Lucene search
+L

715 matches found

osv_ubuntu
osv_ubuntu
•added 2025/02/27 3:15 a.m.•24 views

UBUNTU-CVE-2025-21788

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw: fix memleak in certain XDP cases If the XDP program doesn't result in XDPPASS then we leak the memory allocated by am65cpswbuildskb. It is pointless to allocate SKB memory before running the XDP...

7.5CVSS6AI score0.00498EPSS
SaveExploits0References9
Cvelist
Cvelist
•added 2025/02/27 2:18 a.m.•31 views

CVE-2025-21788 net: ethernet: ti: am65-cpsw: fix memleak in certain XDP cases

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw: fix memleak in certain XDP cases If the XDP program doesn't result in XDPPASS then we leak the memory allocated by am65cpswbuildskb. It is pointless to allocate SKB memory before running the XDP...

7.5CVSS0.00498EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2025/02/27 2:18 a.m.•21 views

CVE-2025-21788

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw: fix memleak in certain XDP cases If the XDP program doesn't result in XDPPASS then we leak the memory allocated by am65cpswbuildskb. It is pointless to allocate SKB memory before running the XDP...

7.5CVSS6AI score0.00498EPSS
SaveExploits0
CVE
CVE
•added 2025/02/27 2:18 a.m.•101 views

CVE-2025-21788

Summary (CVE-2025-21788) : In the Linux kernel’s net/ethernet/ti/am65-cpsw driver, memory allocated for SKB via am65_cpsw_build_skb() may leak when an XDP program does not return XDP_PASS. The root cause is allocating SKB memory before evaluating the XDP program result, which wastes CPU cycles fo...

7.5CVSS5.8AI score0.00498EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2025/02/27 12:00 a.m.•22 views

PT-2025-8900 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak issue has been identified in the Linux kernel, specifically in the am65-cpsw driver when handling XDP eXpress Data Path programs. The leak occurs when the XDP program doe...

7.8CVSS5.7AI score0.37997EPSS
SaveExploits1References532
RedhatCVE
RedhatCVE
•added 2025/02/15 12:29 a.m.•21 views

CVE-2023-34399

Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Some values of this table are serialized archive according boost library. The version of boost library contains vulnerability integer overflow...

9.8CVSS6.5AI score0.00834EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/02/15 12:28 a.m.•21 views

CVE-2023-34398

Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Some values of this table are serialized archive according boost library. The boost library contains a vulnerability/null pointer dereference...

7.5CVSS6.4AI score0.00676EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2025/02/13 10:15 p.m.•25 views

CVE-2023-34399

Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Some values of this table are serialized archive according boost library. The version of boost library contains vulnerability integer overflow...

9.8CVSS6.5AI score0.00834EPSS
SaveExploits0References1
NVD
NVD
•added 2025/02/13 10:15 p.m.•23 views

CVE-2023-34398

Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Some values of this table are serialized archive according boost library. The boost library contains a vulnerability/null pointer dereference...

7.5CVSS0.00676EPSS
SaveExploits0References1
NVD
NVD
•added 2025/02/13 10:15 p.m.•28 views

CVE-2023-34399

Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Some values of this table are serialized archive according boost library. The version of boost library contains vulnerability integer overflow...

9.8CVSS0.00834EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/02/13 10:15 p.m.•24 views

CVE-2023-34398

Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Some values of this table are serialized archive according boost library. The boost library contains a vulnerability/null pointer dereference...

7.5CVSS6.3AI score0.00676EPSS
SaveExploits0References1
CVE
CVE
•added 2025/02/13 12:00 a.m.•630 views

CVE-2023-34399

The Mercedes-Benz NTG6 head-unit and MBUX multimedia systems are vulnerable to an integer overflow in the Boost library . This issue occurs when processing values (specifically cid ) during the import or export of profile settings via USB . An attacker can exploit this vulnerability to trigger a ...

9.8CVSS6.5AI score0.00834EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/02/13 12:00 a.m.•12 views

CVE-2023-34398

Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Some values of this table are serialized archive according boost library. The boost library contains a vulnerability/null pointer dereference...

6.3AI score0.00676EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/02/13 12:00 a.m.•30 views

CVE-2023-34398

Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Some values of this table are serialized archive according boost library. The boost library contains a vulnerability/null pointer dereference...

0.00676EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/02/13 12:00 a.m.•32 views

CVE-2023-34399

Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Some values of this table are serialized archive according boost library. The version of boost library contains vulnerability integer overflow...

0.00834EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/13 12:00 a.m.•12 views

CVE-2023-34399: Integer Overflow or Wraparound

Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Some values of this table are serialized archive according boost library. The version of boost library contains vulnerability integer overflow...

9.8CVSS6.6AI score0.00834EPSS
SaveExploits0References1
CVE
CVE
•added 2025/02/13 12:00 a.m.•530 views

CVE-2023-34398

The Mercedes-Benz head-unit NTG6 (and potentially the MBUX multimedia system ) is vulnerable to a NULL pointer dereference within the Boost library . The flaw occurs during the import or export of profile settings over USB , where specific values in the settings table are serialized using the Boo...

7.5CVSS6.3AI score0.00676EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/02/13 12:00 a.m.•12 views

CVE-2023-34399

Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Some values of this table are serialized archive according boost library. The version of boost library contains vulnerability integer overflow...

6.5AI score0.00834EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/13 12:00 a.m.•14 views

CVE-2023-34398: NULL Pointer Dereference

Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Some values of this table are serialized archive according boost library. The boost library contains a vulnerability/null pointer dereference...

7.5CVSS6.4AI score0.00676EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 6:03 a.m.•22 views

CVE-2024-49332

Deserialization of Untrusted Data vulnerability in giveawayboost Giveaway Boost giveaway-boost allows Object Injection.This issue affects Giveaway Boost: from n/a through = 2.1.4...

9.8CVSS5.8AI score0.00524EPSS
SaveExploits0References1
Rows per page
Query Builder