Scientific Linux Security Update : util-linux on SL7.x x86_64 (20170412)

Security Fixes : - A race condition was found in the way su handled the management of child processes. A local authenticated attacker could use this flaw to kill other processes with root privileges under specific conditions. CVE-2017-2616 Bug Fixes : - The 'findmnt --target ' command prints all...

The vulnerability of the OpenBSD operating system, which allows a hacker to trigger a service failure

The vulnerability of the OpenBSD operating system exists due to insufficient checks on input data. Exploiting this vulnerability allows a person with privileged mounting functions, who operates locally, to cause a service failure a kernel crash by mounting a temporary file system with values of 1...

CVE-2014-9645

The addprobe function in modutils/modprobe.c in BusyBox before 1.23.0 allows local users to bypass intended restrictions on loading kernel modules via a / slash character in a module name, as demonstrated by an "ifconfig /usbserial up" command or a "mount -t /sndpcm none /" command...

tpelectric.ir XSS vulnerability

Vulnerable URL: http://www.tpelectric.ir/fa/user/temp.php?t==103&nameproduct2;=Wall Mount Socket Outlet Straight...

Error "Superblock last mount time is in the future" from fsck when booting a Linux VM

In only one host, restarting a Linux VM will encounter the warning: /dev/mapper/rootvg-lvroot: Superblock last mount time Mon Feb 27 16:19:54 2017, now = Fri Feb 17 16:37:49 2017 is in the future./dev/mapper/rootvg-lvroot: UNEXPECTED INCONSISTENCY; RUN fsck MANUALLY. i.e., without -a or -p option...

SUSE-SU-2017:0554-1 Security update for util-linux

This update for util-linux fixes the following issues: This security issue was fixed: - CVE-2017-2616: In su with PAM support it was possible for local users to send SIGKILL to selected other processes with root privileges bsc1023041. This non-security issues were fixed: - lscpu: Implement WSL...

GLSA-201702-10 : NTFS-3G: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-201702-10 NTFS-3G: Privilege escalation The NTFS-3G driver does not properly clear environment variables before invoking mount or umount. This flaw is similar to the vulnerability described in GLSA-201701-19 and GLSA-201603-04...

The vulnerability of the library that handles system calls and core functions of glibc allows a attacker to cause a service failure or increase their privileges.

The vulnerability of the encodename function in the library that handles system calls and core glibc functions exists due to errors in processing new line characters in directory path names when using ncpmount and mount.cifs. Exploiting this vulnerability can allow an attacker to cause service...

DEBIAN-CVE-2016-10044

The aiomount function in fs/aio.c in the Linux kernel before 4.7.7 does not properly restrict execute access, which makes it easier for local users to bypass intended SELinux W^X policy restrictions, and consequently gain privileges, via an iosetup system call...

UBUNTU-CVE-2016-10044

The aiomount function in fs/aio.c in the Linux kernel before 4.7.7 does not properly restrict execute access, which makes it easier for local users to bypass intended SELinux W^X policy restrictions, and consequently gain privileges, via an iosetup system call...

USN-3161-2: Linux kernel (Xenial HWE) vulnerabilities | Cloud Foundry

Severity Medium Vendor Ubuntu Versions Affected Ubuntu 14.04 LTS Description Tilman Schmidt and Sasha Levin discovered a use-after-free condition in the TTY implementation in the Linux kernel. A local attacker could use this to expose sensitive information kernel memory. CVE-2015-8964 It was...

Unable to add NFS to the XenServer, error : There was an error while attempting to mount the NFS share

Error while adding the storage to XenServer 6.5 There was an error while attempting to mount the NFS share Unable to mount manually, failed with "mount failed reason given by server : permission denied."...

Code injection

fs/namespace.c in the Linux kernel before 4.9 does not restrict how many mounts may exist in a mount namespace, which allows local users to cause a denial of service memory consumption and deadlock via MSBIND mount system calls, as demonstrated by a loop that triggers exponential growth in the...

DEBIAN-CVE-2016-6213

fs/namespace.c in the Linux kernel before 4.9 does not restrict how many mounts may exist in a mount namespace, which allows local users to cause a denial of service memory consumption and deadlock via MSBIND mount system calls, as demonstrated by a loop that triggers exponential growth in the...

IBM Spectrum Protect Mount Detection

Binary data ibmtsmfastbackmountdetect.nbin...

IBM Tivoli Storage Manager FastBack Mount CMountDismount::GetVaultDump RCE

The IBM Tivoli Storage Manager TSM FastBack Mount application running on the remote host is affected by a remote code execution vulnerability in the FastBackServer.exe service due to improper validation of user-supplied input to the CMountDismount::GetVaultDump method. An unauthenticated, remote...

Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-3161-1)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3161-1 advisory. Tilman Schmidt and Sasha Levin discovered a use-after-free condition in the TTY implementation in the Linux kernel. A local attacker could use this to...

Ubuntu 16.04 LTS : Linux kernel (Qualcomm Snapdragon) vulnerabilities (USN-3161-4)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3161-4 advisory. Tilman Schmidt and Sasha Levin discovered a use-after-free condition in the TTY implementation in the Linux kernel. A local attacker could use this to...

Ubuntu 16.10 : linux-raspi2 vulnerabilities (USN-3162-2)

CAI Qian discovered that shared bind mounts in a mount namespace exponentially added entries without restriction to the Linux kernel's mount table. A local attacker could use this to cause a denial of service system crash. CVE-2016-6213 Andreas Gruenbacher and Jan Kara discovered that the...

Ubuntu: Security Advisory (USN-3162-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...