4911 matches found
Design/Logic Flaw
In cPanel before 67.9999.103, the backup system overwrites root's home directory when a mount disappears SEC-299...
CVE-2017-18413
In cPanel before 67.9999.103, the backup system overwrites root's home directory when a mount disappears SEC-299...
CVE-2017-18413
CVE-2017-18413 affects cPanel prior to 67.9999.103. The backup system can overwrite the root user’s home directory when a mounted volume disappears (SEC-299), exposing potential data integrity risk locally. The available connected records confirm the affected component/behavior and cite the speci...
CVE-2017-18413: Undefined Security Weakness
In cPanel before 67.9999.103, the backup system overwrites root's home directory when a mount disappears SEC-299...
DEBIAN-CVE-2019-14203
An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfshandler reply helper function: nfsmountreply...
UBUNTU-CVE-2019-14203
An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfshandler reply helper function: nfsmountreply...
PT-2019-13527
Name of the Vulnerable Software and Affected Versions Das U-Boot versions prior to 2019.07 Description A stack-based buffer overflow issue was found in the nfs handler reply helper function, specifically in the nfs mount reply function. Recommendations For Das U-Boot versions prior to 2019.07,...
UBUNTU-CVE-2018-16871
A flaw was found in the Linux kernel's NFS implementation, all versions 3.x and all versions 4.x up to 4.20. An attacker, who is able to mount an exported NFS filesystem, is able to trigger a null pointer dereference by using an invalid NFS sequence. This can panic the machine and deny access to...
USN-4077-1: tmpreaper vulnerability
It was discovered that tmpreaper incorrectly handled certain mount operations. A local attacker could possibly use this issue to create arbitrary files, leading to privilege escalation...
USN-4077-1 tmpreaper vulnerability
It was discovered that tmpreaper incorrectly handled certain mount operations. A local attacker could possibly use this issue to create arbitrary files, leading to privilege escalation...
kernel: nfs: NULL pointer dereference due to an anomalized NFS message sequence
A flaw was found in the Linux kernel's NFS implementation. An attacker, who is able to mount an exported NFS filesystem, is able to trigger a null pointer dereference by using an invalid NFS sequence. This can panic the machine and deny access to the NFS server. Any outstanding disk writes to the...
EulerOS 2.0 SP8 : bubblewrap (EulerOS-SA-2019-1762)
According to the version of the bubblewrap package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - bubblewrap.c in Bubblewrap before 0.3.3 misuses temporary directories in /tmp as a mount point. In some particular configurations related to...
bubblewrap: temporary directory misuse as mount point
bubblewrap.c in Bubblewrap before 0.3.3 misuses temporary directories in /tmp as a mount point. In some particular configurations related to XDGRUNTIMEDIR, a local attacker may abuse this flaw to prevent other users from executing bubblewrap or potentially execute code...
Docker Container Escape
On the host docker run --rm -it --cap-add=SYSADMIN --security-opt apparmor=unconfined ubuntu bash In the container mkdir /tmp/cgrp && mount -t cgroup -o rdma cgroup /tmp/cgrp && mkdir /tmp/cgrp/x echo 1 /tmp/cgrp/x/notifyonrelease hostpath=sed -n 's/.\perdir=^,./\1/p' /etc/mtab echo...
Unspecified vulnerability in deepin-clone (CNVD-2019-23973)
deepin-clone is a disk and partition backup/recovery tool. A security vulnerability exists in deepin-clone versions prior to 1.1.3. An attacker can exploit the vulnerability to gain access to mount points and prevent file system unmounting...
CVE-2019-13226
deepin-clone before 1.1.3 uses a predictable path /tmp/.deepin-clone/mount/ in the Helper::temporaryMountDevice function to temporarily mount a file system as root. An unprivileged user can prepare a symlink at this location to have the file system mounted in an arbitrary location. By winning a...
CVE-2019-13226
deepin-clone before 1.1.3 uses a predictable path /tmp/.deepin-clone/mount/ in the Helper::temporaryMountDevice function to temporarily mount a file system as root. An unprivileged user can prepare a symlink at this location to have the file system mounted in an arbitrary location. By winning a...
CVE-2019-13226: Improper Link Resolution Before File Access
deepin-clone before 1.1.3 uses a predictable path /tmp/.deepin-clone/mount/ in the Helper::temporaryMountDevice function to temporarily mount a file system as root. An unprivileged user can prepare a symlink at this location to have the file system mounted in an arbitrary location. By winning a...
PT-2019-13192
Name of the Vulnerable Software and Affected Versions deepin-clone versions prior to 1.1.3 Description The issue allows an unprivileged user to prepare a symlink at a predictable path /tmp/.deepin-clone/mount/ in the Helper::temporaryMountDevice function to temporarily mount a file system as root...