101 matches found
Fedora 41 : udisks2 (2025-c3e7be3d93)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-c3e7be3d93 advisory. CVE-2025-8067 Out-Of-Bounds Read in UDisks Daemon Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...
Oracle Linux 10 : udisks2 (ELSA-2025-15020)
The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-15020 advisory. - udisks: Out-of-bounds read in UDisks Daemon CVE-2025-8067 - Fixes CVE-2021-3802 2003650 Tenable has extracted the preceding description block directly from...
udisks: Out-of-bounds read in UDisks Daemon
A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is achieved via the loop device handler, which handles requests sent through the D-BUS interface. As two of the parameters of this handle, it receives the file descriptor...
Important: Red Hat Security Advisory: udisks2 security update
An update for udisks2 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
Important: Red Hat Security Advisory: udisks2 security update
An update for udisks2 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
udisks: Out-of-bounds read in UDisks Daemon
A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is achieved via the loop device handler, which handles requests sent through the D-BUS interface. As two of the parameters of this handle, it receives the file descriptor...
RHEL 9 : udisks2 (RHSA-2025:15018)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:15018 advisory. The Udisks project provides a daemon, tools, and libraries to access and manipulate disks, storage devices, and technologies. Security Fixes: udisks...
RHEL 10 : udisks2 (RHSA-2025:15020)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:15020 advisory. The Udisks project provides a daemon, tools, and libraries to access and manipulate disks, storage devices, and technologies. Security Fixes: udisk...
ALSA-2025:15020 Important: udisks2 security update
The Udisks project provides a daemon, tools, and libraries to access and manipulate disks, storage devices, and technologies. Security Fixes: udisks: Out-of-bounds read in UDisks Daemon CVE-2025-8067 For more details about the security issues, including the impact, a CVSS score, acknowledgments,...
ALSA-2025:15018 Important: udisks2 security update
The Udisks project provides a daemon, tools, and libraries to access and manipulate disks, storage devices, and technologies. Security Fixes: udisks: Out-of-bounds read in UDisks Daemon CVE-2025-8067 For more details about the security issues, including the impact, a CVSS score, acknowledgments,...
RHEL 8 : udisks2 (RHSA-2025:15017)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:15017 advisory. The Udisks project provides a daemon, tools, and libraries to access and manipulate disks, storage devices, and technologies. Security Fixes: udisks...
Important: udisks2 security update
The Udisks project provides a daemon, tools, and libraries to access and manipulate disks, storage devices, and technologies. Security Fixes: udisks: Out-of-bounds read in UDisks Daemon CVE-2025-8067 For more details about the security issues, including the impact, a CVSS score, acknowledgments,...
Fedora 42 : udisks2 (2025-c866472f43)
The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-c866472f43 advisory. CVE-2025-8067 Out-Of-Bounds Read in UDisks Daemon Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...
SUSE SLED15: libudisks2-0 / libudisks2-0-devel / libudisks2-0_bcache / etc (SUSE-SU-2025:03017-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:03017-1 advisory. - CVE-2025-8067: Fixed missing bounds check can lead to out-of-bounds read in udisks daemon bsc1248502...
SUSE CVE-2025-8067
A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is achieved via the loop device handler, which handles requests sent through the D-BUS interface. As two of the parameters of this handle, it receives the file descriptor...
Security update for udisks2
This update for udisks2 fixes the following issues: CVE-2025-8067: Fixed missing bounds check can lead to out-of-bounds read in udisks daemon bsc1248502 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...
SUSE-SU-2025:03017-1 Security update for udisks2
This update for udisks2 fixes the following issues: - CVE-2025-8067: Fixed missing bounds check can lead to out-of-bounds read in udisks daemon bsc1248502...
DEBIAN-CVE-2025-8067
A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is achieved via the loop device handler, which handles requests sent through the D-BUS interface. As two of the parameters of this handle, it receives the file descriptor...
AZL-73051 CVE-2025-8067 affecting package udisks2 2.9.4-6
A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is achieved via the loop device handler, which handles requests sent through the D-BUS interface. As two of the parameters of this handle, it receives the file descriptor...
CVE-2025-8067
Summary: CVE-2025-8067 is an out-of-bounds read in the UDisks2 daemon via the D-Bus loop device handler, where a negative index is not validated. This can allow unprivileged users to crash the daemon or perform local privilege escalation by accessing files owned by privileged users. What’s affect...