GHSA-VFJC-2QCW-J95J Docker Moby /proc/scsi Path Exposure Allows Host Data Loss (SCSI MICDROP)

The DefaultLinuxSpec function in oci/defaults.go in Docker Moby through 17.03.2-ce does not block /proc/scsi pathnames, which allows attackers to trigger data loss when certain older Linux kernels are used by leveraging Docker container access to write a "scsi remove-single-device" line to...

GSD-2022-1001632 ALSA: pcm: Fix races among concurrent prealloc proc writes

ALSA: pcm: Fix races among concurrent prealloc proc writes This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.18 by commit...

CVE-2011-4917

In the Linux kernel through 3.1 there is an information disclosure issue via /proc/stat...

UBUNTU-CVE-2011-4917

In the Linux kernel through 3.1 there is an information disclosure issue via /proc/stat...

Information disclosure

In the Linux kernel through 3.1 there is an information disclosure issue via /proc/stat...

CVE-2011-4917

In the Linux kernel through 3.1 there is an information disclosure issue via /proc/stat...

CVE-2011-4917

In the Linux kernel through 3.1 there is an information disclosure issue via /proc/stat...

CVE-2011-4917

CVE-2011-4917 : Information disclosure in the Linux kernel up to 3.1 via /proc/stat. Local access required; low attack complexity with LOW privileges and partial confidentiality impact (CVSS v3.1 base score 5.5). Root cause: kernel information leakage through /proc/stat. Affected product: Linux k...

Linux kernel 安全漏洞

The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. The Linux kernel has a security vulnerability that can be exploited by an attacker via /proc/stat...

COMPIE CMS Leado Local File Include Vulnerability

Exploit Title: COMPIE CMS Leado Local File Include Google Dork: /index.php?pathAjax= Date: 3/30/2022 Exploit Author: iranhack Security Team Vendor Homepage: iranhack.com Software Link: http://www.compie.co.il/ Version: V.1.0 Tested on: KaliLinux,windows 10 Local File Include...

GSD-2022-1000526 fs/proc: task_mmu.c: don't read mapcount for migration entry

fs/proc: taskmmu.c: don't read mapcount for migration entry This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.10 by commit...

Updated util-linux packages fix security vulnerability

An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic...

GHSA-FGV8-VJ5C-2PPQ Incorrect Authorization in runc

runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction bypass because libcontainer/rootfslinux.go incorrectly checks mount targets, and thus a malicious Docker image can mount over a /proc directory...

GSD-2022-1000156 net: fix information leakage in /proc/net/ptype

net: fix information leakage in /proc/net/ptype This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.176 by commit...

GSD-2022-1000102 net: fix information leakage in /proc/net/ptype

net: fix information leakage in /proc/net/ptype This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.265 by commit...

GSD-2022-1000083 net: fix information leakage in /proc/net/ptype

net: fix information leakage in /proc/net/ptype This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.300 by commit...

GHSA-V4H8-794J-G8MM Arbitrary File Override in Docker Engine

Docker Engine before 1.6.1 allows local users to set arbitrary Linux Security Modules LSM and dockert policies via an image that allows volumes to override files in /proc...

Arbitrary File Override in Docker Engine

Docker Engine before 1.6.1 allows local users to set arbitrary Linux Security Modules LSM and dockert policies via an image that allows volumes to override files in /proc...

The vulnerability of the /proc/self/setgroups utility for managing shadow accounts relates to the improper assignment of permissions to files, allowing an attacker to increase their privileges.

The vulnerability of the /proc/self/setgroups utility for managing shadow accounts is related to the improper assignment of permissions to files. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: i40e: Fix queues reservation for XDP CVE-2021-47619 A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU. This flaw...