Vault Merging Multiple Entity Aliases for the Same Mount May Allow Privilege Escalation

Summary A Vault or Vault Enterprise “Vault” user with write permission to an entity alias ID sharing a mount accessor with another user may acquire this other user’s policies by merging their identities. This vulnerability, CVE-2021-41802, was fixed in Vault and Vault Enterprise 1.7.5 and 1.8.4...

seatd-launch -- privilege escalation with SUID

Kenny Levinsen reports: seatd-launch used execlp, which reads the PATH environment variable to search for the requested executable, to execute seatd. This meant that the caller could freely control what executable was loaded by adding a user-writable directory to PATH. If seatd-launch had the SUI...

CVE-2021-33285

In NTFS-3G versions 2021.8.22, when a specially crafted NTFS attribute is supplied to the function ntfsgetattributevalue, a heap buffer overflow can occur allowing for memory disclosure or denial of service. The vulnerability is caused by an out-of-bound buffer access which can be triggered by...

Security update for ntfs-3g_ntfsprogs (important)

openSUSE Security Update: Security update for ntfs-3gntfsprogs Announcement ID: openSUSE-SU-2021:2971-1 Rating: important References: 1189720 Cross-References: CVE-2019-9755 CVE-2021-33285 CVE-2021-33286 CVE-2021-33287 CVE-2021-33289 CVE-2021-35266 CVE-2021-35267 CVE-2021-35268 CVE-2021-35269...

Huawei EulerOS: Security Advisory for cifs-utils (EulerOS-SA-2021-2323)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Explaining and Troubleshooting WriteCache Disk Drive Letter Assignment

This article explains the process involved on drive letter assignments for target devices and how to troubleshoot writecache drive letter changes. Background Mount Manager is the component responsible for managing volume names and drive letter assignments on windows. It has a database that is...

USN-4867-1: runC vulnerabilities

It was discovered that runC incorrectly checked mount targets. An attacker with a malicious container image could possibly mount over the /proc directory and escalate privileges. CVE-2019-16884 Etienne Champetier discovered that runC incorrectly checked mount targets. An attacker with a malicious...

USN-4867-1 runc vulnerabilities

It was discovered that runC incorrectly checked mount targets. An attacker with a malicious container image could possibly mount over the /proc directory and escalate privileges. CVE-2019-16884 Etienne Champetier discovered that runC incorrectly checked mount targets. An attacker with a malicious...

ALBA-2021:3056 nfs-utils bug fix and enhancement update

The nfs-utils packages provide a daemon for the kernel Network File System NFS server and related tools, which provides better performance than the traditional Linux NFS server used by most users. These packages also contain the mount.nfs, umount.nfs, and showmount programs. Bug Fixes and...

nfs-utils bug fix and enhancement update

The nfs-utils packages provide a daemon for the kernel Network File System NFS server and related tools, which provides better performance than the traditional Linux NFS server used by most users. These packages also contain the mount.nfs, umount.nfs, and showmount programs. Bug Fixes and...

PT-2021-1174

Name of the Vulnerable Software and Affected Versions: nfs-utils versions affected versions not specified Description: The issue concerns the nfs-utils packages, which provide a daemon for the kernel Network File System NFS server and related tools. These packages contain programs such as...

AZL-6583 CVE-2021-38199 affecting package kernel for versions less than 5.10.78.1-1

fs/nfs/nfs4client.c in the Linux kernel before 5.13.4 has incorrect connection-setup ordering, which allows operators of remote NFSv4 servers to cause a denial of service hanging of mounts by arranging for those servers to be unreachable during trunking detection...

UBUNTU-CVE-2021-38199

fs/nfs/nfs4client.c in the Linux kernel before 5.13.4 has incorrect connection-setup ordering, which allows operators of remote NFSv4 servers to cause a denial of service hanging of mounts by arranging for those servers to be unreachable during trunking detection...

Linux kernel 安全漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system, Linux. Linux kernel is vulnerable due to a failure to properly set the connection order flaw in fs/nfs/nfs4client.c. A remote attacker could exploit this flaw to cause a mount hang and result in a denial of...

PT-2021-29717

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.53 Description The issue is related to a potential NULL dereference in the cifs compose mount options function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-29780

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.135 Description The issue is related to a potential NULL dereference in the cifs compose mount options function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-25722

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.53 Description The issue is related to a potential NULL dereference in the cifs compose mount options function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2021-29681

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.13.3 Description A potential issue exists in the ext4 file system when remounting a read-only file system that is protected by multi-mount protection mmp. This could lead to a possible use-after-free UAF...

PT-2021-25785

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.135 Description The issue is related to a potential NULL dereference in the cifs compose mount options function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

GHSA-9VH5-R4QW-V3VV Improper Resource Shutdown or Release in HashiCorp Vault

HashiCorp Vault Enterprise 0.11.0 through 1.3.1 fails, in certain circumstances, to revoke dynamic secrets for a mount in a deleted namespace. Fixed in 1.3.2...