CVE-2021-43414

CVE-2021-43414 affects GNU Hurd prior to version 0.9 20210404-9. The issue is in the authentication protocol used by the proc server, making it vulnerable to man-in-the-middle attacks and enabling local privilege escalation to obtain full root access. The connected PT-Security entry explicitly re...

CVE-2021-43412

CVE-2021-43412 affects GNU Hurd before 0.9 (20210404-9). The issue resides in libports, which accepts fake notification messages from any client on any port, enabling a use-after-free in port handling and leading to local privilege escalation to full root access. Connections across sources (Red H...