Page 3 - Small Computer System Interface News Today : Breaking News, Live Updates & Top Stories | Vimarsana

A trio of security holes CVE-2021-27365, CVE-2021-27363, and CVE-2021-27364  was found by security company GRIMM researchers in an almost forgotten corner of the mainline Linux kernel. The first two of these have a Common Vulnerability Scoring System (CVSS) score above 7, which is high. While you may not have had a SCSI or iSCSI drive in ages, these 15 years old bugs are still around. One of them could be used in a Local Privilege Escalation (LPE) attack. In other words, a normal user could use them to become the root user.
Don t let the word local fool you. As Adam Nichols, Principal of Software Security at GRIMM, said: These issues make the impact of any remotely exploitable vulnerability more severe. Enterprises running publicly facing servers would be at the most risk. ....

Adam Nichols , Principal Of Software Security , Small Computer System Interface , Common Vulnerability Scoring System , Local Privilege Escalation , Software Security , Remote Direct Memory Access , Red Hat Enterprise Linux , Enterprise Server , பண்படாமனித இயல்பு நிக்கோல்கள் , ப்ரிந்ஸிபல் ஆஃப் மென்பொருள் பாதுகாப்பு , சிறிய கணினி அமைப்பு இடைமுகம் , மென்பொருள் பாதுகாப்பு , தொலைநிலை நேரடி நினைவு நுழைவு , சிவப்பு தொப்பி நிறுவன லினக்ஸ் , நிறுவன சேவையகம் ,