CyberSecBulletin

Opensvc vulnerabilities

We track 2 vulnerabilities in Opensvc products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 29, 2022.

2vulnerabilities
0critical
2high
0exploited
7.8average CVSS score

Latest Opensvc vulnerabilities

  • 7.8 High severity

    Multipath-tools: Improper Privilege Management

    CVE-2022-41974Opensvc

    multipath-tools 0.7.0 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited alone or in conjunction with CVE-2022-41973. Local users able to write to UNIX domain sockets can bypass access controls and manipulate the multipath setup.

  • 7.8 High severity

    Multipath-tools: Improper Link Resolution Before File Access

    CVE-2022-41973Opensvc

    multipath-tools 0.7.7 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited in conjunction with CVE-2022-41974. Local users able to access /dev/shm can change symlinks in multipathd due to incorrect symlink handling, which could lea