Lucene search
K

23 matches found

Tenable Nessus
Tenable Nessus
added 2026/05/14 12:0 a.m.3 views

Amazon Linux 2 : opencryptoki, --advisory ALAS2-2026-3283 (ALAS-2026-3283)

The version of opencryptoki installed on the remote host is prior to 3.7.0-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3283 advisory. openCryptoki is a PKCS11 library and provides tooling for Linux and AIX. Versions 2.3.2 and above are vulnerable to...

6.8CVSS6AI score0.00007EPSS
Exploits0References4
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.2 views

Astra Linux - уязвимость в mtr

mtr through 0.95, in certain privileged contexts, mishandles execution of a program specified by the MTRPACKET environment variable. NOTE: mtr on macOS may often have Sudo rules, as an indirect consequence of Homebrew not installing setuid binaries...

7.8CVSS5.7AI score0.00054EPSS
Exploits0References2
OSV
OSV
added 2026/04/03 10:27 a.m.2 views

CLSA-2026-1775212043 opencryptoki: Fix of CVE-2026-23893

CVE-2026-23893: fix symlink-following vulnerabilities in privileged contexts...

6.8CVSS5.8AI score0.00007EPSS
Exploits0References1
OSV
OSV
added 2026/03/31 10:18 a.m.2 views

CLSA-2026-1774952276 opencryptoki: Fix of CVE-2026-23893

CVE-2026-23893: fix symlink-following vulnerabilities in privileged contexts...

6.8CVSS5.8AI score0.00007EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/02/03 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2026-23893

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - openCryptoki is a PKCS11 library and provides tooling for Linux and AIX. Versions 2.3.2 and above are vulnerable to symlink-following when running in privileged...

6.8CVSS6AI score0.00007EPSS
Exploits0References4
OSV
OSV
added 2026/01/22 1:15 a.m.0 views

UBUNTU-CVE-2026-23893

openCryptoki is a PKCS11 library and provides tooling for Linux and AIX. Versions 2.3.2 and above are vulnerable to symlink-following when running in privileged contexts. A token-group user can redirect file operations to arbitrary filesystem targets by planting symlinks in group-writable token...

6.8CVSS6AI score0.00007EPSS
Exploits0References4
Debian CVE
Debian CVE
added 2026/01/22 12:1 a.m.4 views

CVE-2026-23893

openCryptoki is a PKCS11 library and provides tooling for Linux and AIX. Versions 2.3.2 and above are vulnerable to symlink-following when running in privileged contexts. A token-group user can redirect file operations to arbitrary filesystem targets by planting symlinks in group-writable token...

6.8CVSS5.8AI score0.00007EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2026/01/22 12:0 a.m.2 views

Azure Linux 3.0 Security Update: mtr (CVE-2025-49809)

The version of mtr installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-49809 advisory. - mtr through 0.95, in certain privileged contexts, mishandles execution of a program specified by the MTRPACKET...

7.8CVSS5.8AI score0.00054EPSS
Exploits0References2
Amazon
Amazon
added 2025/08/08 12:0 a.m.3 views

Important: mtr

Issue Overview: mtr through 0.95, in certain privileged contexts, mishandles execution of a program specified by the MTRPACKET environment variable. CVE-2025-49809 Affected Packages: mtr Issue Correction: Run dnf update mtr --releasever 2023.8.20250808 or dnf update --advisory ALAS2023-2025-1102...

7.8CVSS6.9AI score0.00054EPSS
Exploits0
Amazon
Amazon
added 2025/07/30 12:0 a.m.3 views

Important: mtr

Issue Overview: mtr through 0.95, in certain privileged contexts, mishandles execution of a program specified by the MTRPACKET environment variable. CVE-2025-49809 Affected Packages: mtr Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the...

7.8CVSS7AI score0.00054EPSS
Exploits0
Microsoft CVE
Microsoft CVE
added 2025/07/17 7:0 a.m.1 views

mtr through 0.95, in certain privileged contexts, mishandles execution of a program specified by the MTR_PACKET environment variable. NOTE: mtr on macOS may often have Sudo rules, as an indirect consequence of Homebrew not installing setuid binaries.

