CVE-2022-46334

Proofpoint Enterprise Protection PPS/PoD contains a vulnerability which allows the pps user to escalate to root privileges due to unnecessary permissions. This affects all versions 8.19.0 and below...

Proofpoint Enterprise Protection 安全漏洞

Proofpoint Enterprise Protection is an application from Proofpoint USA. It provides the ability to protect e-mail. A security vulnerability exists in Proofpoint Enterprise Protection PPS/PoD version 8.19.0 and earlier versions. An attacker can exploit the vulnerability to escalate to root...

AIX is affected by a root privilege escalation vulnerability

IBM SECURITY ADVISORY First Issued: Wed Dec 14 08:27:58 CST 2022 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/rmmlcacheadvisory.asc https://aix.software.ibm.com/aix/efixes/security/rmmlcacheadvisory.asc...

[SECURITY] [DSA 5270-1] ntfs-3g security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5270-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 04, 2022 https://www.debian.org/security/faq -...

Red Hat Ceph 安全漏洞

Red Hat Ceph is a Linux petabyte-level distributed file system from Red Hat. The main goal of the system is to be designed as a distributed file system without a single point of failure, based on POSIX Portable Operating System Interface, enabling fault-tolerant and seamless replication of data. ...

CVE-2022-3421

CVE-2022-3421 (Google Drive for Desktop on macOS) is a privilege-escalation vulnerability affecting versions prior to 64.0. An attacker can pre-create the directory /Applications/Google Drive.app/Contents/MacOS, which should be root-owned. On first install, the installer places a binary in that d...

CVE-2022-41578

The MPTCP module has an out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause root privilege escalation attacks implemented by modifying program information...

Design/Logic Flaw

The MPTCP module has an out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause root privilege escalation attacks implemented by modifying program information...

CVE-2022-42717

An issue was discovered in Hashicorp Packer before 2.3.1. The recommended sudoers configuration for Vagrant on Linux is insecure. If the host has been configured according to this documentation, non-privileged users on the host can leverage a wildcard in the sudoers configuration to execute...

Design/Logic Flaw

Contec FXA3200 version 1.13.00 and under suffers from Insecure Permissions in the Wireless LAN Manager interface which allows malicious actors to execute Linux commands with root privilege via a hidden web page /usr/www/ja/mntcmd.cgi...

Ubuntu 18.04 LTS : Linux kernel (Raspberry Pi) vulnerabilities (USN-5630-1)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5630-1 advisory. It was discovered that the framebuffer driver on the Linux kernel did not verify size limits when changing font or screen size, leading to an out-of-...

CVE-2017-20148

In the ebuild package through logcheck-1.3.23.ebuild for Logcheck on Gentoo, it is possible to achieve root privilege escalation from the logcheck user because of insecure recursive chown calls...

CVE-2017-20148

In the ebuild package through logcheck-1.3.23.ebuild for Logcheck on Gentoo, it is possible to achieve root privilege escalation from the logcheck user because of insecure recursive chown calls...

PT-2022-8014 · Logcheck · Logcheck

Name of the Vulnerable Software and Affected Versions: Logcheck versions through 1.3.23 Description: The issue allows for root privilege escalation from the logcheck user due to insecure recursive chown calls in the ebuild package for Logcheck on Gentoo. Recommendations: For versions through...

Gentoo 安全漏洞

Gentoo is an open source Linux system from the Gentoo Foundation. A security vulnerability exists in Gentoo logcheck-1.3.23.ebuild and earlier versions, which originates from an attacker being able to perform a root privilege elevation via "chown -R" in pkgpostinst...

CentOS: Security Advisory for open-vm-tools (CESA-2022:6381)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Scientific Linux Security Update : open-vm-tools on SL7.x x86_64 (2022:6381)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2022:6381-1 advisory. - open-vm-tools: local root privilege escalation in the virtual machine CVE-2022-31676 Note that Nessus has not tested for this issue but has instead reli...

Important: Red Hat Security Advisory: open-vm-tools security update

An update for open-vm-tools is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

RHEL 7 : open-vm-tools (RHSA-2022:6381)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:6381 advisory. The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization...

RHEL 8 : open-vm-tools (RHSA-2022:6356)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:6356 advisory. The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization...