Security Bulletin: Vulnerabilities in Spring, Tomcat, Jackson, sudo, and Linux kernel can affect IBM Spectrum Protect Plus

Summary IBM Spectrum Protect Plus can be affected by vulnerabilities in Spring, Tomcat, Jackson, sudo, and Linux kernel. Vulnerabilities include obtaining sensitive information, gaining elevated privileges, executing arbitrary commands, denial of service, and bypassing security restrictions, as...

Progress Flowmon Local sudo privilege escalation

This module abuses a feature of the sudo command on Progress Flowmon. Certain binary files are allowed to automatically elevate with the sudo command. This is based off of the file name. This includes executing a PHP command with a specific file name. If the file is overwritten with PHP code it c...

Kemp LoadMaster Local sudo privilege escalation

This module abuses a feature of the sudo command on Progress Kemp LoadMaster. Certain binary files are allowed to automatically elevate with the sudo command. This is based off of the file name. Some files have this permission are not write-protected from the default 'bal' user. As such, if the...

SUSE SLES15 Security Update : sudo (SUSE-SU-2024:0889-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0889-1 advisory. - CVE-2023-42465: Fixed issues introduced by first patches bsc1221151, bsc1221134. Tenable has extracted the preceding description block...

SUSE SLES12 Security Update : sudo (SUSE-SU-2024:0890-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0890-1 advisory. - CVE-2023-42465: Fixed issues introduced by first patches bsc1221151, bsc1221134. Tenable has extracted the preceding description block...

SUSE SLES15 Security Update : sudo (SUSE-SU-2024:0877-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0877-1 advisory. - CVE-2023-42465: Fixed issues introduced by first patches bsc1221151, bsc1221134. Tenable has extracted the preceding description block...

SUSE-SU-2024:0890-1 Security update for sudo

This update for sudo fixes the following issues: - CVE-2023-42465: Fixed issues introduced by first patches bsc1221151, bsc1221134...

SUSE-SU-2024:0889-1 Security update for sudo

This update for sudo fixes the following issues: - CVE-2023-42465: Fixed issues introduced by first patches bsc1221151, bsc1221134...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : sudo (SUSE-SU-2024:0876-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0876-1 advisory. - CVE-2023-42465: Fixed issues introduced by first patches bsc1221151, bsc1221134. Tenable has extracted...

SUSE-SU-2024:0877-1 Security update for sudo

This update for sudo fixes the following issues: - CVE-2023-42465: Fixed issues introduced by first patches bsc1221151, bsc1221134...

SUSE-SU-2024:0876-2 Security update for sudo

This update for sudo fixes the following issues: - CVE-2023-42465: Fixed issues introduced by first patches bsc1221151, bsc1221134...

SUSE-SU-2024:0876-1 Security update for sudo

This update for sudo fixes the following issues: - CVE-2023-42465: Fixed issues introduced by first patches bsc1221151, bsc1221134...

ROS-2-438

2.438 Vulnerability in sudo CVE-2021-3156 1. Vulnerability Description: The vulnerability allows root access without authentication and without having the necessary credentials. The issue can be exploited by any user, regardless of their presence in system groups or the presence of an entry in th...

SUSE SLES15 Security Update : sudo (SUSE-SU-2024:0834-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0834-1 advisory. - CVE-2023-42465: Try to make sudo less vulnerable to ROWHAMMER attacks bsc1219026. Fixed issues introduced by first patches for...

Huawei EulerOS: Security Advisory for sudo (EulerOS-SA-2024-1348)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for sudo (EulerOS-SA-2024-1326)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for sudo (EulerOS-SA-2024-1251)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP8 : systemd (EulerOS-SA-2024-1303)

According to the versions of the systemd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which th...

EulerOS 2.0 SP10 : sudo (EulerOS-SA-2024-1348)

According to the versions of the sudo package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Sudo before 1.9.15 might allow row hammer attacks for authentication bypass or privilege escalation because application logic sometimes is based on...

Huawei EulerOS: Security Advisory for sudo (EulerOS-SA-2024-1229)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...