Lucene search
K

1623 matches found

Veracode
Veracode
added 2019/01/15 9:12 a.m.34 views

Denial Of Service (DoS)

Linux kernel-rt is vulnerable to denial of service. A race condition flaw was found in the way the Linux kernel's SCTP implementation handled sctpaccept during the processing of heartbeat timeout events. A remote attacker could use this flaw to prevent further connections to be accepted by the SC...

6.2CVSS6.3AI score0.00121EPSS
Exploits0References4Affected Software1
Veracode
Veracode
added 2019/01/15 9:11 a.m.42 views

Privilege Escalation

kernel-rt is vulnerable to privilege escalation attacks. The vulnerability exists as an integer overflow in lib/asn1decoder.c in the Linux kernel before 4.6 allows local users to gain privileges via crafted ASN.1 data...

7.8CVSS7.7AI score0.0015EPSS
Exploits0References40Affected Software1
Veracode
Veracode
added 2019/01/15 9:10 a.m.32 views

Privilege Escalation

kernel-rt is vulnerable to privilege escalation attacks. The vulnerability exists as arch/x86/entry/entry64.S in the Linux kernel before 4.1.6 on the x8664 platform mishandles IRET faults in processing NMIs that occurred during userspace execution, which might allow local users to gain privileges...

7.2CVSS6.1AI score0.00219EPSS
Exploits0References32Affected Software1
Veracode
Veracode
added 2019/01/15 9:9 a.m.33 views

Authorization Bypass

kernel-rt is vulnerable to authorization bypass attacks. The vulnerability exists as the Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel modules via a bind system call for an AFALG socket with a module name in the salgname field, a different vulnerability...

2.1CVSS6AI score0.00747EPSS
Exploits1References27Affected Software1
Veracode
Veracode
added 2019/01/15 9:8 a.m.25 views

Denial Of Service (DoS)

kernel-rt is vulnerable to denial of service DoS attacks. The vulnerability exists as the dwalk function in fs/dcache.c in the Linux kernel through 3.17.2 does not properly maintain the semantics of renamelock, which allows local users to cause a denial of service deadlock and system hang via a...

5.5CVSS4.7AI score0.00055EPSS
Exploits1References3Affected Software1
Veracode
Veracode
added 2019/01/15 9:7 a.m.27 views

ASLR Bypass

kernel-rt is vulnerable to ASLR bypass attacks. The vulnerability exists as the vdsoaddr function in arch/x86/vdso/vma.c in the Linux kernel through 3.18.2 does not properly choose memory locations for the vDSO area, which makes it easier for local users to bypass the ASLR protection mechanism by...

2.1CVSS4.8AI score0.00045EPSS
Exploits1References29Affected Software1
Veracode
Veracode
added 2019/01/15 9:7 a.m.32 views

Denial Of Service (DoS)

Linux kernel-rt is vulnerable to denial of service. An integer overflow flaw was found in the way the Linux kernel's netfilter connection tracking implementation loaded extensions. An attacker on a local network could potentially send a sequence of specially crafted packets that would initiate th...

4.9CVSS7.5AI score0.00043EPSS
Exploits0References16Affected Software1
Veracode
Veracode
added 2019/01/15 9:6 a.m.35 views

Denial Of Service

The kernel-rt packages is vulnerable to denial of service DoS attack. The attack exists because it does not properly restrict the traversal of Rock Ridge extension Continuation Entries CE, allowing a local attacker to cause an infinite loop in the kernel, resulting in a denial of service...

4.9CVSS4.8AI score0.00075EPSS
Exploits0References36Affected Software1
Veracode
Veracode
added 2019/01/15 9:5 a.m.29 views

Denial Of Service (DoS)

Linux kernal-rt is vulnerable to denial of service. A buffer overflow flaw was found in the way the Linux kernel's Intel AES-NI instructions optimized version of the RFC4106 GCM mode decryption functionality handled fragmented packets. A remote attacker can use this flaw to crash, or potentially...

9.3CVSS5.4AI score0.0411EPSS
Exploits0References21Affected Software1
Veracode
Veracode
added 2019/01/15 9:3 a.m.28 views

Privilege Escalation

kernel-rt is vulnerable to privilege escalation attacks. The vulnerability exists as arch/x86/kernel/entry64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack Segment SS segment register, which allows local users to gain privileges by triggering an IRET...

