https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 04:52:34 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-274884 EUVD-2026-274884 https://cve.radiocsirt.org/vuln/euvd-2026-274884 https://cve.radiocsirt.org/vuln/fkie_cve-2025-58712 <p>A container privilege escalation flaw was found in certain AMQ Broker images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a non-root user, can leverage their membership in the root group to modify the /etc/passwd file. This could allow the attacker to add a new user with any arbitrary UID, including UID 0, leading to full root privileges within the container.</p> <p>A container privilege escalation flaw was found in certain AMQ Broker images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a non-root user, can leverage their membership in the root group to modify the /etc/passwd file. This could allow the attacker to add a new user with any arbitrary UID, including UID 0, leading to full root privileges within the container.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-58712 https://cve.radiocsirt.org/vuln/ghsa-r36m-fwrr-9f4g <p>A container privilege escalation flaw was found in certain AMQ Broker images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a non-root user, can leverage their membership in the root group to modify the /etc/passwd file. This could allow the attacker to add a new user with any arbitrary UID, including UID 0, leading to full root privileges within the container.</p> <p>A container privilege escalation flaw was found in certain AMQ Broker images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a non-root user, can leverage their membership in the root group to modify the /etc/passwd file. This could allow the attacker to add a new user with any arbitrary UID, including UID 0, leading to full root privileges within the container.</p> https://cve.radiocsirt.org/vuln/ghsa-r36m-fwrr-9f4g https://cve.radiocsirt.org/vuln/rhsa-2025:17562 <p>amq: privilege escalation via excessive /etc/passwd permissions</p> <p>amq: privilege escalation via excessive /etc/passwd permissions</p> https://cve.radiocsirt.org/vuln/rhsa-2025:17562 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2240 <p>Ein lokaler Angreifer kann eine Schwachstelle in Red Hat JBoss A-MQ ausnutzen, um seine Privilegien zu erhöhen.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in Red Hat JBoss A-MQ ausnutzen, um seine Privilegien zu erhöhen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2240