Lucene search
+L

1109 matches found

OSV
OSV
•added 2023/11/16 6:15 p.m.•14 views

CVE-2023-6176

A null pointer dereference flaw was found in the Linux kernel API for the cryptographic algorithm scatterwalk functionality. This issue occurs when a user constructs a malicious packet with specific socket configuration, which could allow a local user to crash the system or escalate their...

4.7CVSS7.8AI score
SaveExploits0References7
Prion
Prion
•added 2023/11/16 6:15 p.m.•48 views

Null pointer dereference

A null pointer dereference flaw was found in the Linux kernel API for the cryptographic algorithm scatterwalk functionality. This issue occurs when a user constructs a malicious packet with specific socket configuration, which could allow a local user to crash the system or escalate their...

1CVSS6.8AI score0.00251EPSS
SaveExploits0References4Affected Software1
UbuntuCve
UbuntuCve
•added 2023/11/16 6:15 p.m.•53 views

CVE-2023-6176

A null pointer dereference flaw was found in the Linux kernel API for the cryptographic algorithm scatterwalk functionality. This issue occurs when a user constructs a malicious packet with specific socket configuration, which could allow a local user to crash the system or escalate their...

4.7CVSS6.3AI score0.00251EPSS
SaveExploits0References16
Vulnrichment
Vulnrichment
•added 2023/11/16 5:15 p.m.•3 views

CVE-2023-6176 Kernel: local dos vulnerability in scatterwalk_copychunks

A null pointer dereference flaw was found in the Linux kernel API for the cryptographic algorithm scatterwalk functionality. This issue occurs when a user constructs a malicious packet with specific socket configuration, which could allow a local user to crash the system or escalate their...

4.7CVSS6.5AI score0.00251EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2023/11/16 5:15 p.m.•71 views

CVE-2023-6176 Kernel: local dos vulnerability in scatterwalk_copychunks

A null pointer dereference flaw was found in the Linux kernel API for the cryptographic algorithm scatterwalk functionality. This issue occurs when a user constructs a malicious packet with specific socket configuration, which could allow a local user to crash the system or escalate their...

4.7CVSS6.8AI score0.00251EPSS
SaveExploits0References6
CVE
CVE
•added 2023/11/16 5:15 p.m.•477 views

CVE-2023-6176

The connected documents confirm CVE-2023-6176 is a Linux kernel issue in the cryptographic algorithm scatterwalk API. A null pointer dereference can be triggered when a local user constructs a malicious packet with specific socket configuration, potentially crashing the system or enabling privile...

4.7CVSS6.5AI score0.00251EPSS
SaveExploits0References7Affected Software1
RedhatCVE
RedhatCVE
•added 2023/11/16 1:45 p.m.•65 views

CVE-2023-6176

A null pointer dereference flaw was found in the Linux kernel API for the cryptographic algorithm scatterwalk functionality. This issue occurs when a user constructs a malicious packet with specific socket configuration, which could allow a local user to crash the system or escalate their...

4.7CVSS4.6AI score0.00251EPSS
SaveExploits0References4
Schneier on Security
Schneier on Security
•added 2023/11/15 5:51 p.m.•24 views

New SSH Vulnerability

This is interesting: For the first time, researchers have demonstrated that a large portion of cryptographic keys used to protect data in computer-to-server SSH traffic are vulnerable to complete compromise when naturally occurring computational errors occur while the connection is being...

6.9AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/14 12:00 a.m.•7 views

CVE-2023-47640: Use of a Broken or Risky Cryptographic Algorithm

DataHub is an open-source metadata platform. The HMAC signature for DataHub Frontend sessions was being signed using a SHA-1 HMAC with the frontend secret key. SHA1 with a 10 byte key can be brute forced using sufficient resources i.e. state level actors with large computational capabilities...

8.8CVSS7.7AI score0.00363EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2023/11/10 1:15 a.m.•36 views

CVE-2023-46894

An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm...

3.3CVSS6.1AI score0.0048EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
•added 2023/11/09 6:34 p.m.•29 views

esptool allows attackers to view sensitive information via weak cryptographic algorithm

An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm...

7.5CVSS5.9AI score0.0048EPSS
SaveExploits1References4Affected Software1
PyPA
PyPA
•added 2023/11/09 4:15 p.m.•10 views

PYSEC-2023-234

An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm...

7.5CVSS6.6AI score0.0048EPSS
SaveExploits1References2Affected Software1
UbuntuCve
UbuntuCve
•added 2023/11/09 4:15 p.m.•37 views

CVE-2023-46894

An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm...

7.5CVSS6.8AI score0.0048EPSS
SaveExploits1References2
Prion
Prion
•added 2023/11/09 4:15 p.m.•21 views

Information disclosure

An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm...

5CVSS6.5AI score0.0048EPSS
SaveExploits1References1Affected Software1
OSV
OSV
•added 2023/11/09 4:15 p.m.•38 views

PYSEC-2023-234

An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm...

7.5CVSS5.9AI score0.0048EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2023/11/09 12:00 a.m.•13 views

CVE-2023-46894

An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm...

6.7AI score0.0048EPSS
SaveExploits1References1
CVE
CVE
•added 2023/11/09 12:00 a.m.•85 views

CVE-2023-46894

Affected software: esptool 4.6.2. The CVE-2023-46894 entry describes an information disclosure due to a weak cryptographic algorithm used by esptool, enabling attackers to view sensitive data. The public documents confirm the vulnerability and its impact on confidentiality (CVE base score 7.5, HI...

7.5CVSS7.1AI score0.0048EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2023/11/09 12:00 a.m.•57 views

CVE-2023-46894

An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm...

7.4AI score0.0048EPSS
SaveExploits1References1
OSV
OSV
•added 2023/11/09 12:00 a.m.•26 views

CVE-2023-46894

An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm...

7.3AI score
SaveExploits0References3
Debian CVE
Debian CVE
•added 2023/11/09 12:00 a.m.•102 views

CVE-2023-46894

Removed by vendor...

7.5CVSS6.1AI score0.0048EPSS
SaveExploits1
Rows per page
Query Builder