4034 matches found
Kernel update: new kernel 2.6.18-028stab122.2 for Virtuozzo Containers for Linux 4.6
This update provides a new Virtuozzo Containers for Linux 4.6 kernel 2.6.18-028stab122.2 based on the Red Hat Enterprise Linux 5 kernel 2.6.18-419.el5. The new kernel introduces a stability fix. Vulnerability id: PSBM-66818 delayfs should not be mounted manually...
[SECURITY] Fedora 26 Update: systemd-233-4.fc26
systemd is a system and service manager that runs as PID 1 and starts the rest of the system. It provides aggressive parallelization capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, keeps track of processes using Linux control groups,...
Updated smb4k packages fix security vulnerability
Smb4k contains a logic flaw in which mount helper binary does not properly verify the mount command it is being asked to run. This allows calling any other binary as root since the mount helper is typically installed as suid CVE-2017-8849...
[SECURITY] Fedora 24 Update: systemd-229-20.fc24
systemd is a system and service manager for Linux, compatible with SysV and LSB init scripts. systemd provides aggressive parallelization capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, keeps track of processes using Linux cgroups,...
Smb4K: Arbitrary command execution as root
Background Smb4K is a SMB/CIFS Windows share browser for KDE. Description Smb4k contains a logic flaw in which mount helper binary does not properly verify the mount command it is being asked to run. Impact A local user can execute commands with the root privilege due to the mount helper being...
kernel: EXT4 memory corruption / SLAB out-of-bounds read
Mounting a crafted EXT4 image read-only leads to an attacker controlled memory corruption and SLAB-Out-of-Bounds reads...
Windows Manage VMDK Mount Drive
This module mounts a vmdk file Virtual Machine Disk on a drive provided by the user by taking advantage of the vstor2 device driver VMware. First, it executes the binary vixDiskMountServer.exe to access the device and then it sends certain control code via DeviceIoControl to mount it. Use the wri...
CVE-2017-8849
smb4k before 2.0.1 allows local users to gain root privileges by leveraging failure to verify arguments to the mount helper DBUS service...
UBUNTU-CVE-2017-8849
smb4k before 2.0.1 allows local users to gain root privileges by leveraging failure to verify arguments to the mount helper DBUS service...
DEBIAN-CVE-2017-8849
smb4k before 2.0.1 allows local users to gain root privileges by leveraging failure to verify arguments to the mount helper DBUS service...
CVE-2017-8849
smb4k before 2.0.1 allows local users to gain root privileges by leveraging failure to verify arguments to the mount helper DBUS service...
CVE-2017-8849
smb4k before 2.0.1 allows local users to gain root privileges by leveraging failure to verify arguments to the mount helper DBUS service...
CVE-2017-8849
smb4k before 2.0.1 allows local users to gain root privileges by leveraging failure to verify arguments to the mount helper DBUS service...
PT-2017-18579
Name of the Vulnerable Software and Affected Versions smb4k versions prior to 2.0.1 Description The issue allows local users to gain root privileges by leveraging failure to verify arguments to the mount helper DBUS service. Recommendations For versions prior to 2.0.1, update to version 2.0.1 or...
[ASA-201705-11] smb4k: privilege escalation
Arch Linux Security Advisory ASA-201705-11 ========================================== Severity: High Date : 2017-05-10 CVE-ID : CVE-2017-8849 Package : smb4k Type : privilege escalation Remote : No Link : https://security.archlinux.org/AVG-268 Summary ======= The package smb4k before version...
Directory Traversal
github.com/docker/docker is vulnerable to directory traversal attacks. These attacks are possible by using a symlink attack in an image when respawning a container. It allows local users to escape containerization "mount namespace breakout" and file overwrite...
SUSE-SU-2017:1151-1 Security update for apparmor
This update for apparmor provides the following fixes: This security issue was fixed: - CVE-2017-6507: Preserve unknown profiles when reloading apparmor.service bsc1029696 These non-security issues were fixed: - Add tunables/kernelvars abstraction. bsc1031529 - Update flags of ntpd profile...
CentOS 7 : util-linux (CESA-2017:0907)
An update for util-linux is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...