enterprise_linux_eus Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/enterprise_linux_eus/ Sun, 26 Feb 2023 06:47:13 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png enterprise_linux_eus Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/enterprise_linux_eus/ 32 32 CVE-2018-16878 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-16878/ Sun, 26 Feb 2023 06:47:13 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-16878/ A flaw was found in pacemaker up to and including version 2.0.1. An insufficient verification inflicted preference of uncontrolled processes can lead to DoS

The post CVE-2018-16878 appeared first on CVE Vulnerability.

]]> A flaw was found in pacemaker up to and including version 2.0.1. An insufficient verification inflicted preference of uncontrolled processes can lead to DoS

The post CVE-2018-16878 appeared first on CVE Vulnerability.

]]> CVE-2019-6111 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-6111/ Sun, 26 Feb 2023 06:33:51 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-6111/ An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. However, the scp client only performs cursory validation of the object name returned (only directory traversal attacks are prevented). A malicious scp server (or Man-in-The-Middle attacker) can overwrite […]

The post CVE-2019-6111 appeared first on CVE Vulnerability.

]]> An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. However, the scp client only performs cursory validation of the object name returned (only directory traversal attacks are prevented). A malicious scp server (or Man-in-The-Middle attacker) can overwrite arbitrary files in the scp client target directory. If recursive operation (-r) is performed, the server can manipulate subdirectories as well (for example, to overwrite the .ssh/authorized_keys file).

The post CVE-2019-6111 appeared first on CVE Vulnerability.

]]> CVE-2019-16884 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-16884/ Sun, 26 Feb 2023 06:31:23 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-16884/ runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction bypass because libcontainer/rootfs_linux.go incorrectly checks mount targets, and thus a malicious Docker image can mount over a /proc directory.

The post CVE-2019-16884 appeared first on CVE Vulnerability.

]]> runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction bypass because libcontainer/rootfs_linux.go incorrectly checks mount targets, and thus a malicious Docker image can mount over a /proc directory.

The post CVE-2019-16884 appeared first on CVE Vulnerability.

]]> CVE-2019-14865 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-14865/ Sun, 26 Feb 2023 06:30:43 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-14865/ A flaw was found in the grub2-set-bootflag utility of grub2. A local attacker could run this utility under resource pressure (for example by setting RLIMIT), causing grub2 configuration files to be truncated and leaving the system unbootable on subsequent reboots.

The post CVE-2019-14865 appeared first on CVE Vulnerability.

]]> A flaw was found in the grub2-set-bootflag utility of grub2. A local attacker could run this utility under resource pressure (for example by setting RLIMIT), causing grub2 configuration files to be truncated and leaving the system unbootable on subsequent reboots.

The post CVE-2019-14865 appeared first on CVE Vulnerability.

]]> CVE-2019-12450 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-12450/ Sun, 26 Feb 2023 06:29:52 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-12450/ file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation is in progress. Instead, default permissions are used.

The post CVE-2019-12450 appeared first on CVE Vulnerability.

]]> file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation is in progress. Instead, default permissions are used.

The post CVE-2019-12450 appeared first on CVE Vulnerability.

]]>