Lucene search
+L

11858 matches found

NVD
NVD
added 2022/08/25 6:15 p.m.23 views

CVE-2022-2991

A heap-based buffer overflow was found in the Linux kernel's LightNVM subsystem. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. This vulnerability allows a local attacker to escalate privileges and...

6.7CVSS0.00446EPSS
SaveExploits0References2
Prion
Prion
added 2022/08/25 6:15 p.m.22 views

Heap overflow

A heap-based buffer overflow was found in the Linux kernel's LightNVM subsystem. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. This vulnerability allows a local attacker to escalate privileges and...

4CVSS6.9AI score0.00446EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/08/25 5:24 p.m.37 views

CVE-2022-2991

A heap-based buffer overflow was found in the Linux kernel's LightNVM subsystem. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. This vulnerability allows a local attacker to escalate privileges and...

7.6AI score0.00446EPSS
SaveExploits0References2
Ubuntu
Ubuntu
added 2022/08/25 3:58 a.m.126 views

USN-5582-1: Linux kernel (Azure CVM) vulnerabilities

Arthur Mongodin discovered that the netfilter subsystem in the Linux kernel did not properly perform data validation. A local attacker could use this to escalate privileges in certain situations. CVE-2022-34918 Zhenpeng Lin discovered that the network packet scheduler implementation in the Linux...

7.8CVSS7.6AI score0.10458EPSS
SaveExploits25
Tenable Nessus
Tenable Nessus
added 2022/08/25 12:00 a.m.51 views

Ubuntu 20.04 LTS : Linux kernel (Azure CVM) vulnerabilities (USN-5582-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5582-1 advisory. Arthur Mongodin discovered that the netfilter subsystem in the Linux kernel did not properly perform data validation. A local attacker could use this to...

7.8CVSS7.8AI score0.10458EPSS
SaveExploits25References12
Ubuntu
Ubuntu
added 2022/08/24 3:49 p.m.170 views

USN-5580-1: Linux kernel (AWS) vulnerabilities

It was discovered that the framebuffer driver on the Linux kernel did not verify size limits when changing font or screen size, leading to an out-of- bounds write. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2021-33655 It was...

7.8CVSS7.2AI score0.07156EPSS
SaveExploits1
Ubuntu
Ubuntu
added 2022/08/24 9:09 a.m.67 views

LSN-0089-1: Kernel Live Patch Security Notice

Aaron Adams discovered that the netfilter subsystem in the Linux kernel did not properly handle the removal of stateful expressions in some situations, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or execute arbitrary code...

7.8CVSS7.5AI score0.10458EPSS
SaveExploits29
OSV
OSV
added 2022/08/24 7:09 a.m.17 views

LSN-0089-1 Kernel Live Patch Security Notice

Aaron Adams discovered that the netfilter subsystem in the Linux kernel did not properly handle the removal of stateful expressions in some situations, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or execute arbitrary code...

7.8CVSS7.8AI score0.10458EPSS
SaveExploits29References9
Positive Technologies
Positive Technologies
added 2022/08/24 12:00 a.m.7 views

PT-2022-4880 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to an out-of-bounds access in the Linux kernel sound subsystem, specifically with the get ctl id hash function. This occurs when the id-name parameter does not end...

7.8CVSS6.4AI score0.00242EPSS
SaveExploits0References14
OSV
OSV
added 2022/08/23 4:15 p.m.7 views

DEBIAN-CVE-2021-3759

A memory overflow vulnerability was found in the Linux kernel’s ipc functionality of the memcg subsystem, in the way a user calls the semget function multiple times, creating semaphores. This flaw allows a local user to starve the resources, causing a denial of service. The highest threat from th...

5.5CVSS6.2AI score0.0036EPSS
SaveExploits0References1
Prion
Prion
added 2022/08/23 4:15 p.m.41 views

Design/Logic Flaw

A memory overflow vulnerability was found in the Linux kernel’s ipc functionality of the memcg subsystem, in the way a user calls the semget function multiple times, creating semaphores. This flaw allows a local user to starve the resources, causing a denial of service. The highest threat from th...

