Lucene search
K

1623 matches found

Veracode
Veracode
added 2019/05/02 4:54 a.m.17 views

Denial Of Service (DoS)

kernel-rt is vulnerable to denial of service DoS. The vulnerability exists through the chaseport function...

4CVSS5.9AI score0.00057EPSS
Exploits0References24Affected Software1
Veracode
Veracode
added 2019/05/02 4:54 a.m.26 views

Privilege Escalation

kernel-rt is vulnerable to privilege escalation. An out-of-bounds access flaw was found in the way SOCKDIAGBYFAMILY Netlink messages were processed in the Linux kernel. A local, unprivileged user could use this flaw to escalate their privileges...

7.2CVSS6.1AI score0.15053EPSS
Exploits12References20Affected Software1
Veracode
Veracode
added 2019/05/02 4:54 a.m.30 views

Authorization Bypass

kernel-rt is vulnerable to authorization bypass. A flaw was found in the way file permission checks for the /dev/cpu/x/msr files were performed in restricted root environments for example, when using a capability-based security model. A local user with the ability to write to these files could us...

6.2CVSS7.2AI score0.02897EPSS
Exploits3References11Affected Software1
Veracode
Veracode
added 2019/05/02 4:53 a.m.29 views

Privilege Escalation

kernel-rt is vulnerable to privilege escalation. A buffer overflow flaw was found in the way UTF-8 characters were converted to UTF-16 in the utf8stoutf16s function of the Linux kernel's FAT file system implementation. A local user able to mount a FAT file system with the "utf8=1" option could us...

6.2CVSS6AI score0.00251EPSS
Exploits0References19Affected Software1
Veracode
Veracode
added 2019/05/02 4:53 a.m.19 views

Information Disclosure

kernel-rt is vulnerable to information disclosure. A memory disclosure flaw was found in the way the loadscript function in the binfmtscript binary format handler handled excessive recursions. A local, unprivileged user could use this flaw to leak kernel stack memory to user-space by executing...

2.1CVSS6.7AI score0.00579EPSS
Exploits1References15Affected Software1
Veracode
Veracode
added 2019/05/02 4:52 a.m.33 views

Denial Of Service (DoS)

The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: A heap-based buffer overflow flaw was found in the Linux kernel's iSCSI target subsystem. A remote attacker could use a specially-crafted iSCSI request to caus...

7.9CVSS6.3AI score0.15108EPSS
Exploits11References21Affected Software1
Veracode
Veracode
added 2019/05/02 4:52 a.m.27 views

Privilege Escalation

The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: A heap-based buffer overflow flaw was found in the Linux kernel's iSCSI target subsystem. A remote attacker could use a specially-crafted iSCSI request to caus...

7.9CVSS6.3AI score0.15108EPSS
Exploits11References22Affected Software1
Veracode
Veracode
added 2019/05/02 4:52 a.m.42 views

Denial Of Service (DoS)

The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: A heap-based buffer overflow flaw was found in the Linux kernel's iSCSI target subsystem. A remote attacker could use a specially-crafted iSCSI request to caus...

7.9CVSS6.3AI score0.15108EPSS
Exploits11References21Affected Software1
Veracode
Veracode
added 2019/05/02 4:52 a.m.33 views

Information Disclosure

The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: A heap-based buffer overflow flaw was found in the Linux kernel's iSCSI target subsystem. A remote attacker could use a specially-crafted iSCSI request to caus...

7.9CVSS6.3AI score0.15108EPSS
Exploits11References26Affected Software2
Veracode
Veracode
added 2019/05/02 4:52 a.m.34 views

Information Disclosure

The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: A heap-based buffer overflow flaw was found in the Linux kernel's iSCSI target subsystem. A remote attacker could use a specially-crafted iSCSI request to caus...

