Red Hat Enterprise Linux: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 2

• High 7.8
  CVE-2024-52336

  Tuned: `script_pre` and `script_post` options allow to pass arbitrary scripts executed by root

  A script injection vulnerability was identified in the Tuned package. The `instance_create()` D-Bus function can be called by locally logged-in users without authentication. This flaw allows a local non-privileged user to execute a D-Bus call with `script_pre…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Nov 26, 2024
• Medium 5.5
  CVE-2024-52337

  Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method

  A log spoofing flaw was found in the Tuned package due to improper sanitization of some API arguments. This flaw allows an attacker to pass a controlled sequence of characters; newlines can be inserted into the log. Instead of the 'evil' the attacker could mi…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu Azure Linux
  Nov 26, 2024

Revision history

1. 2025-02-24 #9

   Neue Updates von Red Hat aufgenommen

2. 2025-02-02 #8

   Neue Updates von Red Hat aufgenommen

3. 2025-01-16 #7

   Neue Updates von Red Hat aufgenommen

4. 2025-01-14 #6

   Neue Updates von Red Hat aufgenommen

5. 2025-01-09 #5

   Neue Updates von Red Hat aufgenommen

6. 2024-12-18 #4

   Neue Updates von Oracle Linux aufgenommen

7. 2024-12-16 #3

   Neue Updates von Red Hat aufgenommen

8. 2024-12-03 #2

   Neue Updates von Oracle Linux aufgenommen

9. 2024-11-26 #1

   Initiale Fassung

References

• Red Hat Security Advisory vom 2024-11-26
  https://access.redhat.com/errata/RHSA-2024:10381
• Red Hat Security Advisory vom 2024-11-26
  https://access.redhat.com/errata/RHSA-2024:10384
• Fedora Security Advisory FEDORA-2024-0CAB161B46 vom 2024-11-26
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-0cab161b46
• Fedora Security Advisory FEDORA-2024-FB2157C952 vom 2024-11-26
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-fb2157c952
• Oracle Linux Security Advisory ELSA-2024-10384 vom 2024-12-03
  https://linux.oracle.com/errata/ELSA-2024-10384.html
• Red Hat Security Advisory RHSA-2024:11161 vom 2024-12-17
  https://access.redhat.com/errata/RHSA-2024:11161
• Oracle Linux Security Advisory ELSA-2024-10381 vom 2024-12-17
  https://linux.oracle.com/errata/ELSA-2024-10381.html
• Oracle Linux Security Advisory ELSA-2024-11161 vom 2024-12-18
  https://linux.oracle.com/errata/ELSA-2024-11161.html
• Red Hat Security Advisory RHSA-2025:0195 vom 2025-01-09
  https://access.redhat.com/errata/RHSA-2025:0195
• Red Hat Security Advisory RHSA-2025:0327 vom 2025-01-15
  https://access.redhat.com/errata/RHSA-2025:0327
• Red Hat Security Advisory RHSA-2025:0368 vom 2025-01-16
  https://access.redhat.com/errata/RHSA-2025:0368
• Red Hat Security Advisory RHSA-2025:0881 vom 2025-02-03
  https://access.redhat.com/errata/RHSA-2025:0881
• Red Hat Security Advisory RHSA-2025:0879 vom 2025-02-03
  https://access.redhat.com/errata/RHSA-2025:0879
• Red Hat Security Advisory RHSA-2025:0880 vom 2025-02-03
  https://access.redhat.com/errata/RHSA-2025:0880
• Red Hat Security Advisory RHSA-2025:1785 vom 2025-02-25
  https://access.redhat.com/errata/RHSA-2025:1785
• Red Hat Security Advisory RHSA-2025:1802 vom 2025-02-25
  https://access.redhat.com/errata/RHSA-2025:1802