7.8CVSS7.4AI score0.05409EPSS
Exploits8References25Affected Software1
Veracode
Veracode
added 2019/01/15 9:3 a.m.24 views

Denial Of Service (DoS)

kernel-rt is vulnerable to denial of service DoS attacks. The vulnerability exists as the xfsda3fixhashpath function in fs/xfs/xfsdabtree.c in the xfs implementation in the Linux kernel before 3.14.2 does not properly compare btree hash values, which allows local users to cause a denial of servic...

4.9CVSS5AI score0.0004EPSS
Exploits1References13Affected Software1
Veracode
Veracode
added 2019/01/15 9:2 a.m.32 views

Denial Of Service (DoS)

kernel-rt is vulnerable to denial of service DoS attacks. The vulnerability exists through a race condition in the inetfragintern function in net/ipv4/inetfragment.c in the Linux kernel through 3.13.6 allows remote attackers to cause a denial of service use-after-free error or possibly have...

9.3CVSS7.5AI score0.00496EPSS
Exploits1References5Affected Software1
Veracode
Veracode
added 2019/01/15 9:1 a.m.34 views

Sensitive Information Leakage

The kernel-rt packages is susceptible to denial of service DoS. The attack is possible because it does not make sure the addrlen value to get initialized with the associated data structure, allowing a local unauthorized user to do the recvmsg, recvfrom, and recvmmsg system calls to leak kernel...

4.9CVSS6.6AI score0.00046EPSS
Exploits0References34Affected Software1
Veracode
Veracode
added 2019/01/15 9:1 a.m.30 views

Information Disclosure

kernel-rt is vulnerable to information disclosure attacks. The vulnerability exists as the ipv6createtempaddr function in net/ipv6/addrconf.c in the Linux kernel through 3.8 does not properly handle problems with the generation of IPv6 temporary addresses, which allows remote attackers to cause a...

3.2CVSS6.5AI score0.00515EPSS
Exploits0References23Affected Software2
Veracode
Veracode
added 2019/01/15 9:0 a.m.26 views

Information Disclosure

kernel-rt is vulnerable to information disclosure attacks. The vulnerability exists as the overriderelease function in kernel/sys.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from kernel stack memory via a uname system call in conjunction with a UNAME26...

4.9CVSS4.9AI score0.00504EPSS
Exploits1References22Affected Software1
Veracode
Veracode
added 2019/01/15 8:59 a.m.29 views

Authorization Bypass

Linux kernel-rt is vulnerable to authorization bypass. The default SCSI command filter block/scsiioctl.c does not accommodate commands that overlap across device classes, allowing local users to bypass intended access restrictions to write arbitrary data to a read-only LUN via an SGIO ioctl call...

4.6CVSS8.1AI score0.00076EPSS
Exploits0References12Affected Software2
Veracode
Veracode
added 2019/01/15 8:59 a.m.34 views

Information Disclosure

Linux kernel-rt is vulnerable to information disclosure. A NULL pointer dereference in the sndctlelemusertlv function in sound/core/control.c allows a local privileged user to exploit the vulnerability to leak kernel memory to user space...

1.9CVSS5.6AI score0.00051EPSS
Exploits0References18Affected Software2
Veracode
Veracode
added 2019/01/15 8:59 a.m.24 views

Denial Of Service (DoS)

Linux kernel-rt is vulnerable to denial of service. A heap-based buffer overflow in the hoststart function in drivers/usb/chipidea/host.c due to improper support for a non-streaming option, allowing local users to crash the system by sending a large amount of network traffic through a USB/Etherne...

4.7CVSS6.1AI score0.00044EPSS
Exploits1References10Affected Software1
Veracode
Veracode
added 2019/01/15 8:58 a.m.36 views

Denial Of Service (DoS)

kernel-rt is vulnerable to denial of service DoS attacks. The vulnerability exists as the nfs4getacluncached function in fs/nfs/nfs4proc.c in the NFSv4 implementation in the Linux kernel before 3.3.2 uses an incorrect length variable during a copy operation, which allows remote NFS servers to cau...

4.6CVSS6.9AI score0.00457EPSS
Exploits2References18Affected Software1
Veracode
Veracode
added 2019/01/15 8:57 a.m.30 views

Denial Of Service (DoS)

kernel-rt is vulnerable to denial of service DoS attacks. The vulnerability exists as the requestmodule function in kernel/kmod.c in the Linux kernel before 3.4 does not set a certain killable attribute, which allows local users to cause a denial of service memory consumption via a crafted...

4.9CVSS5.4AI score0.00122EPSS
Exploits0References27Affected Software2
Rows per page
Query Builder