AZL-41659 CVE-2022-3821 affecting package systemd-bootstrap for versions less than 250.3-17

An off-by-one Error issue was discovered in Systemd in formattimespan function of time-util.c. An attacker could supply specific values for time and accuracy that leads to buffer overrun in formattimespan, leading to a Denial of Service...

util-linux bug fix and enhancement update

An update is available for util-linux. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 8...

UBUNTU-CVE-2022-42930

If two Workers were simultaneously initializing their CacheStorage, a data race could have occurred in the ThirdPartyUtil component. This vulnerability affects Firefox 106...

PT-2022-27663 · Systemd +5 · Systemd +5

Name of the Vulnerable Software and Affected Versions: systemd versions 250 through 251 Description: The issue allows local users to achieve a systemd-coredump deadlock by triggering a crash that has a long backtrace. This occurs in the parse elf object function in shared/elf-util.c. The...

Huawei EulerOS: Security Advisory for util-linux (EulerOS-SA-2022-2593)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.6.0 : util-linux (EulerOS-SA-2022-2593)

According to the versions of the util-linux packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an...

airflow-util-dv (>=1.2.1, <=1.6.2) potentially affected by CVE-2022-41672 via apache-airflow (1.10.1)

apache-airflow PYPI version 1.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-util-dv =1.2.1, =1.6.2 Source cves: CVE-2022-41672 Source advisory: OSV:GHSA-3Q8R-F3PJ-3GC4...

airflow-util-dv (>=1.2.1, <=1.6.2) potentially affected by CVE-2022-41672 via apache-airflow (1.10.1)

apache-airflow PYPI version 1.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-util-dv =1.2.1, =1.6.2 Source cves: CVE-2022-41672 Source advisory: OSV:PYSEC-2022-42983...

ASB-A-237288416

In audioTransportsToHal of HidlUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

com.alipay.sofa.acts:acts-bom (1.0.0), com.alipay.sofa.acts:acts-core (1.0.0) potentially affected by CVE-2022-38749 via com.alipay.sofa.acts:acts-common-util (1.0.0)

com.alipay.sofa.acts:acts-common-util MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.alipay.sofa.acts:acts-common-util and may be impacted: - com.alipay.sofa.acts:acts-bom 1.0.0 - com.alipay.sofa.acts:acts-core 1.0.0 Source cve...

Amazon Linux 2022 : libblkid, libblkid-devel, libfdisk (ALAS2022-2022-099)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-099 advisory. A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows an unprivileged local attacker to...

Ubuntu: Security Advisory (USN-5478-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DEBIAN-CVE-2021-3996

A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows a local user on a vulnerable system to unmount other users' filesystems that are either world-writable themselves like /tmp or mounted in a...

ALPINE-CVE-2021-3996

A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows a local user on a vulnerable system to unmount other users' filesystems that are either world-writable themselves like /tmp or mounted in a...

CVE-2021-3996

A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows a local user on a vulnerable system to unmount other users' filesystems that are either world-writable themselves like /tmp or mounted in a...

CVE-2021-3996

A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows a local user on a vulnerable system to unmount other users' filesystems that are either world-writable themselves like /tmp or mounted in a...

CVE-2021-3996

A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows a local user on a vulnerable system to unmount other users' filesystems that are either world-writable themselves like /tmp or mounted in a...

CVE-2021-3996

A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows a local user on a vulnerable system to unmount other users' filesystems that are either world-writable themselves like /tmp or mounted in a...

CVE-2021-3996

CVE-2021-3996 affects util-linux libmount and allows an unprivileged local user to unmount other users’ filesystems that are world-writable or mounted in a world-writable directory, potentially causing DoS. The Debian security tracker and security advisories note this vulnerability in libmount; D...

CVE-2021-3996: Files or Directories Accessible to External Parties

A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows a local user on a vulnerable system to unmount other users' filesystems that are either world-writable themselves like /tmp or mounted in a...