VYPR

rpm package

almalinux/libdmmp

pkg:rpm/almalinux/libdmmp

Vulnerabilities (2)

  • CVE-2022-41974Oct 29, 2022
    affected < 0.8.4-22.el8_6.2fixed 0.8.4-22.el8_6.2

    multipath-tools 0.7.0 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited alone or in conjunction with CVE-2022-41973. Local users able to write to UNIX domain sockets can bypass access controls and manipulate the multipath setup. This can lead to lo

  • CVE-2022-41973Oct 29, 2022
    affected < 0.8.4-37.el8fixed 0.8.4-37.el8

    multipath-tools 0.7.7 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited in conjunction with CVE-2022-41974. Local users able to access /dev/shm can change symlinks in multipathd due to incorrect symlink handling, which could lead to controlled file