The overlayfs stacking file system in Linux kernel does not properly validate the application of file capabilities against user namespaces, which could lead to privilege escalation.
// weekly digest
Loading…
Loading…
// weekly digest
// weekly digest
2022-10-17 00:00 UTC 2022-10-23 23:59 UTC
// total
0
// critical
0
// high
0
// medium
0
// low
0
// new kev
2
// top critical
No CRITICAL CVEs published this week.
// top high
No HIGH CVEs published this week.
// new kev additions
The overlayfs stacking file system in Linux kernel does not properly validate the application of file capabilities against user namespaces, which could lead to privilege escalation.
Synacor Zimbra Collaboration Suite (ZCS) allows an attacker to upload arbitrary files using cpio package to gain incorrect access to any other user accounts.