Lucene search

K
redosRedosROS-20240927-05
HistorySep 27, 2024 - 12:00 a.m.

ROS-20240927-05

2024-09-2700:00:00
redos.red-soft.ru
1

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

AI Score

7.5

Confidence

High

Vulnerability in the af_unix component’s unix_release_sock/unix_stream_sendmsg function is related to competitive
access to a resource (race condition). Exploitation of the vulnerability could allow an attacker to cause a denial of
service

A vulnerability in the drivers/media/test-drivers/vidtv/vidtv_psi.c component of the Linux operating system kernel
is related to pointer dereferencing errors. Exploitation of the vulnerability allows an attacker to cause a denial of
denial of service

A vulnerability in the nilfs2 component of the Linux operating system kernel is related to memory usage after a
release. Exploitation of the vulnerability could allow an attacker to impact the
confidentiality, integrity, and availability

Vulnerability in the drm/mediatek component of the Linux operating system kernel is related to resource management errors.
resources. Exploitation of the vulnerability could allow an attacker to cause a denial of service

Vulnerability of drivers/clk/mediatek/clk-mt7629.c component of Linux kernel is related to pointer dereferencing errors.
pointer dereferencing errors. Exploitation of the vulnerability could allow an attacker to cause a denial of
denial of service

Vulnerability in the fs/pstore/platform.c component of the Linux kernel is related to pointer dereferencing errors.
pointer dereferencing errors. Exploitation of the vulnerability allows an attacker to cause a denial of service

Vulnerability of the smb_inherit_dacl() function of the Linux kernel is related to writing outside the buffer boundaries.
buffer. Exploitation of the vulnerability could allow an attacker to gain access to sensitive data,
compromise their integrity, and cause a denial of service

A vulnerability in the RDMA/hns component of the Linux operating system kernel is related to improper blocking.
Exploitation of the vulnerability could allow an attacker to cause a denial of service

Vulnerability in arch/s390/boot/decompressor.c component of Linux operating system kernel is related to
buffer copying without input validation. Exploitation of the vulnerability allows an attacker to gain
access to confidential data, compromise its integrity, and cause a denial of service.

A vulnerability in the RDMA/hns component of the Linux operating system kernel is related to resource management errors.
Exploitation of the vulnerability could allow an attacker to cause a denial of service

Vulnerability in the net/wireless/nl80211.c component of the Linux operating system kernel is related to incorrect power consumption limitation.
power consumption limitation. Exploitation of the vulnerability could allow an attacker acting remotely to gain access to confidential data.
remotely to gain access to sensitive data and cause a denial of service

A vulnerability in the Linux operating system kernel is related to improper bitwise integer offset.
Exploitation of the vulnerability could allow an attacker to gain access to sensitive data, compromise its integrity, and cause a denial of service.
integrity, as well as cause a denial of service

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64kernel-lt< 6.1.94-1UNKNOWN

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

AI Score

7.5

Confidence

High