Lucene search
+L

250 matches found

Vulnrichment
Vulnrichment
•added 2024/05/17 2:27 p.m.•25 views

CVE-2023-52698 calipso: fix memory leak in netlbl_calipso_add_pass()

In the Linux kernel, the following vulnerability has been resolved: calipso: fix memory leak in netlblcalipsoaddpass If IPv6 support is disabled at boot ipv6.disable=1, the calipsoinit - netlblcalipsoopsregister function isn't called, and the netlblcalipsoopsget function always returns NULL. In...

6.8AI score0.00223EPSS
SaveExploits0References8
CVE
CVE
•added 2024/05/17 2:27 p.m.•206 views

CVE-2023-52698

CVE-2023-52698: The Linux kernel fix addresses a memory leak in netlbl_calipso_add_pass() when IPv6 is disabled at boot (ipv6.disable=1). In this scenario, netlbl_calipso_ops_register() may not be called and netlbl_calipso_ops_get() returns NULL, causing allocated doi_def memory in netlbl_calipso...

5.5CVSS6.7AI score0.00223EPSS
SaveExploits0References10Affected Software1
osv_cve
osv_cve
•added 2024/05/17 2:27 p.m.•16 views

CVE-2023-52698 calipso: fix memory leak in netlbl_calipso_add_pass()

In the Linux kernel, the following vulnerability has been resolved: calipso: fix memory leak in netlblcalipsoaddpass If IPv6 support is disabled at boot ipv6.disable=1, the calipsoinit - netlblcalipsoopsregister function isn't called, and the netlblcalipsoopsget function always returns NULL. In...

5.9AI score
SaveExploits0References13
Debian CVE
Debian CVE
•added 2024/05/17 2:27 p.m.•26 views

CVE-2023-52698

In the Linux kernel, the following vulnerability has been resolved: calipso: fix memory leak in netlblcalipsoaddpass If IPv6 support is disabled at boot ipv6.disable=1, the calipsoinit - netlblcalipsoopsregister function isn't called, and the netlblcalipsoopsget function always returns NULL. In...

5.5CVSS7.3AI score0.00223EPSS
SaveExploits0
CNNVD
CNNVD
•added 2024/05/17 12:00 a.m.•11 views

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a memory leak in the netlblcalipsoaddpass function...

5.5CVSS6.5AI score0.00223EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/17 12:00 a.m.•3 views

CVE-2023-52698: Missing Release of Memory after Effective Lifetime

In the Linux kernel, the following vulnerability has been resolved: calipso: fix memory leak in netlblcalipsoaddpass If IPv6 support is disabled at boot ipv6.disable=1, the calipsoinit - netlblcalipsoopsregister function isn't called, and the netlblcalipsoopsget function always returns NULL. In...

5.5CVSS5.6AI score0.00223EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/12/07 12:00 a.m.•4 views

PT-2024-8468

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a memory leak in the netlbl calipso add pass function when IPv6 support is disabled at boot. This occurs because the calipso init function is not called, and as a...

7CVSS5.7AI score0.00223EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2022/05/09 12:00 a.m.•311 views

NewStart CGSL CORE 5.05 / MAIN 5.05 : kernel Multiple Vulnerabilities (NS-SA-2022-0040)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has kernel packages installed that are affected by multiple vulnerabilities: - An issue was discovered in the Linux kernel before 4.14.11. A double free may be caused by the function allocatetracebuffer in the file...

8.1CVSS7.1AI score0.09729EPSS
SaveExploits8References17
CNVD
CNVD
•added 2021/06/09 12:00 a.m.•20 views

Unspecified vulnerability in calipso

Calipso is a simple NodeJS content management system. Built on themes similar to Drupal and Wordpress, it is designed to be fast, flexible and simple. calipso has a security vulnerability that can be exploited by an attacker to overwrite files on any file system...

7.3CVSS6.8AI score0.00433EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
•added 2021/06/08 6:47 p.m.•51 views

Calipso Arbitrary File Write via Archive Extraction (Zip Slip)

This affects all versions of package calipso. It is possible for a malicious module to overwrite files on an arbitrary file system through the module install functionality...

7.3CVSS6.8AI score0.00433EPSS
SaveExploits1References4Affected Software1
osv_ghsa
osv_ghsa
•added 2021/06/08 6:47 p.m.•62 views

GHSA-JXCC-G75X-QGW9 Calipso Arbitrary File Write via Archive Extraction (Zip Slip)

This affects all versions of package calipso. It is possible for a malicious module to overwrite files on an arbitrary file system through the module install functionality...

7.3CVSS7.1AI score0.00433EPSS
SaveExploits1References3
Veracode
Veracode
•added 2021/06/08 4:12 a.m.•36 views

Arbitrary File Write

calipso is vulnerable to arbitrary file write. A malicious module can overwrite files on an arbitrary file system through the module install functionality...

7.5CVSS2.9AI score0.00677EPSS
SaveExploits0References2Affected Software1
osv_cve
osv_cve
•added 2021/06/07 9:15 p.m.•16 views

CVE-2021-23391

This affects all versions of package calipso. It is possible for a malicious module to overwrite files on an arbitrary file system through the module install functionality...

7.1CVSS5.9AI score0.00433EPSS
SaveExploits1References2
NVD
NVD
•added 2021/06/07 9:15 p.m.•26 views

CVE-2021-23391

This affects all versions of package calipso. It is possible for a malicious module to overwrite files on an arbitrary file system through the module install functionality...

7.3CVSS0.00433EPSS
SaveExploits1References2
Prion
Prion
•added 2021/06/07 9:15 p.m.•23 views

Design/Logic Flaw

This affects all versions of package calipso. It is possible for a malicious module to overwrite files on an arbitrary file system through the module install functionality...

3.6CVSS6.9AI score0.00433EPSS
SaveExploits1References2
CVE
CVE
•added 2021/06/07 8:40 p.m.•80 views

CVE-2021-23391

CVE-2021-23391 affects all versions of the NodeJS CMS calipso . The vulnerability is an Arbitrary File Write via Archive Extraction (Zip Slip) , exploitable through the module install functionality to overwrite files on the target filesystem. Root cause appears to be unsafe archive extraction all...

7.3CVSS7AI score0.00433EPSS
SaveExploits1References2Affected Software1
Mend
Mend
•added 2021/06/07 8:40 p.m.•7 views

CVE-2021-23391

This affects all versions of package calipso. It is possible for a malicious module to overwrite files on an arbitrary file system through the module install functionality...

7.3CVSS0.00433EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2021/06/07 8:40 p.m.•28 views

CVE-2021-23391 Arbitrary File Write via Archive Extraction (Zip Slip)

This affects all versions of package calipso. It is possible for a malicious module to overwrite files on an arbitrary file system through the module install functionality...

7.3CVSS7.4AI score0.00433EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2021/06/07 8:37 p.m.•5 views

CVE-2021-23391

This affects all versions of package calipso. It is possible for a malicious module to overwrite files on an arbitrary file system through the module install functionality...

7.3CVSS5.5AI score0.00433EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2021/06/07 12:00 a.m.•2 views

PT-2021-15485

Name of the Vulnerable Software and Affected Versions calipso affected versions not specified Description The issue allows a malicious module to overwrite files on an arbitrary file system through the module install functionality. Recommendations At the moment, there is no information about a new...

7.3CVSS0.00433EPSS
SaveExploits1References5
Rows per page
Query Builder