https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 19:39:47 +0000 https://vulnerability.circl.lu/vuln/cve-2019-3689 <p><strong>Affected:</strong> SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15</p> <p>The nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18.1 and in SUSE Linux Enterprise Server 15 before and including version 2.1.1-6.10.2 the directory /var/lib/nfs is owned by statd:nogroup. This directory contains files owned and managed by root. If statd is compromised, it can therefore trick processes running with root privileges into creating/overwriting files anywhere on the system.</p> <p><strong>Affected:</strong> SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15</p> <p>The nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18.1 and in SUSE Linux Enterprise Server 15 before and including version 2.1.1-6.10.2 the directory /var/lib/nfs is owned by statd:nogroup. This directory contains files owned and managed by root. If statd is compromised, it can therefore trick processes running with root privileges into creating/overwriting files anywhere on the system.</p> https://vulnerability.circl.lu/vuln/cve-2019-3689 https://vulnerability.circl.lu/vuln/usn-4400-1 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: nfs-utils, Ubuntu:18.04:LTS: nfs-utils, Ubuntu:20.04:LTS: nfs-utils</p> <p>It was discovered that the nfs-utils package set incorrect permissions on the /var/lib/nfs directory. An attacker could possibly use this issue to escalate privileges.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: nfs-utils, Ubuntu:18.04:LTS: nfs-utils, Ubuntu:20.04:LTS: nfs-utils</p> <p>It was discovered that the nfs-utils package set incorrect permissions on the /var/lib/nfs directory. An attacker could possibly use this issue to escalate privileges.</p> https://vulnerability.circl.lu/vuln/usn-4400-1