Advisory ROSA-SA-2024-2432

Software: man-db 2.7.6.1 OS: ROSA Virtualization 2.1 packageevrstring: man-db-2.7.6.1 CVE-ID: CVE-2018-25078 BDU-ID: None CVE-Crit: N/A CVE-DESC.: man-db in Gentoo allows local users with access to the man user account to gain root privileges, because /usr/bin/mandb is executed by the root user,...

RLSA-2024:3184 Moderate: grub2 security update

The grub2 packages provide version 2 of the Grand Unified Boot Loader GRUB, a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices. Security Fixes: grub2:...

Rocky Linux 8 : grub2 (RLSA-2024:3184)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:3184 advisory. grub2: grub2-set-bootflag can be abused by local pseudo-users CVE-2024-1048 grub2: Out-of-bounds write at fs/ntfs.c may lead to unsigned code execution...

Dell ThinOS Information Disclosure Vulnerability

Dell ThinOS is a client operating system from Dell USA. An information disclosure vulnerability exists in Dell ThinOS 2402 Telemetry Dashboard v1.0.0.8, which originates from allowing an unauthenticated user with local access to the device to disclose information...

CVE-2024-5908

A problem with the Palo Alto Networks GlobalProtect app can result in exposure of encrypted user credentials, used for connecting to GlobalProtect, in application logs. Normally, these application logs are only viewable by local users and are included when generating logs for troubleshooting...

PT-2024-4211 · Palo Alto Networks · Palo Alto Networks Globalprotect

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks GlobalProtect App affected versions not specified Description: A problem with the Palo Alto Networks GlobalProtect app can result in exposure of encrypted user credentials, used for connecting to GlobalProtect, in applicati...

AZL-51921 CVE-2022-4968 affecting package netplan for versions less than 1.0.1-1

netplan leaks the private key of wireguard to local users. Versions after 1.0 are not affected...

DEBIAN-CVE-2022-4968

netplan leaks the private key of wireguard to local users. Versions after 1.0 are not affected...

UBUNTU-CVE-2022-4968

netplan leaks the private key of wireguard to local users. Versions after 1.0 are not affected...

CVE-2022-4968

netplan leaks the private key of wireguard to local users. Versions after 1.0 are not affected...

CVE-2022-4968

netplan leaks the private key of wireguard to local users. Versions after 1.0 are not affected...

CVE-2022-4968

CVE-2022-4968 affects netplan: it leaks the WireGuard private key to local users. Affected versions are prior to 1.0; versions after 1.0 are not affected. Ubuntu advisory USN-6851-1 and vendor advisories indicate a patch is available (e.g., netplan.io 0.104-0ubuntu2~20.04.5). Several Nessus/NVD e...

CVE-2022-4968: Exposure of Sensitive System Information to an Unauthorized Control Sphere

netplan leaks the private key of wireguard to local users. Versions after 1.0 are not affected...

PT-2024-11906

Name of the Vulnerable Software and Affected Versions netplan versions prior to 1.0 Description The issue concerns netplan leaking the private key of WireGuard to local users. A security fix is expected to be released soon. Recommendations For versions prior to 1.0, a security fix will be release...

CVE-2024-3716 Foreman-installer: candlepin database password being leaked to local users via the process list

A flaw was found in foreman-installer when puppet-candlepin is invoked cpdb with the --password parameter. This issue leaks the password in the process list and allows an attacker to take advantage and obtain the password...

CVE-2024-3716 Foreman-installer: candlepin database password being leaked to local users via the process list

A flaw was found in foreman-installer when puppet-candlepin is invoked cpdb with the --password parameter. This issue leaks the password in the process list and allows an attacker to take advantage and obtain the password...

SUSE CVE-2020-10773

A stack information leak flaw was found in s390/s390x in the Linux kernel's memory manager functionality, where it incorrectly writes to the /proc/sys/vm/cmmtimeout file. This flaw allows a local user to see the kernel data...

SUSE CVE-2024-0639

A denial of service vulnerability due to a deadlock was found in sctpautoasconfinit in net/sctp/socket.c in the Linux kernel's SCTP subsystem. This flaw allows guests with local user privileges to trigger a deadlock and potentially crash the system...

RHEL 4 : mailman (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - mailman: Local users able to read private mailing list archives CVE-2002-0389 Note that Nessus has not tested for...

RHEL 6 : numpy (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - numpy: crafted serialized object passed in numpy.load in pickle python module allows arbitrary code...