4 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-23472
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - serial: core: fix infinite loop in handletx for PORTUNKNOWN uartwriteroom and uartwrite behave inconsistently when xmitbuf is NULL which happens for PORTUNKNOW...
unzip-stream allows Arbitrary File Write via artifact extraction
Impact When using the Extract method of unzip-stream, malicious zip files were able to write to paths they shouldn't be allowed to. Patches Fixed in 0.3.2 References - https://snyk.io/research/zip-slip-vulnerability - https://github.com/mhr3/unzip-stream/compare/v0.3.1...v0.3.2 Credits Justin Taf...
CVE-2021-1107
NVIDIA Linux kernel distributions contain a vulnerability in nvmap NVMAPIOCWRITE paths, where improper access controls may lead to code execution, complete denial of service, and seriously compromised integrity of all system components...
dbus: DBusServer DBUS_COOKIE_SHA1 authentication bypass
A flaw was found in dbus. The implementation of DBUSCOOKIESHA1 is susceptible to a symbolic link attack. A malicious client with write access to its own home directory could manipulate a /.dbus-keyrings symlink to cause the DBusServer to read and write in unintended locations resulting in an...