222 matches found
CVE-2024-34455
Buildroot before 0b2967e lacks the sticky bit for the /dev/shm directory. A fix was released in 2024.02.2...
CVE-2024-34455
CVE-2024-34455 affects Buildroot prior to version 0b2967e, due to missing sticky bit on /dev/shm. The issue is fixed in 2024.02.2; affected users should update to 2024.02.2 or later. Public sources (Red Hat, NVD, OSV, CVE lists) corroborate the description of the vulnerability and the fix. The CV...
RHEL 8 : device-mapper-multipath (RHSA-2024:1110)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1110 advisory. The device-mapper-multipath packages provide tools that use the device-mapper multipath kernel module to manage multipath devices. Security Fixes:...
EulerOS Virtualization 2.9.1 : multipath-tools (EulerOS-SA-2023-1643)
According to the versions of the multipath-tools packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - multipath-tools 0.7.7 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited in conjunction...
SUSE-SU-2023:1864-1 Security update for wayland
This update for wayland fixes the following issues: - CVE-2021-3782: Fixed a reference-count overflow in libwayland-server SHM handling. bsc1190486...
SUSE CVE-2007-3919
1 xenbaked and 2 xenmon.py in Xen 3.1 and earlier allow local users to truncate arbitrary files via a symlink attack on /tmp/xenq-shm...
SUSE CVE-2008-1379
Integer overflow in the fbShmPutImage function in the MIT-SHM extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attackers to read arbitrary process memory via crafted values for a Pixmap width and height...
SUSE CVE-2009-0859
The shmgetstat function in ipc/shm.c in the shm subsystem in the Linux kernel before 2.6.28.5, when CONFIGSHMEM is disabled, misinterprets the data type of an inode, which allows local users to cause a denial of service system hang via an SHMINFO shmctl call, as demonstrated by running the ipcs...
SUSE CVE-2013-2905
The SharedMemory::Create function in memory/sharedmemoryposix.cc in Google Chrome before 29.0.1547.57 uses weak permissions under /dev/shm/, which allows attackers to obtain sensitive information via direct access to a POSIX shared-memory file...
SUSE CVE-2022-41973
multipath-tools 0.7.7 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited in conjunction with CVE-2022-41974. Local users able to access /dev/shm can change symlinks in multipathd due to incorrect symlink handling, which could lead to controlled file writes outside o...
EulerOS 2.0 SP8 : device-mapper-multipath (EulerOS-SA-2023-1310)
According to the versions of the device-mapper-multipath packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - multipath-tools 0.7.7 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited in conjunction with...
multipath-tools 0.7.7 through 0.9.x before 0.9.2 allows local users to obtain root access as exploited in conjunction with CVE-2022-41974. Local users able to access /dev/shm can change symlinks in multipathd due to incorrect symlink handling which could lead to controlled file writes outside of the /dev/shm directory. This could be used indirectly for local privilege escalation to root.
...
SUSE SLED15: kpartx / libdmmp-devel / libdmmp0_2_0 / libmpath0 / multipath-tools / etc (SUSE-SU-2022:3711-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3711-1 advisory. - CVE-2022-41973: Fixed a symlink attack in multipathd. bsc1202739 - CVE-2022-41974: Fixed an...
DEBIAN-CVE-2021-3782
An internal reference count is held on the buffer pool, incremented every time a new buffer is created from the pool. The reference count is maintained as an int; on LP64 systems this can cause the reference count to overflow if the client creates a large number of wlshm buffer objects, or if it...
PT-2022-34074 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.137 Description: The issue is related to an overflow check in the register shm helper function. It was introduced in version v4.16 and fixed in version v5.10.137. The actual impact and attack plausibility...
PT-2022-34250 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.211 Description: The issue is related to an overflow check in the register shm helper function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...
PT-2022-33800 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.62 Description: The issue concerns an overflow check in the register shm helper function. It was introduced in version v4.16 and is fixed in Linux Kernel version v5.15.62. The actual impact and attack...
PT-2022-33427 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.3 Description: The issue is related to an overflow check in the register shm helper function. It was introduced in version v4.16 and fixed in version v5.19.3. The actual impact and attack plausibility have...
PT-2022-7214 · Unknown +8 · Multipath-Tools +8
Name of the Vulnerable Software and Affected Versions: multipath-tools versions 0.7.7 through 0.9.x before 0.9.2 Description: The issue is related to incorrect handling of symlinks in multipathd, allowing local users who can access /dev/shm to change symlinks. This could lead to controlled file...
Use After Free
Overview Affected versions of this package are vulnerable to Use After Free when the client creates a large number of wlshm buffer objects, or if it can coerce the server to create a large number of external references to the buffer storage. Remediation Upgrade wayland to version 1.21.0 or higher...