18 matches found
CVE-2026-101305
renameat2 did not enforce FDRESOLVEBENEATH on its directory arguments. A jailed process could rename a directory relative to a restricted descriptor, then escape the jail root via fchdir2. This requires the directory to reside on a filesystem that is also reachable from the jail's root. A process...
CVE-2026-101305 Multiple jail filesystem root escapes
renameat2 did not enforce FDRESOLVEBENEATH on its directory arguments. A jailed process could rename a directory relative to a restricted descriptor, then escape the jail root via fchdir2. This requires the directory to reside on a filesystem that is also reachable from the jail's root. A process...
EUVD-2026-101866
renameat2 did not enforce FDRESOLVEBENEATH on its directory arguments. A jailed process could rename a directory relative to a restricted descriptor, then escape the jail root via fchdir2. This requires the directory to reside on a filesystem that is also reachable from the jail's root. A process...
CVE-2026-101305
The FreeBSD operating system is affected by a vulnerability where the renameat(2) system call fails to enforce the FD_RESOLVE_BENEATH flag on directory arguments. This flaw allows a process within a jail to escape the jail's filesystem root restriction by renaming a directory relative to a restri...
CVE-2026-101305: Improper Check for Dropped Privileges
renameat2 did not enforce FDRESOLVEBENEATH on its directory arguments. A jailed process could rename a directory relative to a restricted descriptor, then escape the jail root via fchdir2. This requires the directory to reside on a filesystem that is also reachable from the jail's root. A process...
FreeBSD-SA-26:66.jail
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:66.jail Security Advisory The FreeBSD Project Topic: Multiple jail filesystem root escapes Category: core Module: jail Announced: 2026-09-29 Credits: Jan...
FreeBSD -- Multiple jail filesystem root escapes
Problem Description: Three flaws allow a jailed process to bypass FDRESOLVEBENEATH: When fdescfs4 was mounted in a jail with the "nodup" option, opening /dev/fd/N returned a descriptor that did not inherit FDRESOLVEBENEATH or the Capsicum capability rights of descriptor N. CVE-2026-101304 renamea...
CVE-2026-45698 Netatalk has Integer Underflow → Stack Buffer Overflow in deletedir()
Netatalk is a Free and Open Source file server suite for Unix-like operating systems. In versions 3.1.19 through 4.4.2, a stack-based buffer overflow exists in the deletedir function of Netatalk's afpd daemon due to an integer underflow in the calculation of the remaining buffer size used for pat...
EUVD-2018-8205
Malware in sbrugna...
Configure Audit Rules for File Deletion
Generally, it is highly risky to delete files in the OS. Misoperations by administrators or attacks may cause severe system faults. You are advised to audit and monitor system calls, such as rename, unlink, unlinkat, and renameat, and record deletion operation logs. Deleting system or service fil...
Google gVisor File Renaming Vulnerability
gVisor is Google's open source new sandbox container runtime environment . A file renaming vulnerability exists in Google gVisor. The vulnerability stems from Google gVisor's seccomp sandbox allowing access to the renameat system call. An attacker could exploit this vulnerability to rename files ...
CVE-2018-16359
Google gVisor before 2018-08-23, within the seccomp sandbox, permits access to the renameat system call, which allows attackers to rename files on the host OS...
CVE-2018-16359
Google gVisor before 2018-08-23, within the seccomp sandbox, permits access to the renameat system call, which allows attackers to rename files on the host OS...
CVE-2018-16359
Google gVisor before 2018-08-23, within the seccomp sandbox, permits access to the renameat system call, which allows attackers to rename files on the host OS...
CVE-2018-16359
Google gVisor before 2018-08-23, within the seccomp sandbox, permits access to the renameat system call, which allows attackers to rename files on the host OS...
CVE-2018-16359: Undefined Security Weakness
Google gVisor before 2018-08-23, within the seccomp sandbox, permits access to the renameat system call, which allows attackers to rename files on the host OS...
PT-2018-13515
Name of the Vulnerable Software and Affected Versions Google gVisor versions prior to 2018-08-23 Description The issue allows attackers to rename files on the host OS by permitting access to the renameat system call within the seccomp sandbox. Recommendations For Google gVisor versions prior to...
gVisor Sentry Invalid Access Vulnerability
gVisor Sentry permits access to the renameat syscall. As the sentry is not chrooted, it permits renaming files in the host system. gVisor sentry can call renameat The seccomp sandbox of the gVisor sentry permits access to the renameat syscall:...