Kees

اسم البرنامج المعرض للخطر والإصدارات المتأثرة إصدارات نواة لينكس السابقة للإصدار 6.19.0 الوصف تحتوي نواة لينكس على ثغرة في محلل جدول أقسام RedBoot. عند تمكين CONFIG FORTIFY SOURCE واستخدام مُجمِّع برمجي حديث، قد يحدث تجاوز سعة المخزن المؤقت أثناء عملية التحليل، مما قد يؤدي إلى تعطل النظام. تنشأ هذه المشكلة لأن الكود يستخدم دالة `memcmp()` مع مخزن مؤقت قد يكون حجمه أكبر من اللازم، حيث يعتمد حساب الحجم على دالة `strlen()`. تحاول دالة `memcmp()` القراءة خارج نطاق الذاكرة المخصصة، مما يؤدي إلى ظهور تحذير ثم حدوث خطأ (oops). التوصيات قم بالتحديث إلى إصدار نواة Linux 6.19.0 أو أحدث.

The issue allows a root user to remove arbitrary files.

The issue allows local users to gain privileges by modifying the root.rules file, which is created with 0666 permissions by mountall.c in mountall.

The issue is related to a format string vulnerability in the grant helper of PolicyKit. This vulnerability allows attackers to cause a denial of service, potentially leading to a crash, and may also enable the execution of arbitrary code. The vulnerability is triggered by format strings in a password.

The issue is related to multiple vulnerabilities in the pam package of various Linux operating systems, including openSUSE, SUSE Linux Enterprise, and Debian GNU/Linux. These vulnerabilities can be exploited locally, potentially leading to a violation of confidentiality, integrity, and availability of protected information. A specific vulnerability is a stack-based buffer overflow in the assemble line function in modules/pam env/pam env.c in Linux-PAM before version 1.1.5, which allows local users to cause a denial of service and possibly execute arbitrary code via a long string of white spaces at the beginning of the ~/.pam environment file.

The issue concerns multiple vulnerabilities in the hplip package and its related components in Debian GNU/Linux, which can lead to breaches of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely. The `hpssd` component in hplip is specifically vulnerable to context-dependent attacks, allowing the execution of arbitrary commands via shell metacharacters in a from address when invoking sendmail.

The issue concerns multiple vulnerabilities in the pam package of various Linux operating systems, including openSUSE, SUSE Linux Enterprise, and Debian GNU/Linux. These vulnerabilities can be exploited locally, potentially leading to a violation of confidentiality, integrity, and availability of protected information. The expand arg function in the pam env module of Linux-PAM is also vulnerable to a denial of service (CPU consumption) due to improper handling of environment variable expansion overflows.