Lucene search
K

4723 matches found

NVD
NVD
added 2023/04/13 11:15 p.m.64 views

CVE-2023-1326

A privilege escalation attack was found in apport-cli 2.26.0 and earlier which is similar to CVE-2023-26604. If a system is specially configured to allow unprivileged users to run sudo apport-cli, less is configured as the pager, and the terminal size can be set: a local attacker can escalate...

7.8CVSS7.8AI score0.00874EPSS
Exploits0References2
Prion
Prion
added 2023/04/13 11:15 p.m.38 views

Privilege escalation

A privilege escalation attack was found in apport-cli 2.26.0 and earlier which is similar to CVE-2023-26604. If a system is specially configured to allow unprivileged users to run sudo apport-cli, less is configured as the pager, and the terminal size can be set: a local attacker can escalate...

4.3CVSS7.7AI score0.01051EPSS
Exploits4References2Affected Software2
Cvelist
Cvelist
added 2023/04/13 10:35 p.m.69 views

CVE-2023-1326 local privilege escalation in apport-cli

A privilege escalation attack was found in apport-cli 2.26.0 and earlier which is similar to CVE-2023-26604. If a system is specially configured to allow unprivileged users to run sudo apport-cli, less is configured as the pager, and the terminal size can be set: a local attacker can escalate...

7.7CVSS8.1AI score0.00874EPSS
Exploits0References2
Ubuntu
Ubuntu
added 2023/04/13 10:18 p.m.72 views

USN-6018-1: Apport vulnerability

Chen Lu, Lei Wang, and YiQi Sun discovered a privilege escalation vulnerability in apport-cli when viewing crash reports and unprivileged users are allowed to run sudo less. A local attacker on a specially configured system could use this to escalate their privilege...

7.8CVSS7.3AI score0.00874EPSS
Exploits0References1
OSV
OSV
added 2023/04/13 10:18 p.m.13 views

USN-6018-1 apport vulnerability

Chen Lu, Lei Wang, and YiQi Sun discovered a privilege escalation vulnerability in apport-cli when viewing crash reports and unprivileged users are allowed to run sudo less. A local attacker on a specially configured system could use this to escalate their privilege...

7.8CVSS7.1AI score0.00874EPSS
Exploits0References3
OSV
OSV
added 2023/04/13 4:15 p.m.20 views

CVE-2023-30630

Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible. NOTE: Some third parties have indicated the fix in 3.5 does not adequately address the vulnerability. The argument is that the proposed...

7.1CVSS7.2AI score
Exploits0References4
AlpineLinux
AlpineLinux
added 2023/04/13 4:15 p.m.26 views

CVE-2023-30630

Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible...

7.4AI score0.00523EPSS
Exploits1
NVD
NVD
added 2023/04/13 4:15 p.m.31 views

CVE-2023-30630

Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible. NOTE: Some third parties have indicated the fix in 3.5 does not adequately address the vulnerability. The argument is that the proposed...

7.1CVSS6.9AI score0.00523EPSS
Exploits1References4
OSV
OSV
added 2023/04/13 4:15 p.m.1 views

DEBIAN-CVE-2023-30630

Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible. NOTE: Some third parties have indicated the fix in 3.5 does not adequately address the vulnerability. The argument is that the proposed...

7.1CVSS6.2AI score0.00523EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2023/04/13 4:15 p.m.377 views

CVE-2023-30630

Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible. NOTE: Some third parties have indicated the fix in 3.5 does not adequately address the vulnerability. The argument is that the proposed...

7.1CVSS6.9AI score0.00523EPSS
Exploits1References3
Prion
Prion
added 2023/04/13 4:15 p.m.21 views

Design/Logic Flaw

Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible...

3.2CVSS7AI score0.00523EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2023/04/13 4:15 p.m.0 views

UBUNTU-CVE-2023-30630

Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible. NOTE: Some third parties have indicated the fix in 3.5 does not adequately address the vulnerability. The argument is that the proposed...

7.1CVSS6.7AI score0.00523EPSS
Exploits1References4
UbuntuCve
UbuntuCve
added 2023/04/13 12:33 p.m.536 views

CVE-2023-1326

A privilege escalation attack was found in apport-cli 2.26.0 and earlier which is similar to CVE-2023-26604. If a system is specially configured to allow unprivileged users to run sudo apport-cli, less is configured as the pager, and the terminal size can be set: a local attacker can escalate...

7.8CVSS7AI score0.00874EPSS
Exploits0References4
OSV
OSV
added 2023/04/13 12:33 p.m.1 views

UBUNTU-CVE-2023-1326

A privilege escalation attack was found in apport-cli 2.26.0 and earlier which is similar to CVE-2023-26604. If a system is specially configured to allow unprivileged users to run sudo apport-cli, less is configured as the pager, and the terminal size can be set: a local attacker can escalate...

7.8CVSS6.6AI score0.01051EPSS
Exploits4References5
CVE
CVE
added 2023/04/13 12:0 a.m.166 views

CVE-2023-30630

Affected software: dmidecode before version 3.5. The vulnerability arises from -dump-bin being able to overwrite a local file, which could enable privilege escalation when run via sudo. The CVE-2023-30630 entry notes that fixes in 3.5 may not fully address all attack vectors, including potential ...

7.1CVSS7.3AI score0.00523EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2023/04/13 12:0 a.m.52 views

CVE-2023-30630

Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible. NOTE: Some third parties have indicated the fix in 3.5 does not adequately address the vulnerability. The argument is that the proposed...

7.2AI score0.00523EPSS
Exploits1References4
Debian CVE
Debian CVE
added 2023/04/13 12:0 a.m.364 views

CVE-2023-30630

Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible. NOTE: Some third parties have indicated the fix in 3.5 does not adequately address the vulnerability. The argument is that the proposed...

7.1CVSS6.1AI score0.00523EPSS
Exploits1
Vulnrichment
Vulnrichment
added 2023/04/13 12:0 a.m.4 views

CVE-2023-30630

Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible. NOTE: Some third parties have indicated the fix in 3.5 does not adequately address the vulnerability. The argument is that the proposed...

7.2AI score0.00523EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2023/04/13 12:0 a.m.6 views

PT-2023-16898 · Unknown +2 · Apport-Cli +2

Name of the Vulnerable Software and Affected Versions: apport-cli versions 2.26.0 and earlier Description: A privilege escalation attack was found, similar to a known issue, which can be exploited by a local attacker if the system is specially configured. This configuration includes allowing...

7.8CVSS6.1AI score0.01051EPSS
Exploits4References19
OpenVAS
OpenVAS
added 2023/04/13 12:0 a.m.25 views

Huawei EulerOS: Security Advisory for sudo (EulerOS-SA-2023-1611)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS8.2AI score0.55367EPSS
Exploits20References2
Rows per page
Query Builder