CVE SIGNATURE REPOSITORY

Verified Linux vulnerabilities correlated with active client package versions.

CVE-2024-6387RegreSSHion: Remote Unauthenticated Code Execution in OpenSSH Server

SEVERITY: CRITICAL

Affected Package: openssh-serverInstalled Version: 1:9.2p1-2+deb12u2Patched In: 1:9.2p1-2+deb12u3

Race condition in OpenSSH's signal handler allows unauthenticated remote code execution as root on glibc-based Linux systems.

PATCH COMMAND

sudo apt-get update && sudo apt-get --only-upgrade install openssh-server

CVE-2021-4034PwnKit: Local Privilege Escalation in Polkit pkexec

SEVERITY: CRITICAL

Affected Package: policykit-1Installed Version: 0.105-31Patched In: 0.105-31+deb11u1

Memory corruption in pkexec allows any unprivileged local user to instantly obtain full root privileges.

PATCH COMMAND

sudo apt-get --only-upgrade install policykit-1 || sudo chmod 0755 /usr/bin/pkexec

CVE-2021-3156Baron Samedit: Heap-based Buffer Overflow in Sudo

SEVERITY: HIGH

Affected Package: sudoInstalled Version: 1.8.27-1+deb10u3Patched In: 1.8.27-1+deb10u4

Flaw in command line parameter unescaping allows local privilege escalation to root without password.

PATCH COMMAND

sudo apt-get --only-upgrade install sudo