GSD-2022-1006981 cifs: Fix xid leak in cifs_flock()

cifs: Fix xid leak in cifsflock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.76 by commit 8905d13b9ede4caa88c577faed832d6c7383f4fb, it...

GSD-2022-1006980 cifs: Fix xid leak in cifs_ses_add_channel()

cifs: Fix xid leak in cifssesaddchannel This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.76 by commit...

GSD-2022-1006688 cifs: Fix xid leak in cifs_create()

cifs: Fix xid leak in cifscreate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.6 by commit 92aa09c86ef297976a3c27c6574c0839418dc2c4, it w...

GSD-2022-1006687 cifs: Fix xid leak in cifs_copy_file_range()

cifs: Fix xid leak in cifscopyfilerange This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.6 by commit dc283313d1ca378d787cb55c1e580dc3de85268...

GSD-2022-1006685 cifs: Fix xid leak in cifs_ses_add_channel()

cifs: Fix xid leak in cifssesaddchannel This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.6 by commit db2a8b6c17e128d91f35d836c569f4a6bda4471...

PT-2022-35237 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.76 Description: The issue is related to a potential security problem in the cifs copy file range function, which may lead to an xid leak. The actual impact and attack plausibility have not yet been proven...

PT-2022-35238 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.13 through v5.15.75 Description: A potential security issue exists due to an xid leak in the cifs create function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-35452 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.152 Description: The issue is related to a potential security vulnerability in the cifs ses add channel function, which may cause an xid leak. The actual impact and attack plausibility have not yet been...

PT-2022-35453 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.152 Description: The issue is related to a potential security vulnerability in the cifs flock function, which may cause an xid leak. The actual impact and attack plausibility have not yet been proven...

PT-2022-35235 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.76 Description: The issue is related to a potential security vulnerability in the cifs ses add channel function, which may cause an xid leak. The actual impact and attack plausibility have not yet been...

Privilege Escalation

gce-compute-image is vulnerable to privilege escation. The vulnerability allows a user that is only granted the role "roles/compute.osLogin" to escalate privileges to root. Using their membership to the "adm" group, users with this role are able to read the DHCP XID from the systemd journal. Usin...

CVE-2020-8903

A vulnerability in Google Cloud Platform's guest-oslogin versions between 20190304 and 20200507 allows a user that is only granted the role "roles/compute.osLogin" to escalate privileges to root. Using their membership to the "adm" group, users with this role are able to read the DHCP XID from th...

CVE-2020-8903

A vulnerability in Google Cloud Platform's guest-oslogin versions between 20190304 and 20200507 allows a user that is only granted the role "roles/compute.osLogin" to escalate privileges to root. Using their membership to the "adm" group, users with this role are able to read the DHCP XID from th...

UBUNTU-CVE-2020-8903

A vulnerability in Google Cloud Platform's guest-oslogin versions between 20190304 and 20200507 allows a user that is only granted the role "roles/compute.osLogin" to escalate privileges to root. Using their membership to the "adm" group, users with this role are able to read the DHCP XID from th...

Design/Logic Flaw

A vulnerability in Google Cloud Platform's guest-oslogin versions between 20190304 and 20200507 allows a user that is only granted the role "roles/compute.osLogin" to escalate privileges to root. Using their membership to the "adm" group, users with this role are able to read the DHCP XID from th...

CVE-2020-8903

CVE-2020-8903 affects Google Cloud Platform's guest-oslogin in versions 20190304–20200507, enabling a user with roles/compute.osLogin to escalate to root by abusing membership in the adm group to read the DHCP XID, modify IP/hostname in /etc/hosts, redirect metadata.google.internal to an arbitrar...

CVE-2020-8903

Removed by vendor...

Code injection

SNDCP module may access array out side its boundary when it receives malformed XID message. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053,...

Design/Logic Flaw

The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:xidmapenter...

Tcpdump NFS parser buffer overflow vulnerability (CNVD-2017-27746)

Tcpdump is a set of sniffing tools developed by the Tcpdump team that run at the command line. The tools allow users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.NFS parser is one of the network file system parsers. A buffer overflo...