184 matches found
Intel-Linux-Processor-Microcode-Data-Files
Intel Processor Microcode Package for Linux About The Intel Processor Microcode Update MCU Package provides a mechanism to release updates for security advisories and functional issues, including errata. In addition, MCUs are responsible for starting the SGX enclave on processors that support the...
EvilAbigail
Initrd暗号化ルートファイルシステム攻撃 シナリオ FDEが有効な状態で電源が切られたノートPC 攻撃者がUSB/CD/ネットワークから起動 スクリプトが実行され、initrdをバックドア化 ユーザーがノートPCに戻り、通常通り起動 バックドア化されたinitrdがロード: Debian/Ubuntu/Kali 起動時に.soファイルを/sbin/initに注入し、シェルを起動 Fedora/CentOS LDPRELOAD .soをDefaultEnviromentに注入し、グローバルにロード、シェルを起動 対応ディストリビューション Ubuntu 14.04.3 Debian...
IvantiInitrdDecryptor
这里有一个用于解密 Ivanti 设备 initrd 的快速简易工具。它主要是学术性的，因为还有其他方法可以提取（更有用的）真实根设备的 LVM 密钥。 要使用它，请从 Ivanti 复制内核文件，并从 bzImage 中提取 ELF（我使用了 binwalk -e）。将其放入 IDA 中，查找引用了字符串 "/initrd.image" 和 "vaes" 的函数。initrd AES 密钥会在那里。将此密钥添加到脚本中，提供你的 initrd，你就会得到一个 gz。 请注意，我在提取 gzipped 内核时遇到了困难——我最终使用了 7zip，它（比 gz）宽容得多。...
dracut: dracut: Root code execution via DHCP options command injection in NetworkManager initrd module
A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP options, such as a malicious root-path, next-server, or bootfile name, to a system using dracut's NetworkManager-based initrd network module. These options are...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: dracut (UTSA-2026-102692)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102692 advisory. A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP options, such as a malicious...
CVE-2026-16445
A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP options, such as a malicious root-path, next-server, or bootfile name, to a system using dracut's NetworkManager-based initrd network module. These options are...
CVE-2026-16445 Dracut: dracut: root code execution via dhcp options command injection in networkmanager initrd module
A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP options, such as a malicious root-path, next-server, or bootfile name, to a system using dracut's NetworkManager-based initrd network module. These options are...
CVE-2026-16445
CVE-2026-16445 affects dracut’s NetworkManager-based initrd network module. A remote attacker on the adjacent network can craft DHCP options (root-path/next-server/bootfile) that are written into a temporary shell script without proper escaping, enabling command injection and root code execution ...
dracut: dracut: Root code execution via DHCP options command injection in NetworkManager initrd module
A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP options, such as a malicious root-path, next-server, or bootfile name, to a system using dracut's NetworkManager-based initrd network module. These options are...
openSUSE 16 Security Update : wicked (openSUSE-SU-2026:20949-1)
The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:20949-1 advisory. Changes in wicked: - Update to version 0.6.79 - Fix an indirect remote shell command injection via unsanitized dhcp strings and leaseinfo dump...
SUSE SLED15 / SLES15 Security Update : wicked (SUSE-SU-2026:2349-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:2349-1 advisory. This update for wicked fixes the following issue - CVE-2026-44932: indirect remote shell command injection via...
OPENSUSE-SU-2026:20949-1 Security update for wicked
This update for wicked fixes the following issues: Changes in wicked: - Update to version 0.6.79 - Fix an indirect remote shell command injection via unsanitized dhcp strings and leaseinfo dump bsc1265221,CVE-2026-44932: - Fix to escape single-quotes in leaseinfo dump output used by the wicked te...
Security update for wicked
This update for wicked fixes the following issue CVE-2026-44932: indirect remote shell command injection via unsanitized DHCP options bsc1265221. Changes for wicked: Update to version 0.6.79 Fix to escape single-quotes in leaseinfo dump output used by the wicked test dhcp4 and wicked test dhcp6 a...
SUSE-SU-2026:2349-1 Security update for wicked
This update for wicked fixes the following issue - CVE-2026-44932: indirect remote shell command injection via unsanitized DHCP options bsc1265221. Changes for wicked: - Update to version 0.6.79 - Fix to escape single-quotes in leaseinfo dump output used by the wicked test dhcp4 and wicked test...
PT-2026-48679
Name of the Vulnerable Software and Affected Versions wicked versions prior to 0.6.79 Description An indirect remote shell command injection exists due to unsanitized DHCP options. The issue involves improper processing of posix-tz-dbname and tz-string options, as well as a failure to escape...
CVE-2026-24153
NVIDIA Jetson Linux has a vulnerability in initrd, where the nvluks trusted application is not disabled. A successful exploit of this vulnerability might lead to information disclosure...
CVE-2026-24154
NVIDIA Jetson Linux has vulnerability in initrd, where an unprivileged attacker with physical access coul inject incorrect command line arguments. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, data tampering, and information...
EUVD-2026-17514
NVIDIA Jetson Linux has vulnerability in initrd, where an unprivileged attacker with physical access coul inject incorrect command line arguments. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, data tampering, and information...