UBUNTU-CVE-2016-1585

In all versions of AppArmor mount rules are accidentally widened when compiled...

CVE-2016-1585

In all versions of AppArmor mount rules are accidentally widened when compiled...

CVE-2016-1585 AppArmor mount rules grant excessive permissions

In all versions of AppArmor mount rules are accidentally widened when compiled...

CVE-2016-1585

CVE-2016-1585: The AppArmor policy compiler widens mount rules in all versions when compiled. Vulnerability is discussed in multiple sources; patches exist in AppArmor 2.13-16 (and earlier 2.13-12) with advisories noting updated packages. Debian/Ubuntu references indicate ongoing remediation; imp...

CVE-2016-1585

In all versions of AppArmor mount rules are accidentally widened when compiled...

CVE-2016-1585

In all versions of AppArmor mount rules are accidentally widened when compiled...

CVE-2011-3145

CVE-2011-3145 affects ecryptfs-utils’s mount.ecrpytfs_private; before version 87-0ubuntu1.2 it fails to set the effective group ID when calling setreuid(), causing mtab.tmp to be created with the user’s primary group. This is a local context/file ownership issue within the ecryptfs private mount ...

Information Disclosure

github.com/hashicorp/vault is vulnerable to information disclosure. The vulnerability exists as the in-memory cache that exists on performance standby nodes is not purged if a mount filter was used to exclude the secondary cluster. This allows an attacker to retrieve mount configuration data whic...

PT-2019-7813 · Canonical +2 · Apparmor +3

Name of the Vulnerable Software and Affected Versions: AppArmor affected versions not specified Description: The issue affects AppArmor, where mount rules are accidentally widened when compiled. Recommendations: At the moment, there is no information about a newer version that contains a fix for...

USN-3914-2 ntfs-3g update

USN-3914-1 fixed vulnerabilities in NTFS-3G. As an additional hardening measure, this update removes the setuid bit from the ntfs-3g binary. Original advisory details: A heap buffer overflow was discovered in NTFS-3G when executing it with a relative mount point path that is too long. A local...

Microsoft Windows 10 1809 - LUAFV Delayed Virtualization Cross Process Handle Duplication Exploit

Exploit for windows platform in category local exploits Windows: LUAFV Delayed Virtualization Cross Process Handle Duplication EoP Platform: Windows 10 1809 not tested earlier Class: Elevation of Privilege Security Boundary per Windows Security Service Criteria: User boundary Summary: The LUAFV...

EulerOS Virtualization 2.5.3 : fuse (EulerOS-SA-2019-1186)

According to the version of the fuse packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A vulnerability was discovered in fuse. When SELinux is active, fusermount is vulnerable to a restriction bypass. This allows non-root...

CVE-2018-13292

Information exposure vulnerability in /usr/syno/etc/mount.conf in Synology Router Manager SRM before 1.1.7-6941-2 allows remote authenticated users to obtain sensitive information via the world readable configuration...

PT-2019-8956 · Synology · Synology Diskstation Manager

Name of the Vulnerable Software and Affected Versions: Synology DiskStation Manager DSM versions prior to 6.2.1-23824 Description: The issue allows remote authenticated users to obtain sensitive information due to an information exposure vulnerability in the /usr/syno/etc/mount.conf configuration...

openSUSE Security Update : systemd (openSUSE-2019-909)

This update for systemd fixes the following issues : Security issues fixed : - CVE-2018-15688: A buffer overflow vulnerability in the dhcp6 client of systemd allowed a malicious dhcp6 server to overwrite heap memory in systemd-networkd. bsc1113632 - CVE-2018-15686: A vulnerability in...

USN-3914-1 ntfs-3g vulnerability

A heap buffer overflow was discovered in NTFS-3G when executing it with a relative mount point path that is too long. A local attacker could potentially exploit this to execute arbitrary code as the administrator...

[SECURITY] Fedora 29 Update: systemd-239-12.git8bca462.fc29

systemd is a system and service manager that runs as PID 1 and starts the rest of the system. It provides aggressive parallelization capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, keeps track of processes using Linux control groups,...

Race condition

Debian tmpreaper version 1.6.13+nmu1 has a race condition when doing a bind mount via rename which could result in local privilege escalation. Mounting via rename could potentially lead to a file being placed elsewhereon the filesystem hierarchy e.g. /etc/cron.d/ if the directory being cleaned up...

CVE-2019-3461

Debian tmpreaper version 1.6.13+nmu1 has a race condition when doing a bind mount via rename which could result in local privilege escalation. Mounting via rename could potentially lead to a file being placed elsewhereon the filesystem hierarchy e.g. /etc/cron.d/ if the directory being cleaned up...

DEBIAN-CVE-2019-3461

Debian tmpreaper version 1.6.13+nmu1 has a race condition when doing a bind mount via rename which could result in local privilege escalation. Mounting via rename could potentially lead to a file being placed elsewhereon the filesystem hierarchy e.g. /etc/cron.d/ if the directory being cleaned up...