Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

PT-2021-8069 · Linux +3 · Linux Kernel +3

🗓️ 13 Dec 2021 00:00:00Reported by Positive TechnologiesType 
ptsecurity
 ptsecurity🔗 dbugs.ptsecurity.com👁 11 Views

Linux kernel NFSD out-of-bounds write in nfsd4_decode_bitmap4 from missing sanity checks; local access.

Related
Refs
ReporterTitlePublishedViews
Family
BDU FSTEC		The vulnerability of the x86_emulate_insn function in the arch/x86/kvm/emulate.c component of the Linux operating system’s kernel allows a hacker to cause a service failure.
17 May 202300:00
–bdu_fstec
BDU FSTEC		The vulnerability of the kvm_steal_time_set_preempted() function in the arch/x86/kvm/x86.c module of the Linux operating system allows a hacker to gain access to protected information.
24 May 202300:00
–bdu_fstec
BDU FSTEC		The vulnerability of the prepare_to_relocate() function in the fs/btrfs/relocation.c file of the btrfs file system in the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
16 Jun 202300:00
–bdu_fstec
BDU FSTEC		The vulnerability in the Linux operating system’s IEEE 1394 (FireWire) driver core allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
16 Jun 202300:00
–bdu_fstec
BDU FSTEC		The vulnerability of the amd_sfh_hid_client_init() function in the AMD Sensor Fusion Hub driver for Linux operating systems allows a hacker to induce a service failure.
11 Jul 202300:00
–bdu_fstec
BDU FSTEC		The vulnerability of the submit_lookup_cmds() function in Linux operating systems allows a hacker to cause a service failure.
13 Jul 202300:00
–bdu_fstec
BDU FSTEC		The vulnerability of the mctp_unregister() function in Linux operating systems allows a hacker to trigger a service failure.
13 Jul 202300:00
–bdu_fstec
BDU FSTEC		The vulnerability of the seg6genl_sethmac function in the Linux operating system allows a hacker to disclose sensitive information that is protected by this function.
18 Jul 202300:00
–bdu_fstec
BDU FSTEC		The vulnerability of the Amateur Radio X.25 PLP (Rose) kernel implementation in the Linux operating system allows a intruder to compromise the confidentiality, integrity, and accessibility of the protected information.
19 Jul 202300:00
–bdu_fstec
BDU FSTEC		The vulnerability of the idt77252_exit() function in the drivers/atm/idt77252.c file of the ATM network driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
1 Aug 202300:00
–bdu_fstec
Rows per page
SourceLink
githubwww.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/vmwgfx_fd_priv_esc.rb
githubwww.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0847_dirtypipe.rb
githubwww.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
githubwww.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
githubwww.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
githubwww.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
githubwww.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
githubwww.github.com/Arinerron/CVE-2022-0847-DirtyPipe-Exploit
githubwww.github.com/AlexisAhmed/CVE-2022-0847-DirtyPipe-Exploits
githubwww.github.com/tr3ee/CVE-2022-23222
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
14 Aug 2023 00:00Current
6.9Medium risk
Vulners AI Score6.9
CVSS 3.17.1 - 9.8
CVSS 29
CVSS 38.8
CVSS 48.6
EPSS0.89063
SSVC
linux kernelnetwork file systemnfs serverout of boundsmemory writemissing sanity checksnfsd4_decode_bitmap4local access
11