USN-4512-1: util-linux vulnerability | Cloud Foundry

Severity Negligible Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description It was discovered that the umount bash completion script shipped in util-linux incorrectly handled certain mountpoints. If a local attacker were able to create arbitrary mountpoints, another user coul...

container-tools:1.0 bug fix and enhancement update

An update is available for fuse-overlayfs, container-selinux, oci-umount, runc, skopeo, slirp4netns, oci-systemd-hook, containernetworking-plugins, buildah, criu. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

container-tools:1.0 bug fix and enhancement update

An update is available for fuse-overlayfs, container-selinux, oci-umount, runc, skopeo, slirp4netns, oci-systemd-hook, containernetworking-plugins, buildah, criu. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

USN-4512-1 util-linux vulnerability

It was discovered that the umount bash completion script shipped in util-linux incorrectly handled certain mountpoints. If a local attacker were able to create arbitrary mountpoints, another user could be tricked into executing arbitrary code when attempting to run the umount command with bash...

Ubuntu 18.04 LTS : util-linux vulnerability (USN-4512-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4512-1 advisory. It was discovered that the umount bash completion script shipped in util-linux incorrectly handled certain mountpoints. If a local attacker were able to create...

The vulnerability of the exec function in the umount package manager of the NPM allows a hacker to execute arbitrary commands.

The vulnerability of the exec function in the umount package manager of the NPM is related to the lack of security measures for handling web page structures. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

GHSA-6Q48-VJQ2-MWCJ Command Injection in umount

All versions of umount are vulnerable to Command Injection. The package fails to sanitize input rules and passes it directly to an exec call on the umount function . This may allow attackers to execute arbitrary code in the system if the device value passed to the function is user-controlled...

@pho-nomenal/5-minute-github-demo (>=6.0.3, <=21.5.1), eject-media (>=0.0.1, <=0.0.2) +2 more potentially affected by CVE-2020-7628 via umount (1.1.6)

umount NPM version 1.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on umount and may be impacted: - @pho-nomenal/5-minute-github-demo =6.0.3, =0.0.1, =0.1.1, =1.1.0, =1.1.4 Source cves: CVE-2020-7628 Source advisory: OSV:GHSA-6Q48-VJQ2-MWCJ...

Command Injection in umount

All versions of umount are vulnerable to Command Injection. The package fails to sanitize input rules and passes it directly to an exec call on the umount function . This may allow attackers to execute arbitrary code in the system if the device value passed to the function is user-controlled...

Arbitrary Command Injection

umount is vulnerable to arbitrary command injection. The vulnerability exists as it does not sanitize the input rules from the umount function that leads to exec...

Privilege Escalation

kernel is vulnerable to privilege escalation. The vulnerability exists as a race condition was found in the Linux kernel "inotify" watch removal and umount implementation. This could allow a local, unprivileged user to cause a privilege escalation or a denial of service...

Command Injection

Overview All versions of umount are vulnerable to Command Injection. The package fails to sanitize input rules and passes it directly to an exec call on the umount function . This may allow attackers to execute arbitrary code in the system if the device value passed to the function is...

container-tools:1.0 security update

An update is available for fuse-overlayfs, oci-umount, runc, skopeo, oci-systemd-hook, containernetworking-plugins. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE li...

umount command injection vulnerability

umount is a package for uninstalling devices in Unix platforms. An injection vulnerability exists in umount 1.1.6 and earlier versions, which stems from the program cleaning up user-entered 'device' parameters. No details of the vulnerability are provided at this time...

CVE-2020-7628

umount through 1.1.6 is vulnerable to Command Injection. The argument device can be controlled by users without any sanitization...

CVE-2020-7628

umount through 1.1.6 is vulnerable to Command Injection. The argument device can be controlled by users without any sanitization...

Command injection

umount through 1.1.6 is vulnerable to Command Injection. The argument device can be controlled by users without any sanitization...

CVE-2020-7628

umount through 1.1.6 is vulnerable to Command Injection. The argument device can be controlled by users without any sanitization...

CVE-2020-7628

umount through 1.1.6 is vulnerable to Command Injection. The argument device can be controlled by users without any sanitization...

CVE-2020-7628

The CVE-2020-7628 entry exposes a Command Injection flaw in the Node.js package umount up to version 1.1.6, where the user-supplied device argument is passed to an exec call without sanitization. Exploitation could allow an attacker to execute arbitrary code on the host. Public reports (Snyk advi...