1.7CVSS6AI score0.0036EPSS
SaveExploits0References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/08/23 12:00 a.m.69 views

Amazon Linux 2 : kernel (ALASKERNEL-5.15-2022-006)

The version of kernel installed on the remote host is prior to 5.15.57-29.131. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2022-006 advisory. A flaw was found in hw. Mis-trained branch predictions for return instructions may allow arbitrary...

7.8CVSS7.4AI score0.04831EPSS
SaveExploits1References14
CVE
CVE
added 2022/08/23 12:00 a.m.391 views

CVE-2021-3759

CVE-2021-3759 is a memory overflow in the Linux kernel memcg IPC path, where repeated semget calls by a local user can exhaust memory and cause a denial of service. Public docs confirm impact is local and availability-focused. Debian LTS advisory DLA-3244-1 and Amazon ALAS2KERNEL advisories for k...

5.5CVSS6.3AI score0.0036EPSS
SaveExploits0References4Affected Software1
Debian CVE
Debian CVE
added 2022/08/23 12:00 a.m.66 views

CVE-2021-3759

A memory overflow vulnerability was found in the Linux kernel’s ipc functionality of the memcg subsystem, in the way a user calls the semget function multiple times, creating semaphores. This flaw allows a local user to starve the resources, causing a denial of service. The highest threat from th...

5.5CVSS6.3AI score0.0036EPSS
SaveExploits0
OSV
OSV
added 2022/08/22 3:08 p.m.7 views

SUSE-SU-2022:2869-1 Security update for u-boot

This update for u-boot fixes the following issues: - CVE-2022-33103: Fixed a flaw in the squashfs subsystem that could lead to arbitrary code execution bsc1201213...

7.8CVSS7.8AI score0.00459EPSS
SaveExploits0References3
OSV
OSV
added 2022/08/22 3:08 p.m.7 views

SUSE-SU-2022:2868-1 Security update for u-boot

This update for u-boot fixes the following issues: - CVE-2022-33103: Fixed a flaw in the squashfs subsystem that could lead to arbitrary code execution bsc1201213...

7.8CVSS7.8AI score0.00459EPSS
SaveExploits0References3
The Hacker News
The Hacker News
added 2022/08/22 1:05 p.m.273 views

"As Nasty as Dirty Pipe" — 8 Year Old Linux Kernel Vulnerability Uncovered

Details of an eight-year-old security vulnerability in the Linux kernel have emerged that the researchers say is "as nasty as Dirty Pipe." Dubbed DirtyCred by a group of academics from Northwestern University, the security weakness exploits a previously unknown flaw CVE-2022-2588 to escalate...

7.8CVSS1.3AI score0.89721EPSS
SaveExploits108
RedhatCVE
RedhatCVE
added 2022/08/19 5:19 p.m.36 views

CVE-2022-36879

A flaw was found in the Linux kernel’s IP framework for transforming packets XFRM subsystem. An error while resolving policies in xfrmbundlelookup causes the refcount to drop twice, leading to a possible crash and a denial of service. Mitigation Mitigation for this issue is either not available o...

5.5CVSS0.8AI score0.00315EPSS
SaveExploits0References3
Prion
Prion
added 2022/08/18 8:15 p.m.21 views

Input validation

Incomplete cleanup in a firmware subsystem for IntelR SPS before versions SPSE304.08.04.330.0 and SPSE304.01.04.530.0 may allow a privileged user to potentially enable denial of service via local access...

1.4CVSS4.5AI score0.00204EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2022/08/18 7:56 p.m.4 views

CVE-2022-26074

Incomplete cleanup in a firmware subsystem for IntelR SPS before versions SPSE304.08.04.330.0 and SPSE304.01.04.530.0 may allow a privileged user to potentially enable denial of service via local access...

6.6AI score0.00204EPSS
SaveExploits0References2
Rows per page
Query Builder