CVE-2016-1585

In all versions of AppArmor mount rules are accidentally widened when compiled...

UBUNTU-CVE-2016-1585

In all versions of AppArmor mount rules are accidentally widened when compiled...

Code injection

In all versions of AppArmor mount rules are accidentally widened when compiled...

CVE-2016-1585

In all versions of AppArmor mount rules are accidentally widened when compiled...

CVE-2016-1585 AppArmor mount rules grant excessive permissions

In all versions of AppArmor mount rules are accidentally widened when compiled...

CVE-2016-1585

In all versions of AppArmor mount rules are accidentally widened when compiled...

CVE-2016-1585

CVE-2016-1585: The AppArmor policy compiler widens mount rules in all versions when compiled. Vulnerability is discussed in multiple sources; patches exist in AppArmor 2.13-16 (and earlier 2.13-12) with advisories noting updated packages. Debian/Ubuntu references indicate ongoing remediation; imp...

CVE-2016-1585

In all versions of AppArmor mount rules are accidentally widened when compiled...

CVE-2011-3145

CVE-2011-3145 affects ecryptfs-utils’s mount.ecrpytfs_private; before version 87-0ubuntu1.2 it fails to set the effective group ID when calling setreuid(), causing mtab.tmp to be created with the user’s primary group. This is a local context/file ownership issue within the ecryptfs private mount ...

Information Disclosure

github.com/hashicorp/vault is vulnerable to information disclosure. The vulnerability exists as the in-memory cache that exists on performance standby nodes is not purged if a mount filter was used to exclude the secondary cluster. This allows an attacker to retrieve mount configuration data whic...

CVE-2016-1585: Undefined Security Weakness

In all versions of AppArmor mount rules are accidentally widened when compiled...

PT-2019-7813

Name of the Vulnerable Software and Affected Versions AppArmor affected versions not specified Description The issue affects AppArmor, where mount rules are accidentally widened when compiled. Recommendations At the moment, there is no information about a newer version that contains a fix for thi...

USN-3914-2 ntfs-3g update

USN-3914-1 fixed vulnerabilities in NTFS-3G. As an additional hardening measure, this update removes the setuid bit from the ntfs-3g binary. Original advisory details: A heap buffer overflow was discovered in NTFS-3G when executing it with a relative mount point path that is too long. A local...

Microsoft Windows 10 1809 - LUAFV Delayed Virtualization Cross Process Handle Duplication Exploit

Exploit for windows platform in category local exploits Windows: LUAFV Delayed Virtualization Cross Process Handle Duplication EoP Platform: Windows 10 1809 not tested earlier Class: Elevation of Privilege Security Boundary per Windows Security Service Criteria: User boundary Summary: The LUAFV...

EulerOS Virtualization 2.5.3 : fuse (EulerOS-SA-2019-1186)

According to the version of the fuse packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A vulnerability was discovered in fuse. When SELinux is active, fusermount is vulnerable to a restriction bypass. This allows non-root...

CVE-2018-13292

Information exposure vulnerability in /usr/syno/etc/mount.conf in Synology Router Manager SRM before 1.1.7-6941-2 allows remote authenticated users to obtain sensitive information via the world readable configuration...

PT-2019-8956 · Synology · Synology Diskstation Manager

Name of the Vulnerable Software and Affected Versions: Synology DiskStation Manager DSM versions prior to 6.2.1-23824 Description: The issue allows remote authenticated users to obtain sensitive information due to an information exposure vulnerability in the /usr/syno/etc/mount.conf configuration...

openSUSE Security Update : systemd (openSUSE-2019-909)

This update for systemd fixes the following issues : Security issues fixed : - CVE-2018-15688: A buffer overflow vulnerability in the dhcp6 client of systemd allowed a malicious dhcp6 server to overwrite heap memory in systemd-networkd. bsc1113632 - CVE-2018-15686: A vulnerability in...

USN-3914-1 ntfs-3g vulnerability

A heap buffer overflow was discovered in NTFS-3G when executing it with a relative mount point path that is too long. A local attacker could potentially exploit this to execute arbitrary code as the administrator...

[SECURITY] Fedora 29 Update: systemd-239-12.git8bca462.fc29

systemd is a system and service manager that runs as PID 1 and starts the rest of the system. It provides aggressive parallelization capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, keeps track of processes using Linux control groups,...