CVSSv4 Public Preview Announcement

On June 8, 2023, at the 35th Annual FIRST Conference in Montreal, the public preview of CVSSv4 was announced. The Common Vulnerability Scoring System CVSS is an open framework for communicating the characteristics and severity of software vulnerabilities. Since its initial release in 2004, CVSS h...

WDAC Supplemental Policy for Veeam Backup & Replication Components on Azure Local

Azure Local is the new name for Azure Stack HCI Azure Stack HCI is now considered part of Azure Local. Learn more about this rename in the Microsoft Documentation: Renaming Azure Stack HCI to Azure Local. Veeam Backup & Replication Version Requirement The solution documented in this article...

K16882: OpenLDAP vulnerability CVE-2013-4449

Security Advisory Description Description The rwm overlay in OpenLDAP 2.4.23, 2.4.36, and earlier does not properly count references, which allows remote attackers to cause a denial of service slapd crash by unbinding immediately after a search request, which triggers rwmconndestroy to free the...

containerd 安全漏洞

containerd is an industry-standard container runtime open-sourced by containerd. A security vulnerability exists in containerd version 1.6.x prior to 1.6.18 and version 1.5.x prior to 1.5.18. The vulnerability stems from a supplemental group that is not properly set up within a container, and an...

SUSE CVE-2014-8989

The Linux kernel through 3.17.4 does not properly restrict dropping of supplemental group memberships in certain namespace scenarios, which allows local users to bypass intended file permissions by leveraging a POSIX ACL containing an entry for the group category that is more restrictive than the...

[SECURITY] Fedora 37 Update: cacti-spine-1.2.23-1.fc37

Spine is a supplemental poller for Cacti that makes use of pthreads to achieve excellent performance...

[SECURITY] Fedora 36 Update: cacti-spine-1.2.23-1.fc36

Spine is a supplemental poller for Cacti that makes use of pthreads to achieve excellent performance...

Fedora: Security Advisory for cacti-spine (FEDORA-2023-788d505ddc)

The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 37 Update: cacti-spine-1.2.22-1.fc37

Spine is a supplemental poller for Cacti that makes use of pthreads to achieve excellent performance...

Fedora: Security Advisory for cacti-spine (FEDORA-2022-30049cdcdb)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 36 Update: cacti-spine-1.2.22-1.fc36

Spine is a supplemental poller for Cacti that makes use of pthreads to achieve excellent performance...

[SECURITY] Fedora 35 Update: cacti-spine-1.2.22-1.fc35

Spine is a supplemental poller for Cacti that makes use of pthreads to achieve excellent performance...

Apple Mac OS X Security Update (HT212177)-01

Apple Mac OS X is prone to multiple code execution vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Buildah 安全漏洞

Buildah is a tool that supports building OCI container images. A security vulnerability exists in the Buildah container engine, which stems from the fact that if an attacker has direct access to an affected container where a supplemental group is used to set access permissions and is able to...

Podman 安全漏洞

Podman is an engine for developing, managing and running OCI containers on Linux systems. A security vulnerability exists in the Podman container engine, which stems from the fact that if an attacker has direct access to an affected container where a supplemental group is used to set access right...

Moby 安全漏洞

Moby is an open source project of Moby Open Source. It aims to drive containerization of software and help the ecosystem mainstream container technology. A security vulnerability exists in versions prior to Moby 20.10.18 that stems from incorrect supplemental group settings. An attacker could use...

CRI-O 安全漏洞

CRI-O is a lightweight container runtime environment for the Kubernetes system. CRI-O suffers from a security vulnerability that stems from the fact that if an attacker has direct access to an affected container where a supplemental group is used to set access permissions and is able to execute...

NewStart CGSL MAIN 4.05 : openssh-latest Vulnerability (NS-SA-2022-0001)

The remote NewStart CGSL host, running version MAIN 4.05, has openssh-latest packages installed that are affected by a vulnerability: - sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not...

NewStart CGSL MAIN 6.02 : openssh Vulnerability (NS-SA-2022-0070)

The remote NewStart CGSL host, running version MAIN 6.02, has openssh packages installed that are affected by a vulnerability: - sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialize...

Fedora: Security Advisory for cacti-spine (FEDORA-2022-6a7e259e15)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...