CVE-2011-4126

Race condition issues were found in Calibre at devices/linuxmounthelper.c allowing unprivileged users the ability to mount any device to anywhere...

DEBIAN-CVE-2011-4126

Race condition issues were found in Calibre at devices/linuxmounthelper.c allowing unprivileged users the ability to mount any device to anywhere...

DEBIAN-CVE-2011-4125

A untrusted search path issue was found in Calibre at devices/linuxmounthelper.c leading to the ability of unprivileged users to execute any program as root...

DEBIAN-CVE-2011-4124

Input validation issues were found in Calibre at devices/linuxmounthelper.c which can lead to argument injection and elevation of privileges...

CVE-2011-4126

Race condition issues were found in Calibre at devices/linuxmounthelper.c allowing unprivileged users the ability to mount any device to anywhere...

Race condition

Race condition issues were found in Calibre at devices/linuxmounthelper.c allowing unprivileged users the ability to mount any device to anywhere...

CVE-2011-4126

The CVE-2011-4126 issue concerns Calibre’s devices/linux_mount_helper.c, where a race condition can allow unprivileged users to mount any device to any location. Multiple connected sources (RH/CVE, NVD, OSV, UB Ubuntu, Debian, OSV–DEBIAN, CVE lists) corroborate the vulnerability’s technical scope...

CVE-2011-4124

Input validation issues were found in Calibre at devices/linuxmounthelper.c which can lead to argument injection and elevation of privileges...

PT-2021-8352

Name of the Vulnerable Software and Affected Versions Calibre affected versions not specified Description Input validation issues were found in Calibre at devices/linux mount helper.c, which can lead to argument injection and elevation of privileges. Recommendations At the moment, there is no...

Calibre 代码问题漏洞

Calibre is an open source free all-in-one eBook reading management and format conversion tool by Kovid Goyal, an individual developer in India. Calibre suffers from a code issue vulnerability that stems from an untrusted search path issue found in devices linux mount helper.c. The vulnerability c...

PT-2021-8353

Name of the Vulnerable Software and Affected Versions Calibre affected versions not specified Description A untrusted search path issue was found in Calibre at devices/linux mount helper.c, allowing unprivileged users to execute any program as root. Recommendations At the moment, there is no...

PT-2021-8354

Name of the Vulnerable Software and Affected Versions Calibre affected versions not specified Description A race condition issue was found in Calibre, specifically in the devices/linux mount helper.c file, allowing unprivileged users to mount any device to any location. Recommendations At the...

Calibre 授权问题漏洞

Calibre is an open source, free, all-in-one eBook reading management and format conversion tool from Kovid Goyal, an individual developer in India. An authorization issue vulnerability exists in Calibre, which stems from the product's devices/linuxmounthelper.c file not validating user privileges...

Calibre 输入验证错误漏洞

Calibre is an open source free all-in-one eBook reading management and format conversion tool by Kovid Goyal, an individual developer in India. Calibre suffers from an input validation error vulnerability that stems from an input validation issue found in Calibre on the device linux mount helper....

CVE-2011-4126: Time-of-check Time-of-use (TOCTOU) Race Condition

Race condition issues were found in Calibre at devices/linuxmounthelper.c allowing unprivileged users the ability to mount any device to anywhere...

SUSE-SU-2021:3523-1 Security update for util-linux

This update for util-linux fixes the following issues: Update to version 2.33.2 to provide seamless update from SLE12 SP5 to SLE15 SP2: - CVE-2021-37600: Fixed an integer overflow which could lead to a buffer overflow in getsemelements in sys-utils/ipcutils.c bsc1188921. - agetty: Fix 8-bit...

CVE-2021-41802

HashiCorp Vault and Vault Enterprise through 1.7.4 and 1.8.3 allowed a user with write permission to an entity alias ID sharing a mount accessor with another user to acquire this other user’s policies by merging their identities. Fixed in Vault and Vault Enterprise 1.7.5 and 1.8.4...

CVE-2021-3847

An unauthorized access to the execution of the setuid file with capabilities flaw in the Linux kernel OverlayFS subsystem was found in the way user copying a file with capabilities from a nosuid mount into another mount. A local user could use this flaw to escalate their privileges on the system...

CVE-2021-41802

HashiCorp Vault and Vault Enterprise through 1.7.4 and 1.8.3 allowed a user with write permission to an entity alias ID sharing a mount accessor with another user to acquire this other user’s policies by merging their identities. Fixed in Vault and Vault Enterprise 1.7.5 and 1.8.4...

CVE-2021-41133 Sandbox bypass via recent VFS-manipulating syscalls

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In versions prior to 1.10.4 and 1.12.0, Flatpak apps with direct access to AFUNIX sockets such as those used by Wayland, Pipewire or pipewire-pulse can trick portals and other host-OS services int...