Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 24

Export CSV
CVE-2021-3996

util-linux: Unauthorized unmount of filesystems in libmount

A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows a local user on a vulnerable system to unmount other users' filesystems that are either world-writable themselves (like /tmp) or mounted in a world-writable directory. An attacker may use this flaw to cause a denial of service to applications that use the affected filesystems.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Kernel
Products
Fedora Util-linux
CVE-2021-3995

util-linux: Unauthorized unmount of FUSE filesystems belonging to users with similar uid

A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows an unprivileged local attacker to unmount FUSE filesystems that belong to certain other users who have a UID that is a prefix of the UID of the attacker in its string form. An attacker may use this flaw to cause a denial of service to applications that use the affected filesystems.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Kernel
Products
Fedora Util-linux
CVE-2020-10751

kernel: SELinux netlink permission check bypass

A flaw was found in the Linux kernels SELinux LSM hook implementation before version 5.7, where it incorrectly assumed that an skb would only contain a single netlink message. The hook would incorrectly only validate the first netlink message in the skb and allow or deny the rest of the messages within the skb with the granted permission without further processing.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Kernel Redhat
Products
Selinux Enterprise Linux Enterprise Linux Server and 1 more
CVE-2018-17953

pam_access does not handle netmask matches correctly

A incorrect variable in a SUSE specific patch for pam_access rule matching in PAM 1.3.0 in openSUSE Leap 15.0 and SUSE Linux Enterprise 15 could lead to pam_access rules not being applied (fail open).

CVSS 3.0 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Kernel Opensuse Suse
Products
Linux-pam Leap Linux Enterprise