulnerability Report TALOS-2018-0747 Sierra Wireless AirLink ES450 SNMPD hard-coded credentials vulnerability April 25, 2019 CVE Number CVE-2018-4062 Summary A hard-coded credentials vulnerability exists in the snmpd function of the Sierra Wireless AirLink ES450 FW 4.9.3. Activating snmpd...

[SECURITY] Fedora 28 Update: glusterfs-4.1.6-1.fc28

GlusterFS is a distributed file-system capable of scaling to several petabytes. It aggregates various storage bricks over Infiniband RDMA or TCP/IP interconnect into one large parallel network file system. GlusterFS is one of the most sophisticated file systems in terms of features and...

[SECURITY] Fedora 29 Update: glusterfs-5.1-1.fc29

GlusterFS is a distributed file-system capable of scaling to several petabytes. It aggregates various storage bricks over Infiniband RDMA or TCP/IP interconnect into one large parallel network file system. GlusterFS is one of the most sophisticated file systems in terms of features and...

[SECURITY] Fedora 29 Update: glusterfs-4.1.5-1.fc29

GlusterFS is a distributed file-system capable of scaling to several petabytes. It aggregates various storage bricks over Infiniband RDMA or TCP/IP interconnect into one large parallel network file system. GlusterFS is one of the most sophisticated file systems in terms of features and...

[SECURITY] Fedora 28 Update: glusterfs-4.1.1-1.fc28

GlusterFS is a distributed file-system capable of scaling to several petabytes. It aggregates various storage bricks over Infiniband RDMA or TCP/IP interconnect into one large parallel network file system. GlusterFS is one of the most sophisticated file systems in terms of features and...

[SECURITY] Fedora 26 Update: glusterfs-3.10.12-1.fc26

GlusterFS is a distributed file-system capable of scaling to several petabytes. It aggregates various storage bricks over Infiniband RDMA or TCP/IP interconnect into one large parallel network file system. GlusterFS is one of the most sophisticated file systems in terms of features and...

[SECURITY] Fedora 28 Update: glusterfs-4.0.2-1.fc28

GlusterFS is a distributed file-system capable of scaling to several petabytes. It aggregates various storage bricks over Infiniband RDMA or TCP/IP interconnect into one large parallel network file system. GlusterFS is one of the most sophisticated file systems in terms of features and...

[SECURITY] Fedora 27 Update: glusterfs-3.12.2-2.fc27

GlusterFS is a distributed file-system capable of scaling to several petabytes. It aggregates various storage bricks over Infiniband RDMA or TCP/IP interconnect into one large parallel network file system. GlusterFS is one of the most sophisticated file systems in terms of features and...