Tuned
by Red Hat
Source repositories
CVEs (4)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-52336 | Hig | 0.44 | 7.8 | 0.00 | Nov 26, 2024 | A script injection vulnerability was identified in the Tuned package. The `instance_create()` D-Bus function can be called by locally logged-in users without authentication. This flaw allows a local non-privileged user to execute a D-Bus call with `script_pre` or `script_post`… | ||
| CVE-2012-6136 | Med | 0.36 | 5.5 | 0.00 | Nov 20, 2019 | tuned 2.10.0 creates its PID file with insecure permissions which allows local users to kill arbitrary processes. | ||
| CVE-2013-1820 | Med | 0.36 | 5.5 | 0.00 | Nov 8, 2019 | tuned before 2.x allows local users to kill running processes due to insecure permissions with tuned's ktune service. | ||
| CVE-2024-52337 | Med | 0.29 | 5.5 | 0.00 | Nov 26, 2024 | A log spoofing flaw was found in the Tuned package due to improper sanitization of some API arguments. This flaw allows an attacker to pass a controlled sequence of characters; newlines can be inserted into the log. Instead of the 'evil' the attacker could mimic a valid TuneD… |
- risk 0.44cvss 7.8epss 0.00
A script injection vulnerability was identified in the Tuned package. The `instance_create()` D-Bus function can be called by locally logged-in users without authentication. This flaw allows a local non-privileged user to execute a D-Bus call with `script_pre` or `script_post`…
- risk 0.36cvss 5.5epss 0.00
tuned 2.10.0 creates its PID file with insecure permissions which allows local users to kill arbitrary processes.
- risk 0.36cvss 5.5epss 0.00
tuned before 2.x allows local users to kill running processes due to insecure permissions with tuned's ktune service.
- risk 0.29cvss 5.5epss 0.00
A log spoofing flaw was found in the Tuned package due to improper sanitization of some API arguments. This flaw allows an attacker to pass a controlled sequence of characters; newlines can be inserted into the log. Instead of the 'evil' the attacker could mimic a valid TuneD…