CVE-2016-10117

Firejail does not restrict access to --tmpfs, which allows local users to gain privileges, as demonstrated by mounting over /etc...

UBUNTU-CVE-2016-10120

Firejail uses 0777 permissions when mounting 1 /dev, 2 /dev/shm, 3 /var/tmp, or 4 /var/lock, which allows local users to gain privileges...

Code injection

Firejail uses 0777 permissions when mounting /tmp, which allows local users to gain privileges...

CVE-2016-10120

Firejail uses 0777 permissions when mounting 1 /dev, 2 /dev/shm, 3 /var/tmp, or 4 /var/lock, which allows local users to gain privileges...

CVE-2016-10120

Firejail uses 0777 permissions when mounting 1 /dev, 2 /dev/shm, 3 /var/tmp, or 4 /var/lock, which allows local users to gain privileges...

CVE-2016-10120

CVE-2016-10120 affects Firejail. The issue is that mounting points (/dev, /dev/shm, /var/tmp, /var/lock) are created with 0777 permissions, enabling local users to gain privileges. Connected sources reiterate this description across multiple databases (NVD, OSV, UBUNTU CVE, Debian tracker, etc.)....

CVE-2016-10119

Firejail is affected by CVE-2016-10119: the vulnerability arises from Firejail mounting /tmp with 0777 permissions, enabling local privilege escalation. Affected component: Firejail; root cause: incorrect permissions on /tmp during mount. Impact: local users could gain privileges (as described). ...

Unable to create an SR from a CIFS share containing DFS Targets

Unable to create an SR from a CIFS share containing DFS Targets. When trying to create the SR XenCenter gives an error: Unable to mount the directory specified in device configuration request The following errors can be seen in the logs: daemon.log Apr 6 10:35:04 dubvdodxa65-5 cifs.upcall: unable...

SUSE-SU-2017:0758-1 Security update for ceph

This update provides Ceph 10.2.5, which brings fixes and enhancements: This security issue was fixed: - CVE-2016-8626: Handle empty POST condition to not allow attackers to crash the ceph-radosgw service. bsc1007217 These non-security issues were fixed: - OSD daemon uses 100% CPU load after OSD...

Linux Kernel EXT4 Error Handling Denial Of Service Vulnerability

Mounting a crafted EXT4 image as read-only leads to a kernel panic. Since the mounting procedure is a privileged operation, an attacker is probably not able to trigger this vulnerability on the commandline. Instead the automatic mounting feature of the GUI via a crafted USB-device is required...

Linux Kernel EXT4 Error Handling Denial Of Service

OS-S Security Advisory 2016-23 Local DoS: Linux Kernel EXT4 Error Handling EXT4 calling panic Date: October 31th, 2016 Authors: Sergej Schumilo, Hendrik Schwartke, Ralf Spenneberg CVE: Not yet assigned CVSS: 4.9 AV:L/AC:L/Au:N/C:N/I:N/A:C Severity: Critical Ease of Exploitation: Trivial...

InfraPower PPS-02-S Q213V1 - Unauthenticated Remote Root Command Execution Vulnerability

Exploit for php platform in category web applications InfraPower PPS-02-S Q213V1 Unauthenticated Remote Root Command Execution Vendor: Austin Hughes Electronics Ltd. Product web page: http://www.austin-hughes.com Affected version: Q213V1 Firmware: V2395S Fixed version: Q216V3 Firmware:...

[SECURITY] Fedora 24 Update: davfs2-1.5.4-3.fc24

davfs2 is a Linux file system driver that allows you to mount a WebDAV serv er as a disk drive...

kernel: Null pointer dereference when mounting ext4

A NULL pointer dereference flaw was found in the way the Linux kernel's ext4 file system driver handled certain corrupted file system images. An attacker with physical access to the system could use this flaw to crash the system...

kernel: Mounting ext2 fs e2fsprogs/tests/f_orphan as ext4 crashes system

A flaw was found in the way the Linux kernel's ext4 file system driver handled non-journal file systems with an orphan list. An attacker with physical access to the system could use this flaw to crash the system or, although unlikely, escalate their privileges on the system...

Linux kernel privilege acquisition vulnerability

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. aufs is one of the federated file system modules. A privilege-acquisition vulnerability exists in the aufs module of Linux kernel versions 3.x and 4.x. The vulnerability stems...

The vulnerability of the FuseISO disk mounting software allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the isofsrealreaddir function in the FuseISO mounting software occurs due to a stack overflow condition in the buffer. Exploiting this vulnerability can allow an attacker to cause service failure or execute arbitrary code terminate the application by using a long path name in...

DEBIAN-CVE-2016-1572

mount.ecryptfsprivate.c in eCryptfs-utils does not validate mount destination filesystem types, which allows local users to gain privileges by mounting over a nonstandard filesystem, as demonstrated by /proc/$pid...

USN-2876-1 ecryptfs-utils vulnerability

Jann Horn discovered that mount.ecryptfsprivate would mount over certain directories in the proc filesystem. A local attacker could use this to escalate their privileges. CVE-2016-1572...

Linux Kernel 4.3.3 - 'overlayfs' Privilege Escalation (2)

Exploit for linux platform in category local exploits / This software is provided by the copyright owner "as is" and any expressed or implied warranties, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose are disclaimed. In no event shall...