The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The Device Mapper multipathing driver (aka multipath-tools or device-mapper-multipath) 0.4.8, as used in SUSE openSUSE, SUSE Linux Enterprise Server (SLES), Fedora, and possibly other operating systems, uses world-writable permissions for the socket file (aka /var/run/multipathd.sock), which allows local users to send arbitrary commands to the multipath daemon.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade device-mapper-multipath | Dec 1, 2016 | Mar 30, 2009 |
| Debian | — | Upgrade multipath-tools | Jul 30, 2024 | Mar 30, 2009 |
| Gentoo Linux | — | Upgrade sys-fs/multipath-tools. | Oct 30, 2017 | Mar 30, 2009 |
| Oracle_linux | — | Upgrade device-mapper-multipathUpgrade kpartx | Oct 16, 2024 | Mar 30, 2009 |
| Suse | — | Upgrade multipath-toolsUpgrade kpartx | Feb 17, 2015 | Mar 30, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub