USN-7578-2: UDisks vulnerability

USN-7578-1 fixed a vulnerability in UDisks. This update provides the corresponding update for Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. Original advisory details: It was discovered that UDisks incorrectly handled mount options when resizing certain filesystems. A local attacker with an active sessio...

USN-7578-1: UDisks vulnerability

It was discovered that UDisks incorrectly handled mount options when resizing certain filesystems. A local attacker with an active session on the console can use this issue to escalate their privileges to root...

USN-7578-1 udisks2 vulnerability

It was discovered that UDisks incorrectly handled mount options when resizing certain filesystems. A local attacker with an active session on the console can use this issue to escalate their privileges to root...

[SECURITY] [DLA 4221-1] libblockdev security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4221-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz June 17, 2025 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5943-1] libblockdev security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5943-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 17, 2025 https://www.debian.org/security/faq -...

Qualys TRU Uncovers Chained LPE: SUSE 15 PAM to Full Root via libblockdev/udisks

The Qualys Threat Research Unit TRU has discovered two linked local privilege escalation LPE flaws. The first CVE-2025-6018 resides in the PAM configuration of openSUSE Leap 15 and SUSE Linux Enterprise 15. Using this vulnerability, an unprivileged local attacker—for example, via SSH—can elevate ...

UBUNTU-CVE-2025-6019

A Local Privilege Escalation LPE vulnerability was found in libblockdev. Generally, the "allowactive" setting in Polkit permits a physically present user to take certain actions based on the session type. Due to the way libblockdev interacts with the udisks daemon, an "allowactive" user on a syst...

Debian dsa-5943 : gir1.2-blockdev-2.0 - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5943 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5943-1 [email protected] https://www.debian.org/security/...

Linux Distros Unpatched Vulnerability : CVE-2018-17336

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UDisks 2.8.0 has a format string vulnerability in udiskslog in udiskslogging.c, allowing attackers to obtain sensitive information stack contents, cause a denia...

Linux Distros Unpatched Vulnerability : CVE-2010-4661

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - udisks before 1.0.3 allows a local user to load arbitrary Linux kernel modules. CVE-2010-4661 Note that Nessus relies on the presence of the package as reported...

RHSA-2014:0293 Red Hat Security Advisory: udisks security update

Bulletin has no description...

OPENSUSE-SU-2024:10408-1 udisks-1.0.5-5.10 on GA media

These are all security issues fixed in the udisks-1.0.5-5.10 package on the GA media of openSUSE Tumbleweed...

RHEL 6 : udisks (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - udisks: Format string vulnerability in udiskslog in udiskslogging.c CVE-2018-17336 - udisks before 1.0.3...

RHEL 6 : udisks (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - udisks: Format string vulnerability in udiskslog in udiskslogging.c CVE-2018-17336 Note that Nessus has not tested...

SUSE CVE-2010-4661

udisks before 1.0.3 allows a local user to load arbitrary Linux kernel modules...

SUSE CVE-2014-0004

Stack-based buffer overflow in udisks before 1.0.5 and 2.x before 2.1.3 allows local users to cause a denial of service crash and possibly execute arbitrary code via a long mount point...

SUSE CVE-2018-17336

UDisks 2.8.0 has a format string vulnerability in udiskslog in udiskslogging.c, allowing attackers to obtain sensitive information stack contents, cause a denial of service memory corruption, or possibly have unspecified other impact via a malformed filesystem label, as demonstrated by %d or %n...

Udisks DoS

The vulnerability of the program for querying and managing UDisks storage devices for file systems ext2/3/4 lies in the fact that system shutdown upon an error is the default configuration. Exploiting this vulnerability allows a malicious actor to trigger a service failure using a specially creat...

Slackware: Security Advisory (SSA:2014-070-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2014-0129)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...