https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 22:26:11 +0000 https://cve.radiocsirt.org/vuln/2nga002579 <p>ABB is aware of public reports of a vulnerabilities in product versions listed as affected in this advisory. An attacker who successfully exploited these vulnerabilities could cause the product to stop, make the product inacces-sible, take remote control of the product or insert and run arbitrary code. As part of ABB product lifecycle policy, once a product transitions to end-of-life, we discontinue maintenance, security patches, and technical support to focus on current and future technologies. While the product will continue to function, we strongly recommend implementing mitigations defined in this document, such as using a private APN cellular network between Arctic wireless gateways and ARM600 for establishing VPN tunnels, to mitigate security risks and avoid potential vulnerabilities. As part of ABB product lifecycle policy, once a product transitions to Limited state, we discontinue maintenance, security patches, and technical support to focus on current and future technologies. While the product will continue to function, we strongly recommend implementing mitigations defined in this document to mitigate security risks.</p> <p>ABB is aware of public reports of a vulnerabilities in product versions listed as affected in this advisory. An attacker who successfully exploited these vulnerabilities could cause the product to stop, make the product inacces-sible, take remote control of the product or insert and run arbitrary code. As part of ABB product lifecycle policy, once a product transitions to end-of-life, we discontinue maintenance, security patches, and technical support to focus on current and future technologies. While the product will continue to function, we strongly recommend implementing mitigations defined in this document, such as using a private APN cellular network between Arctic wireless gateways and ARM600 for establishing VPN tunnels, to mitigate security risks and avoid potential vulnerabilities. As part of ABB product lifecycle policy, once a product transitions to Limited state, we discontinue maintenance, security patches, and technical support to focus on current and future technologies. While the product will continue to function, we strongly recommend implementing mitigations defined in this document to mitigate security risks.</p> https://cve.radiocsirt.org/vuln/2nga002579 https://cve.radiocsirt.org/vuln/alsa-2022:7185 <p><strong>Affected:</strong> AlmaLinux:9: device-mapper-multipath, AlmaLinux:9: device-mapper-multipath-devel, AlmaLinux:9: device-mapper-multipath-libs, AlmaLinux:9: kpartx</p> <p>The device-mapper-multipath packages provide tools that use the device-mapper multipath kernel module to manage multipath devices.</p> <p>Security Fix(es):</p> <p>* device-mapper-multipath: Authorization bypass, multipathd daemon listens for client connections on an abstract Unix socket (CVE-2022-41974)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: device-mapper-multipath, AlmaLinux:9: device-mapper-multipath-devel, AlmaLinux:9: device-mapper-multipath-libs, AlmaLinux:9: kpartx</p> <p>The device-mapper-multipath packages provide tools that use the device-mapper multipath kernel module to manage multipath devices.</p> <p>Security Fix(es):</p> <p>* device-mapper-multipath: Authorization bypass, multipathd daemon listens for client connections on an abstract Unix socket (CVE-2022-41974)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2022:7185 https://cve.radiocsirt.org/vuln/bdu:2022-06669 bdu:2022-06669 https://cve.radiocsirt.org/vuln/bdu:2022-06669 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0120 certfr-2023-avi-0120 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0120 https://cve.radiocsirt.org/vuln/euvd-2026-19560 EUVD-2026-19560 https://cve.radiocsirt.org/vuln/euvd-2026-19560 https://cve.radiocsirt.org/vuln/fkie_cve-2022-41974 <p>multipath-tools 0.7.0 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited alone or in conjunction with CVE-2022-41973. Local users able to write to UNIX domain sockets can bypass access controls and manipulate the multipath setup. This can lead to local privilege escalation to root. This occurs because an attacker can repeat a keyword, which is mishandled because arithmetic ADD is used instead of bitwise OR.</p> <p>multipath-tools 0.7.0 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited alone or in conjunction with CVE-2022-41973. Local users able to write to UNIX domain sockets can bypass access controls and manipulate the multipath setup. This can lead to local privilege escalation to root. This occurs because an attacker can repeat a keyword, which is mishandled because arithmetic ADD is used instead of bitwise OR.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-41974 https://cve.radiocsirt.org/vuln/ghsa-46cw-54vx-86g5 <p>multipath-tools 0.7.0 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited alone or in conjunction with CVE-2022-41973. Local users able to write to UNIX domain sockets can bypass access controls and manipulate the multipath setup. This can lead to local privilege escalation to root. This occurs because an attacker can repeat a keyword, which is mishandled because arithmetic ADD is used instead of bitwise OR.</p> <p>multipath-tools 0.7.0 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited alone or in conjunction with CVE-2022-41973. Local users able to write to UNIX domain sockets can bypass access controls and manipulate the multipath setup. This can lead to local privilege escalation to root. This occurs because an attacker can repeat a keyword, which is mishandled because arithmetic ADD is used instead of bitwise OR.</p> https://cve.radiocsirt.org/vuln/ghsa-46cw-54vx-86g5 https://cve.radiocsirt.org/vuln/gsd-2022-41974 gsd-2022-41974 https://cve.radiocsirt.org/vuln/gsd-2022-41974 https://cve.radiocsirt.org/vuln/icsa-25-105-08 <p>ABB is aware of public reports of a vulnerabilities in product versions listed as affected in this advisory. An attacker who successfully exploited these vulnerabilities could cause the product to stop, make the product inacces-sible, take remote control of the product or insert and run arbitrary code. As part of ABB product lifecycle policy, once a product transitions to end-of-life, we discontinue maintenance, security patches, and technical support to focus on current and future technologies. While the product will continue to function, we strongly recommend implementing mitigations defined in this document, such as using a private APN cellular network between Arctic wireless gateways and ARM600 for establishing VPN tunnels, to mitigate security risks and avoid potential vulnerabilities. As part of ABB product lifecycle policy, once a product transitions to Limited state, we discontinue maintenance, security patches, and technical support to focus on current and future technologies. While the product will continue to function, we strongly recommend implementing mitigations defined in this document to mitigate security risks.