https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T01:32:16.893157+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2014-3925 CVE-2014-3925 2026-09-30T01:32:17.098236+00:00

sosreport in Red Hat sos 1.7 and earlier on Red Hat Enterprise Linux (RHEL) 5 produces an archive with an fstab file potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a technical-support data stream.

 https://vulnerability.circl.lu/vuln/usn-2845-1 USN-2845-1 — sosreport vulnerabilities 2026-09-30T01:32:17.098535+00:00

Affected: Ubuntu:14.04:LTS: sosreport

Dolev Farhi discovered an information disclosure issue in SoS. If the /etc/fstab file contained passwords, the passwords were included in the SoS report. This issue only affected Ubuntu 14.04 LTS. (CVE-2014-3925)

Mateusz Guzik discovered that SoS incorrectly handled temporary files. A local attacker could possibly use this issue to overwrite arbitrary files or gain access to temporary file contents containing sensitive system information. (CVE-2015-7529)