Linux Distros Unpatched Vulnerability : CVE-2021-38172

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - perM 0.4.0 has a Buffer Overflow related to strncpy. Debian initially fixed this in 0.4.0-7. CVE-2021-38172 Note that Nessus relies on the presence of the packa...

CVE-2021-38172

perM 0.4.0 has a Buffer Overflow related to strncpy. Debian initially fixed this in 0.4.0-7...

SUSE CVE-2022-49366

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix reference count leak in smbcheckpermdacl The issue happens in a specific path in smbcheckpermdacl. When "id" and "uid" have the same value, the function simply jumps out of the loop without decrementing the reference...

DEBIAN-CVE-2022-49366

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix reference count leak in smbcheckpermdacl The issue happens in a specific path in smbcheckpermdacl. When "id" and "uid" have the same value, the function simply jumps out of the loop without decrementing the reference...

PT-2025-8300

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue has been identified in the Linux kernel, specifically in the ksmbd module. The problem occurs when the id and uid have the same value in the smb check perm dacl...

CVE-2024-50010 exec: don't WARN for racy path_noexec check

In the Linux kernel, the following vulnerability has been resolved: exec: don't WARN for racy pathnoexec check Both imode and noexec checks wrapped in WARNON stem from an artifact of the previous implementation. They used to legitimately check for the condition, but that got moved up in two...

CVE-2024-50010

CVE-2024-50010 affects the Linux kernel’s exec path checks. The issue is a race in the path_noexec (and i_mode) checks that led to spurious WARN_ON warnings when noexec is toggled, rather than a real permission failure. The fix removes the redundant path_noexec WARN and updates commentary; no exp...

CVE-2024-36964

In the Linux kernel, the following vulnerability has been resolved: fs/9p: only translate RWX permissions for plain 9P2000 Garbage in plain 9P2000's perm bits is allowed through, which causes it to be able to set among others the suid bit. This was presumably not the intent since the unix extende...

PT-2022-31239

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.15 Description A reference count leak was discovered in the smb check perm dacl function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior ...

PT-2022-30881

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.4 Description A reference count leak was discovered in the smb check perm dacl function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior t...

PT-2022-31555

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.47 Description A reference count leak was discovered in the smb check perm dacl function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior ...

PT-2022-8597

Name of the Vulnerable Software and Affected Versions piwigo version 2.9.5 Description The issue is related to a SQL Injection vulnerability in the admin/user perm.php file. This vulnerability can be exploited via the cat false parameter to the "admin.php?page=group perm" endpoint. Recommendation...

PT-2022-8596

Name of the Vulnerable Software and Affected Versions piwigo version 2.9.5 Description The issue is related to a SQL Injection vulnerability in the admin/user perm.php file. It can be exploited via the cat false parameter to the "admin.php?page=user perm" endpoint. Recommendations For piwigo...

CVE-2021-38172

perM 0.4.0 has a Buffer Overflow related to strncpy. Debian initially fixed this in 0.4.0-7...

CVE-2021-38172

perM 0.4.0 has a Buffer Overflow related to strncpy. Debian initially fixed this in 0.4.0-7...

CVE-2021-38172

perM 0.4.0 has a Buffer Overflow related to strncpy. Debian initially fixed this in 0.4.0-7...

Buffer overflow

perM 0.4.0 has a Buffer Overflow related to strncpy. Debian initially fixed this in 0.4.0-7...

UBUNTU-CVE-2021-38172

perM 0.4.0 has a Buffer Overflow related to strncpy. Debian initially fixed this in 0.4.0-7...

CVE-2021-38172

perM 0.4.0 has a Buffer Overflow related to strncpy. Debian initially fixed this in 0.4.0-7...

CVE-2021-38172

CVE-2021-38172 affects perM 0.4.0 and is a buffer overflow in strncpy. Debian initially fixed this in 0.4.0-7. The available connected data does not specify exploit details or in-the-wild activity; remediation is to use a fixed package version (0.4.0-7 or later) as indicated by Debian."