{"uuid": "503de958-c815-425c-a121-1d5492b9ed36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-5195", "type": "seen", "source": "https://t.me/hacking_Attack/46519", "content": "he Linux kernel is created by making use of the caching pages. Caching pages are temporary copies of files in a system\u2019s memory that are created to make the handling of frequently used files faster. The vulnerability allows the attacker to make changes to the cached copy of a file that should be \u2018read-only\u2019 for a user without root permissions.\n\n\u201cIn this way, it is possible for an attacker to gain root privileges, which ultimately allows him to take control of an affected system,\u201d Arntz said. QNAP Problems Redux\u201cMike Parkin, senior technical engineer at Vulcan Cyber, told Threatpost on Tuesday that QNAP will hopefully release a kernel update quickly for the vulnerability. This is the second issue that the storage device vendor has reported recently, Parkin pointed out via email.\u201d\n\nIn January, QNAP told users to immediately yank\u00a0their internet-exposed NAS devices off the internet, as ransomware and brute-force attacks widely targeted all network devices. See Also: Offensive Security Tool: Scapy\n\u201cThe Dirty Pipe vulnerability requires local user access to exploit, which does reduce the risk somewhat,\u201d Parkin granted. But the Dirty Pipe issue again points out the need to make sure devices are \u201cproperly configured, maintained, and deployed in a manner that meets business needs while remaining secure,\u201d he said.\n\n\u201cUltimately systems need to be configured so they are only accessible by the people and systems that need access, and then only with the degree of access required to get the job done,\u201d Parkin said.\n\nThat sounds about right to Hank Schless, senior manager of security solutions at Lookout.\n\nNAS devices that provide storage and retrieval of data from a centralized location for authorized users and clients enable productivity, bringing the benefits of cloud computing inside networks, Schless said. The caveat: It also introduces \u201cserious risk\u201d if not done correctly, he added.\n\n\u201cNot only could attackers compromise the data within the particular resources they discover, but they could also move laterally around your network after initial compromise,\u201d Schless told Threatpost on Tuesday. \u201cMuch like the main challenge with VPNs, which allow unbridled access to the infrastructure, NAS assets could act as a springboard for threat actors. It\u2019s important to be able to segment access to particular apps, data, and resources to ensure that one compromised account or resource doesn\u2019t lead to compromise of the entire infrastructure. This is a key reason that organizations use zero trust network access\u00a0(ZTNA) as a piece of their modern security posture.\u201d Are you a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSee Also: Hacking stories: MafiaBoy, the hacker who took down the Internet ImpactPeople have been comparing Dirty Pipe to Dirty Cow. That\u2019s an earlier privilege escalation vulnerability (CVE-2016-5195) that had already been in Linux for nine years \u2013 since 2007 \u2013 when it came under public attacks\u00a0against web-facing Linux servers in 2016.\n\nDirty Pipe is similar to Dirty Cow, except that it\u2019s worse: It\u2019s easier to exploit, Keiderman said.\n\nVulcan Cyber\u2019s Parkin noted that any exploit that gives root level access to a Linux system is \u201cproblematic.\u201d\n\n\u201cAn attacker that gains root gains full control over the target system and may be able to leverage that control to reach other systems,\u201d he said.\n\nThe mitigating factor with this vulnerability is that it requires local access, which slightly lowers the risk, Parkin said. As well, the Dirty Pipe flaw has been fixed in the latest Linux kernel code, and patches should be available soon for the major distributions.\n\nPrivilege escalation is just the first step in attack[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T01:00:34.264247Z"}