CVE-2014-3519

The CVE-2014-3519 details: OpenVZ modification for the Linux kernel 2.6.32, before 042stab090.5, with simfs, exposes open_by_handle_at in vzkernel to local container users with CAP_DAC_READ_SEARCH, bypassing container protections and enabling access to arbitrary files via file_handle-related vect...

CVE-2014-3519: Improper Access Control

The openbyhandleat function in vzkernel before 042stab090.5 in the OpenVZ modification for the Linux kernel 2.6.32, when using simfs, might allow local container users with CAPDACREADSEARCH capability to bypass an intended container protection mechanism and access arbitrary files on a filesystem...

GLSA-201701-30 : vzctl: Security bypass

The remote host is affected by the vulnerability described in GLSA-201701-30 vzctl: Security bypass It was discovered that vzctl determined the virtual environment VE layout based on the presence of root.hdd/DiskDescriptor.xml in the VE private directory. This allows local simfs container CT root...

vzctl: Security bypass

Background vzctl is a set of control tools for the OpenVZ server virtualization solution. Description It was discovered that vzctl determined the virtual environment VE layout based on the presence of root.hdd/DiskDescriptor.xml in the VE private directory. This allows local simfs container CT ro...

Design/Logic Flaw

vzctl before 4.9.4 determines the virtual environment VE layout based on the presence of root.hdd/DiskDescriptor.xml in the VE private directory, which allows local simfs container CT root users to change the root password for arbitrary ploop containers, as demonstrated by a symlink attack on the...

CVE-2015-6927

vzctl before 4.9.4 determines the virtual environment VE layout based on the presence of root.hdd/DiskDescriptor.xml in the VE private directory, which allows local simfs container CT root users to change the root password for arbitrary ploop containers, as demonstrated by a symlink attack on the...

CVE-2015-6927

Removed by vendor...

CVE-2015-6927: Improper Link Resolution Before File Access

vzctl before 4.9.4 determines the virtual environment VE layout based on the presence of root.hdd/DiskDescriptor.xml in the VE private directory, which allows local simfs container CT root users to change the root password for arbitrary ploop containers, as demonstrated by a symlink attack on the...

Debian new version released: fix PHP and VirtualBox vulnerability-vulnerability warning-the black bar safety net

! The Debian maintainer has released a new version of theoperating systemto resolve the presence of multiple vulnerabilities, including a few PHP vulnerabilities, and Oracle’s VirtualBox（hereinafter referred to as the VBox application of a vulnerability. Fix PHP multiple vulnerabilities The new...

PT-2015-7408

Name of the Vulnerable Software and Affected Versions vzctl versions prior to 4.9.4 Description The issue allows local simfs container root users to change the root password for arbitrary ploop containers. This can be achieved through a symlink attack on the ploop container root.hdd file, which...

DSA-3357-1 vzctl - security update

Bulletin has no description...

PT-2018-4212

Name of the Vulnerable Software and Affected Versions vzkernel versions prior to 042stab090.5 Description The issue is related to the open by handle at function in the vzkernel when using simfs. It might allow local container users with CAP DAC READ SEARCH capability to bypass an intended contain...