</p> <p>ABB is aware of public reports of a vulnerabilities in product versions listed as affected in this advisory. An attacker who successfully exploited these vulnerabilities could cause the product to stop, make the product inacces-sible, take remote control of the product or insert and run arbitrary code. As part of ABB product lifecycle policy, once a product transitions to end-of-life, we discontinue maintenance, security patches, and technical support to focus on current and future technologies. While the product will continue to function, we strongly recommend implementing mitigations defined in this document, such as using a private APN cellular network between Arctic wireless gateways and ARM600 for establishing VPN tunnels, to mitigate security risks and avoid potential vulnerabilities. As part of ABB product lifecycle policy, once a product transitions to Limited state, we discontinue maintenance, security patches, and technical support to focus on current and future technologies. While the product will continue to function, we strongly recommend implementing mitigations defined in this document to mitigate security risks.</p> https://cve.radiocsirt.org/vuln/icsa-25-105-08 https://cve.radiocsirt.org/vuln/msrc_cve-2022-41974 msrc_CVE-2022-41974 https://cve.radiocsirt.org/vuln/msrc_cve-2022-41974 https://cve.radiocsirt.org/vuln/oesa-2022-2050 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: multipath-tools, openEuler:20.03-LTS-SP3: multipath-tools, openEuler:22.03-LTS: multipath-tools</p> <p>This package provides the multipath tool and the multipathd daemon to manage dm-multipath devices. multipath can detect and set up multipath maps. multipathd sets up multipath maps automatically, monitors path devices for failure, removal, or addition, and applies the necessary changes to the multipath maps to ensure continuous availability of the map devices. Security Fix(es): multipath-tools 0.7.0 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited alone or in conjunction with CVE-2022-41973. Local users able to write to UNIX domain sockets can bypass access controls and manipulate the multipath setup. This can lead to local privilege escalation to root. This occurs because an attacker can repeat a keyword, which is mishandled because arithmetic ADD is used instead of bitwise OR.(CVE-2022-41974)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: multipath-tools, openEuler:20.03-LTS-SP3: multipath-tools, openEuler:22.03-LTS: multipath-tools</p> <p>This package provides the multipath tool and the multipathd daemon to manage dm-multipath devices. multipath can detect and set up multipath maps. multipathd sets up multipath maps automatically, monitors path devices for failure, removal, or addition, and applies the necessary changes to the multipath maps to ensure continuous availability of the map devices. Security Fix(es): multipath-tools 0.7.0 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited alone or in conjunction with CVE-2022-41973. Local users able to write to UNIX domain sockets can bypass access controls and manipulate the multipath setup. This can lead to local privilege escalation to root. This occurs because an attacker can repeat a keyword, which is mishandled because arithmetic ADD is used instead of bitwise OR.(CVE-2022-41974)</p> https://cve.radiocsirt.org/vuln/oesa-2022-2050 https://cve.radiocsirt.org/vuln/rhsa-2022:7185 <p>device-mapper-multipath: Authorization bypass, multipathd daemon listens for client connections on an abstract Unix socket</p> <p>device-mapper-multipath: Authorization bypass, multipathd daemon listens for client connections on an abstract Unix socket</p> https://cve.radiocsirt.org/vuln/rhsa-2022:7185 https://cve.radiocsirt.org/vuln/rhsa-2022:7187 <p>device-mapper-multipath: Authorization bypass, multipathd daemon listens for client connections on an abstract Unix socket</p> <p>device-mapper-multipath: Authorization bypass, multipathd daemon listens for client connections on an abstract Unix socket</p> https://cve.radiocsirt.org/vuln/rhsa-2022:7187 https://cve.radiocsirt.org/vuln/suse-su-2022:3707-1 <p>Security update for multipath-tools</p> <p>Security update for multipath-tools</p> https://cve.radiocsirt.org/vuln/suse-su-2022:3707-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-41974 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: multipath-tools, Ubuntu:16.04:LTS: multipath-tools, Ubuntu:18.04:LTS: multipath-tools, Ubuntu:20.04:LTS: multipath-tools, Ubuntu:22.04:LTS: multipath-tools</p> <p>multipath-tools 0.7.0 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited alone or in conjunction with CVE-2022-41973. Local users able to write to UNIX domain sockets can bypass access controls and manipulate the multipath setup. This can lead to local privilege escalation to root. This occurs because an attacker can repeat a keyword, which is mishandled because arithmetic ADD is used instead of bitwise OR.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: multipath-tools, Ubuntu:16.04:LTS: multipath-tools, Ubuntu:18.04:LTS: multipath-tools, Ubuntu:20.04:LTS: multipath-tools, Ubuntu:22.04:LTS: multipath-tools</p> <p>multipath-tools 0.7.0 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited alone or in conjunction with CVE-2022-41973. Local users able to write to UNIX domain sockets can bypass access controls and manipulate the multipath setup. This can lead to local privilege escalation to root. This occurs because an attacker can repeat a keyword, which is mishandled because arithmetic ADD is used instead of bitwise OR.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-41974 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1864 <p>Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1864