...

7.8CVSS7AI score0.00054EPSS
Exploits0
SUSE CVE
SUSE CVE
added 2025/07/04 11:21 p.m.1 views

SUSE CVE-2025-49809

mtr through 0.95, in certain privileged contexts, mishandles execution of a program specified by the MTRPACKET environment variable. NOTE: mtr on macOS may often have Sudo rules, as an indirect consequence of Homebrew not installing setuid binaries...

7.8CVSS7AI score0.00054EPSS
Exploits0References3
OSV
OSV
added 2025/07/04 1:15 p.m.1 views

AZL-65232 CVE-2025-49809 affecting package mtr for versions less than 0.95-3

mtr through 0.95, in certain privileged contexts, mishandles execution of a program specified by the MTRPACKET environment variable. NOTE: mtr on macOS may often have Sudo rules, as an indirect consequence of Homebrew not installing setuid binaries...

7.8CVSS6AI score0.00054EPSS
Exploits0References1
OSV
OSV
added 2025/07/04 1:15 p.m.1 views

DEBIAN-CVE-2025-49809

mtr through 0.95, in certain privileged contexts, mishandles execution of a program specified by the MTRPACKET environment variable. NOTE: mtr on macOS may often have Sudo rules, as an indirect consequence of Homebrew not installing setuid binaries...

7.8CVSS7.7AI score0.00054EPSS
Exploits0References1
OSV
OSV
added 2025/07/04 1:15 p.m.1 views

AZL-65136 CVE-2025-49809 affecting package mtr 0.95-1

mtr through 0.95, in certain privileged contexts, mishandles execution of a program specified by the MTRPACKET environment variable. NOTE: mtr on macOS may often have Sudo rules, as an indirect consequence of Homebrew not installing setuid binaries...

7.8CVSS6AI score0.00054EPSS
Exploits0References1
NVD
NVD
added 2025/07/04 1:15 p.m.1 views

CVE-2025-49809

mtr through 0.95, in certain privileged contexts, mishandles execution of a program specified by the MTRPACKET environment variable. NOTE: mtr on macOS may often have Sudo rules, as an indirect consequence of Homebrew not installing setuid binaries...

7.8CVSS0.00054EPSS
Exploits0References3
OSV
OSV
added 2025/07/04 1:15 p.m.0 views

UBUNTU-CVE-2025-49809

mtr through 0.95, in certain privileged contexts, mishandles execution of a program specified by the MTRPACKET environment variable. NOTE: mtr on macOS may often have Sudo rules, as an indirect consequence of Homebrew not installing setuid binaries...

7.8CVSS6AI score0.00054EPSS
Exploits0References3
CVE
CVE
added 2025/07/04 12:0 a.m.26 views

CVE-2025-49809

CVE-2025-49809 affects mtr up to version 0.95. In certain privileged contexts, execution of a program specified by the MTR_PACKET environment variable is mishandled, enabling potential local impact. Public details consistently mention macOS sudo-related considerations due to Homebrew not installi...

7.8CVSS6.3AI score0.00054EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/07/04 12:0 a.m.0 views

PT-2025-27948 · Mtr +2 · Mtr +2

Name of the Vulnerable Software and Affected Versions: mtr versions 0.95 and earlier Description: The issue concerns the mishandling of execution of a program specified by the MTR PACKET environment variable in certain privileged contexts. It is noted that mtr on macOS may often have Sudo rules d...

7.8CVSS5.8AI score0.00054EPSS
Exploits0References16
Debian CVE
Debian CVE
added 2025/07/04 12:0 a.m.4 views

CVE-2025-49809

mtr through 0.95, in certain privileged contexts, mishandles execution of a program specified by the MTRPACKET environment variable. NOTE: mtr on macOS may often have Sudo rules, as an indirect consequence of Homebrew not installing setuid binaries...

7.8CVSS7.7AI score0.00054EPSS
Exploits0
Rows per page
Query Builder