AZL-56075 CVE-2024-45339 affecting package vitess for versions less than 17.0.7-4

When logs are written to a widely-writable directory the default, an unprivileged attacker may predict a privileged process's log file path and pre-create a symbolic link to a sensitive file in its place. When that privileged process runs, it will follow the planted symlink and overwrite that...

AZL-56379 CVE-2024-45339 affecting package glog 0.3.5-16

When logs are written to a widely-writable directory the default, an unprivileged attacker may predict a privileged process's log file path and pre-create a symbolic link to a sensitive file in its place. When that privileged process runs, it will follow the planted symlink and overwrite that...

DEBIAN-CVE-2024-45339

When logs are written to a widely-writable directory the default, an unprivileged attacker may predict a privileged process's log file path and pre-create a symbolic link to a sensitive file in its place. When that privileged process runs, it will follow the planted symlink and overwrite that...

AZL-56078 CVE-2024-45339 affecting package sriov-network-device-plugin for versions less than 3.7.0-3

When logs are written to a widely-writable directory the default, an unprivileged attacker may predict a privileged process's log file path and pre-create a symbolic link to a sensitive file in its place. When that privileged process runs, it will follow the planted symlink and overwrite that...

AZL-56066 CVE-2024-45339 affecting package vitess for versions less than 19.0.4-4

When logs are written to a widely-writable directory the default, an unprivileged attacker may predict a privileged process's log file path and pre-create a symbolic link to a sensitive file in its place. When that privileged process runs, it will follow the planted symlink and overwrite that...

CVE-2024-45339

CVE-2024-45339 affects the Go glog package. The issue arises when logs are written to a widely-writable directory: an unprivileged attacker could predict a privileged process’s log path and pre-create a symlink to a sensitive file, causing the process to overwrite it. The fix is to have glog exit...

SUSE CVE-2024-54148

Gogs is an open source self-hosted Git service. A malicious user is able to commit and edit a crafted symlink file to a repository to gain SSH access to the server. The vulnerability is fixed in 0.13.1...

CVE-2024-52535

Dell SupportAssist for Home PCs versions 4.6.1 and prior and Dell SupportAssist for Business PCs versions 4.5.0 and prior, contain a symbolic link symlink attack vulnerability in the software remediation component. A low-privileged authenticated user could potentially exploit this vulnerability,...

CVE-2024-52535

Dell SupportAssist for Home PCs versions 4.6.1 and prior and Dell SupportAssist for Business PCs versions 4.5.0 and prior, contain a symbolic link symlink attack vulnerability in the software remediation component. A low-privileged authenticated user could potentially exploit this vulnerability,...

CVE-2024-52535

CVE-2024-52535 affects Dell SupportAssist for Home PCs (versions ≤ 4.6.1) and Dell SupportAssist for Business PCs (versions ≤ 4.5.0). The issue is a symbolic link (symlink) attack in the software remediation component that could be exploited by a low-privileged authenticated user to escalate priv...

Gogs 安全漏洞

Gogs Go Git Service is a self-service Git hosting service based on the Go language by the Gogs team, which supports creating and migrating public/private repositories, adding and deleting repository collaborators, and so on. A security vulnerability exists in Gogs versions prior to 0.13.1, which...

[SECURITY] [DLA 3987-1] renderdoc security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3987-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk December 08, 2024 https://wiki.debian.org/LTS -...

Debian dla-3987 : librenderdoc - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3987 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3987-1 [email protected]...

SUSE CVE-2024-54159

stalld through 1.19.7 allows local users to cause a denial of service file overwrite via a /tmp/rtthrottle symlink attack...

CVE-2024-54159

A flaw was found in stalld package. The affected versions of stalld allow local users to cause a denial of service file overwrite via a /tmp/rtthrottle symlink attack...

CVE-2024-54159

stalld through 1.19.7 allows local users to cause a denial of service file overwrite via a /tmp/rtthrottle symlink attack...

CVE-2024-54159

Summary of CVE-2024-54159 findings : The vulnerability affects the stalld daemon (scheduling-throttle helper) where, up to versions 1.19.7, local attackers can trigger a denial-of-service via a /tmp/rtthrottle symbolic link attack that can cause file overwrites. Documented impact is local, with l...

CVE-2024-54159

stalld through 1.19.7 allows local users to cause a denial of service file overwrite via a /tmp/rtthrottle symlink attack...

Stalld 安全漏洞

stalld is a Linux tool from rt-linux-tools open source. A security vulnerability exists in Stalld 1.19.7 and earlier versions, which stems from a denial of service vulnerability that allows local users to cause a denial of service via a /tmp/rtthrottle symbolic link attack...

Moderate: Red Hat Security Advisory: pcp security update

An update for pcp is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...