Latest vulnerabilities for "openvz vzctl"

Where

Sort:

Versions

2.6.32

4.9.3

OpenVZ vzkernelThe open_by_handle_at function in vzkernel before 042stab090.5 in the OpenVZ modification for the Li…

Risk 36

Severity

6.5

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

The openbyhandleat function in vzkernel before 042stab090.5 in the OpenVZ modification for the Linux kernel 2.6.32, when using simfs, might allow local container users with CAPDACREADSEARCH capability to bypass an intended container protection mechanism and access arbitrary files on a filesystem via vectors related to use of the filehandle structure.

First published (updated )

CVE-2014-3519

OpenVZ Vzctlvzctl before 4.9.4 determines the virtual environment (VE) layout based on the presence of root.hdd/…

Risk 25

Severity

3.6

AV:L/AC:L/Au:N/C:N/I:P/A:P

vzctl before 4.9.4 determines the virtual environment (VE) layout based on the presence of root.hdd/DiskDescriptor.xml in the VE private directory, which allows local simfs container (CT) root users to change the root password for arbitrary ploop containers, as demonstrated by a symlink attack on the ploop container root.hdd file and then access a control panel.

First published (updated )

CVE-2015-6927

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.