7.9CVSS6.3AI score0.15108EPSS
Exploits11References20Affected Software1
Veracode
Veracode
added 2019/05/02 4:52 a.m.28 views

Denial Of Service (DoS)

The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: A heap-based buffer overflow flaw was found in the Linux kernel's iSCSI target subsystem. A remote attacker could use a specially-crafted iSCSI request to caus...

7.9CVSS6.3AI score0.15108EPSS
Exploits11References17Affected Software1
Veracode
Veracode
added 2019/05/02 4:52 a.m.28 views

Denial Of Service (DoS)

kernel-rt is vulnerable to denial of service. A flaw was found in the Linux kernel's Performance Events implementation. On systems with certain Intel processors, a local, unprivileged user could use this flaw to cause a denial of service by leveraging the perf subsystem to write into the reserved...

4.7CVSS5.2AI score0.00048EPSS
Exploits1References12Affected Software1
Veracode
Veracode
added 2019/05/02 4:52 a.m.30 views

Denial Of Service (DoS)

The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: A heap-based buffer overflow flaw was found in the Linux kernel's iSCSI target subsystem. A remote attacker could use a specially-crafted iSCSI request to caus...

7.9CVSS6.3AI score0.15108EPSS
Exploits11References25Affected Software1
Veracode
Veracode
added 2019/05/02 4:42 a.m.35 views

Denial Of Service (DoS)

The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: A memory leak flaw was found in the way the Linux kernel's memory subsystem handled resource clean up in the mmap failure path when the MAPHUGETLB flag was set...

4.9CVSS5.5AI score0.002EPSS
Exploits4References12Affected Software1
Veracode
Veracode
added 2019/05/02 4:41 a.m.27 views

Denial Of Service (DoS)

kernel-rt is vulnerable to denial of service. A local user is able to crash the process in a divide-by-zero error and kernel oops by reading TCP stats...

4.7CVSS6.9AI score0.00058EPSS
Exploits1References26Affected Software1
Veracode
Veracode
added 2019/05/02 4:41 a.m.33 views

Information Disclosure

kernel-rt is vulnerable to information disclosure. Local users are able to obtain confidential information from the kernel stack memory via recvfrom or recvmsgsystem call on an RDS socket. due to failure to initialize certain structure member in the rdsrecvmsg function in net/rds/recv.c...

2.1CVSS5.3AI score0.00169EPSS
Exploits2References26Affected Software1
Veracode
Veracode
added 2019/05/02 4:41 a.m.26 views

Netlink Messages Spoofing

kernel-rt is vulnerable to message spoofing. A flaw was found in the way Netlink messages without SCMCREDENTIALS used for authentication data set were handled. When not explicitly set, the data was sent but with all values set to 0, including the process ID and user ID, causing the Netlink messag...

1.9CVSS7.4AI score0.00092EPSS
Exploits2References20Affected Software1
Veracode
Veracode
added 2019/05/02 4:41 a.m.28 views

Denial Of Service (DoS)

kernel-rt is vulnerable to denial of service. A local user is able to crash the system via vectors involving munmap and close system call due to multiple race conditions in the function madviseremove in mm/madvise.c...

6.2CVSS7AI score0.0009EPSS
Exploits2References25Affected Software1
Veracode
Veracode
added 2019/05/02 4:41 a.m.23 views

Denial Of Service (DoS)

kernel-rt is vulnerable to denial of service A use-after-free flaw was found in the Linux kernel's memory management subsystem in the way quota handling for huge pages was performed. A local, unprivileged user could use this flaw to cause a denial of service or, potentially, escalate their...

4CVSS5.3AI score0.0008EPSS
Exploits0References21Affected Software1
Veracode
Veracode
added 2019/05/02 4:41 a.m.31 views

Denial Of Service (DoS)

kernel-rt is vulnerable to denial of service. A heap-based buffer overflow in the function udfloadlogicalvol in fs/udf/super.c allows remote attackers to crash the system using a malicious UDF filesystem...

7.6CVSS7.6AI score0.04779EPSS
Exploits1References24Affected Software1
Rows per page
Query Builder