PatchTheCVEtoaruos project vulnerabilities
Recent CVEs affecting toaruos project products. 5 tracked.
toaruos project has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2019-06-29. Highest priority: CVE-2019-13049 (score 43/100).
- CVE-2019-13049 HIGH 7.8 MITIGATE An integer wrap in kernel/sys/syscall.c in ToaruOS 1.10.10 allows users to map arbitrary kernel pages into use
- CVE-2019-13048 MEDIUM 5.5 UPGRADE kernel/sys/syscall.c in ToaruOS through 1.10.9 allows a denial of service upon a critical error in certain sys
- CVE-2019-13047 HIGH 7.8 UPGRADE kernel/sys/syscall.c in ToaruOS through 1.10.9 has incorrect access control in sys_sysfunc case 9 for TOARU_SY
- CVE-2019-13046 HIGH 7.8 UPGRADE linker/linker.c in ToaruOS through 1.10.9 has insecure LD_LIBRARY_PATH handling in setuid applications.
- CVE-2019-12937 HIGH 7.8 UPGRADE apps/gsudo.c in gsudo in ToaruOS through 1.10.9 has a buffer overflow allowing local privilege escalation to t
FAQ
How do I fix toaruos project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is toaruos project being exploited right now?
None of the tracked toaruos project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which toaruos project CVE should I patch first?
CVE-2019-13049 currently ranks highest (43/100): An integer wrap in kernel/sys/syscall.c in ToaruOS 1.10.10 allows users to map arbitrary kernel pages into use.