Kees

Name of the Vulnerable Software and Affected Versions Kernel Linux versões anteriores a 6.19.0 Description O kernel Linux contém uma falha no analisador de tabela de partição RedBoot. Quando CONFIG FORTIFY SOURCE está habilitado e um compilador recente é usado, um estouro de buffer pode ocorrer durante o processo de análise, potencialmente levando a uma falha do sistema. O problema surge porque o código usa `memcmp()` com um buffer potencialmente grande demais, pois o cálculo do tamanho depende de `strlen()`. A função `memcmp()` tenta ler além da memória alocada, acionando o aviso e, subsequentemente, o oops. Recommendations Atualize para a versão 6.19.0 ou posterior do kernel Linux.

A vulnerabilidade permite que um usuário root remova arquivos arbitrários.

The issue allows local users to gain privileges by modifying the root.rules file, which is created with 0666 permissions by mountall.c in mountall.

The issue is related to a format string vulnerability in the grant helper of PolicyKit. This vulnerability allows attackers to cause a denial of service, potentially leading to a crash, and may also enable the execution of arbitrary code. The vulnerability is triggered by format strings in a password.

The issue is related to multiple vulnerabilities in the pam package of various Linux operating systems, including openSUSE, SUSE Linux Enterprise, and Debian GNU/Linux. These vulnerabilities can be exploited locally, potentially leading to a violation of confidentiality, integrity, and availability of protected information. A specific vulnerability is a stack-based buffer overflow in the assemble line function in modules/pam env/pam env.c in Linux-PAM before version 1.1.5, which allows local users to cause a denial of service and possibly execute arbitrary code via a long string of white spaces at the beginning of the ~/.pam environment file.

The issue concerns multiple vulnerabilities in the hplip package and its related components in Debian GNU/Linux, which can lead to breaches of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely. The `hpssd` component in hplip is specifically vulnerable to context-dependent attacks, allowing the execution of arbitrary commands via shell metacharacters in a from address when invoking sendmail.

The issue concerns multiple vulnerabilities in the pam package of various Linux operating systems, including openSUSE, SUSE Linux Enterprise, and Debian GNU/Linux. These vulnerabilities can be exploited locally, potentially leading to a violation of confidentiality, integrity, and availability of protected information. The expand arg function in the pam env module of Linux-PAM is also vulnerable to a denial of service (CPU consumption) due to improper handling of environment variable expansion overflows.