userland-exec

Userland Exec Userland exec 在当前地址空间内用一个新的进程映像替换现有的进程映像。它模拟系统调用 execve 的行为，但描述进程映像的进程结构保持不变。换句话说，系统工具报告的进程名称将保留旧的进程名称。 该技术可用于在获得任意代码执行后实现隐蔽性。它还可用于执行存储在 noexec 分区中的二进制文件。 第一个 userland exec 由 grugq 创建。本仓库深受 Rapid7 Mettle library 的启发，其中包含对该技术的全面 博客描述。 最初，本仓库的大部分代码模仿了 Mettle 库，但后来已扩展出额外的复杂性以绕过 SELinux...

OPENSUSE-SU-2026:21301-1 Security update for dash

This update for dash fixes the following issues - CVE-2026-31323: Fix CVE-2026-31323 INTMAXMIN / -1 overflow bsc1269494. - executes code even when noexec "-n" is specified bsc1178978...

CVE-2026-53614

Local Privilege Escalation via LIBMOUNTFORCEMOUNT2 Environment Variable - nosuid/noexec Bypass in SUID mount8...

PT-2026-53079

Name of the Vulnerable Software and Affected Versions openSUSE Tumbleweed versions prior to 2.42.2-1.1 Description A local privilege escalation exists in the SUID mount8 utility. An attacker can bypass nosuid and noexec restrictions by manipulating the LIBMOUNT FORCE MOUNT2 environment variable...

Debian: Security Advisory (DLA-707-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE CVE-2016-7032

sudonoexec.so in Sudo before 1.8.15 on Linux might allow local users to bypass intended noexec command restrictions via an application that calls the 1 system or 2 popen function...

SUSE CVE-2016-7076

sudo before version 1.8.18p1 is vulnerable to a bypass in the sudo noexec restriction if application run via sudo executed wordexp C library function with a user supplied argument. A local user permitted to run such application via sudo with noexec restriction could possibly use this flaw to...

SUSE CVE-2020-16019

Inappropriate implementation in filesystem in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process to bypass noexec restrictions via a malicious file...

SUSE: Security Advisory (SUSE-SU-2016:2891-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DEBIAN-CVE-2020-16035

Insufficient data validation in cros-disks in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process to bypass noexec restrictions via a malicious file...

UBUNTU-CVE-2020-16019

Inappropriate implementation in filesystem in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process to bypass noexec restrictions via a malicious file...

UBUNTU-CVE-2020-16035

Insufficient data validation in cros-disks in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process to bypass noexec restrictions via a malicious file...

CVE-2020-16019

Inappropriate implementation in filesystem in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process to bypass noexec restrictions via a malicious file...

CVE-2020-16019: Undefined Security Weakness

Inappropriate implementation in filesystem in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process to bypass noexec restrictions via a malicious file...

PT-2020-5023

Name of the Vulnerable Software and Affected Versions Google Chrome on ChromeOS versions prior to 87.0.4280.66 Description The issue is related to an inappropriate implementation in the filesystem of Google Chrome on ChromeOS, which can be exploited by a remote attacker who has compromised the...

PT-2020-5046

Name of the Vulnerable Software and Affected Versions Google Chrome on ChromeOS versions prior to 87.0.4280.66 Description The issue is related to insufficient data validation in the cros-disks component of Google Chrome on ChromeOS. This allows a remote attacker who has compromised the browser...

USN-3968-3 sudo vulnerabilities

USN-3968-1 fixed several vulnerabilities in Sudo. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: Florian Weimer discovered that Sudo incorrectly handled the noexec restriction when used with certain applications. A local attacker could possibly use...

DEBIAN-CVE-2016-7076

sudo before version 1.8.18p1 is vulnerable to a bypass in the sudo noexec restriction if application run via sudo executed wordexp C library function with a user supplied argument. A local user permitted to run such application via sudo with noexec restriction could possibly use this flaw to...

CVE-2016-7076

sudo before version 1.8.18p1 is vulnerable to a bypass in the sudo noexec restriction if application run via sudo executed wordexp C library function with a user supplied argument. A local user permitted to run such application via sudo with noexec restriction could possibly use this flaw to...

UBUNTU-CVE-2016-7076

sudo before version 1.8.18p1 is vulnerable to a bypass in the sudo noexec restriction if application run via sudo executed wordexp C library function with a user supplied argument. A local user permitted to run such application via sudo with noexec restriction could possibly use this flaw to...