https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 21:34:35 +0000 https://cve.radiocsirt.org/vuln/alsa-2023:1067 <p><strong>Affected:</strong> AlmaLinux:9: pesign</p> <p>The pesign packages provide the pesign utility for signing UEFI binaries as well as other associated tools.</p> <p>Security Fix(es):</p> <p>* pesign: Local privilege escalation on pesign systemd service (CVE-2022-3560)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: pesign</p> <p>The pesign packages provide the pesign utility for signing UEFI binaries as well as other associated tools.</p> <p>Security Fix(es):</p> <p>* pesign: Local privilege escalation on pesign systemd service (CVE-2022-3560)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2023:1067 https://cve.radiocsirt.org/vuln/bdu:2023-00640 bdu:2023-00640 https://cve.radiocsirt.org/vuln/bdu:2023-00640 https://cve.radiocsirt.org/vuln/euvd-2026-225385 EUVD-2026-225385 https://cve.radiocsirt.org/vuln/euvd-2026-225385 https://cve.radiocsirt.org/vuln/fkie_cve-2022-3560 <p>A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the &#39;pesign&#39; group. However, the script doesn&#39;t check for symbolic links. This could allow an attacker to gain access to privileged files and directories via a path traversal attack.</p> <p>A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the &#39;pesign&#39; group. However, the script doesn&#39;t check for symbolic links. This could allow an attacker to gain access to privileged files and directories via a path traversal attack.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-3560 https://cve.radiocsirt.org/vuln/ghsa-w2gm-3gx9-m2p2 <p>A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the &#39;pesign&#39; group. However, the script doesn&#39;t check for symbolic links. This could allow an attacker to gain access to privileged files and directories via a path traversal attack.</p> <p>A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the &#39;pesign&#39; group. However, the script doesn&#39;t check for symbolic links. This could allow an attacker to gain access to privileged files and directories via a path traversal attack.</p> https://cve.radiocsirt.org/vuln/ghsa-w2gm-3gx9-m2p2 https://cve.radiocsirt.org/vuln/gsd-2022-3560 gsd-2022-3560 https://cve.radiocsirt.org/vuln/gsd-2022-3560 https://cve.radiocsirt.org/vuln/msrc_cve-2022-3560 msrc_CVE-2022-3560 https://cve.radiocsirt.org/vuln/msrc_cve-2022-3560 https://cve.radiocsirt.org/vuln/oesa-2023-1119 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: pesign, openEuler:20.03-LTS-SP3: pesign, openEuler:22.03-LTS: pesign</p> <p>pesign is a command line tool for manipulating signatures and cryptographic digests of UEFI applications. Security Fix(es): A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the &amp;apos;pesign&amp;apos; group. However, the script doesn&amp;apos;t check for symbolic links. This could allow an attacker to gain access to privileged files and directories via a path traversal attack.(CVE-2022-3560)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: pesign, openEuler:20.03-LTS-SP3: pesign, openEuler:22.03-LTS: pesign</p> <p>pesign is a command line tool for manipulating signatures and cryptographic digests of UEFI applications. Security Fix(es): A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the &amp;apos;pesign&amp;apos; group. However, the script doesn&amp;apos;t check for symbolic links. This could allow an attacker to gain access to privileged files and directories via a path traversal attack.(CVE-2022-3560)</p> https://cve.radiocsirt.org/vuln/oesa-2023-1119 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12672-1 <p>pesign-113-11.1 on GA media</p> <p>pesign-113-11.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:12672-1 https://cve.radiocsirt.org/vuln/rhsa-2023:1065 <p>pesign: Local privilege escalation on pesign systemd service</p> <p>pesign: Local privilege escalation on pesign systemd service</p> https://cve.radiocsirt.org/vuln/rhsa-2023:1065 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-3560 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: pesign, Ubuntu:18.04:LTS: pesign, Ubuntu:20.04:LTS: pesign, Ubuntu:22.04:LTS: pesign, Ubuntu:24.04:LTS: pesign, Ubuntu:25.10: pesign, Ubuntu:26.04:LTS: pesign</p> <p>A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the &#39;pesign&#39; group. However, the script doesn&#39;t check for symbolic links. This could allow an attacker to gain access to privileged files and directories via a path traversal attack.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: pesign, Ubuntu:18.04:LTS: pesign, Ubuntu:20.04:LTS: pesign, Ubuntu:22.04:LTS: pesign, Ubuntu:24.04:LTS: pesign, Ubuntu:25.10: pesign, Ubuntu:26.04:LTS: pesign</p> <p>A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the &#39;pesign&#39; group. However, the script doesn&#39;t check for symbolic links. This could allow an attacker to gain access to privileged files and directories via a path traversal attack.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-3560 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0577 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux in &#34;pesign&#34; ausnutzen, um seine Privilegien zu erhöhen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux in &#34;pesign&#34; ausnutzen, um seine Privilegien zu erhöhen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0577