Lucene search
+L

142 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 5:25 a.m.9 views

SUSE CVE-2014-8160

net/netfilter/nfconntrackprotogeneric.c in the Linux kernel before 3.18 generates incorrect conntrack entries during handling of certain iptables rule sets for the SCTP, DCCP, GRE, and UDP-Lite protocols, which allows remote attackers to bypass intended access restrictions via packets with...

8.7CVSS6.7AI score0.05489EPSS
SaveExploits0References11
SUSE CVE
SUSE CVE
added 2023/02/15 5:15 a.m.7 views

SUSE CVE-2015-6496

conntrackd in conntrack-tools 1.4.2 and earlier does not ensure that the optional kernel modules are loaded before using them, which allows remote attackers to cause a denial of service crash via a 1 DCCP, 2 SCTP, or 3 ICMPv6 packet...

5CVSS6.8AI score0.03202EPSS
SaveExploits1References5
SUSE CVE
SUSE CVE
added 2023/02/15 4:52 a.m.4 views

SUSE CVE-2017-2634

It was found that the Linux kernel's Datagram Congestion Control Protocol DCCP implementation before 2.6.22.17 used the IPv4-only inetskrebuildheader function for both IPv4 and IPv6 DCCP connections, which could result in memory corruptions. A remote attacker could use this flaw to crash the syst...

7.8CVSS6.8AI score0.05176EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 4:49 a.m.8 views

SUSE CVE-2017-6074

The dccprcvstateprocess function in net/dccp/input.c in the Linux kernel through 4.9.11 mishandles DCCPPKTREQUEST packet data structures in the LISTEN state, which allows local users to obtain root privileges or cause a denial of service double free via an application that makes an IPV6RECVPKTINF...

7.8CVSS5.9AI score0.0596EPSS
SaveExploits13References14
SUSE CVE
SUSE CVE
added 2023/02/15 4:45 a.m.4 views

SUSE CVE-2017-8824

The dccpdisconnect function in net/dccp/proto.c in the Linux kernel through 4.14.3 allows local users to gain privileges or cause a denial of service use-after-free via an AFUNSPEC connect system call during the DCCPLISTEN state...

8.4CVSS6.8AI score0.01344EPSS
SaveExploits5References16
SUSE CVE
SUSE CVE
added 2023/02/15 4:24 a.m.5 views

SUSE CVE-2018-16229

The DCCP parser in tcpdump before 4.9.3 has a buffer over-read in print-dccp.c:dccpprintoption...

5.3CVSS7.5AI score0.06816EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
added 2021/08/19 12:00 a.m.11 views

The vulnerability of the dccp_disconnect function (net/dccp/proto.c) in the Linux operating system allows a hacker to execute arbitrary code.

The vulnerability of the dccpdisconnect function net/dccp/proto.c is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7AI score0.01344EPSS
SaveExploits5References12Affected Software5
OSV
OSV
added 2021/01/14 1:15 a.m.3 views

DEBIAN-CVE-2020-16119

Use-after-free vulnerability in the Linux kernel exploitable by a local attacker due to reuse of a DCCP socket with an attached dccpshctxccid object as a listener after being released. Fixed in Ubuntu Linux kernel 5.4.0-51.56, 5.3.0-68.63, 4.15.0-121.123, 4.4.0-193.224, 3.13.0.182.191 and...

7.8CVSS6.1AI score0.00422EPSS
SaveExploits1References1
OSV
OSV
added 2020/10/14 2:28 a.m.6 views

USN-4577-1 linux-hwe, linux-gke-5.0, linux-gke-5.3, linux-oem-osp1, linux-raspi2-5.3 vulnerabilities

Hadar Manor discovered that the DCCP protocol implementation in the Linux kernel improperly handled socket reuse, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2020-16119 Giuseppe Scriva...

7.8CVSS6.9AI score0.00422EPSS
SaveExploits1References3
OSV
OSV
added 2020/10/13 12:00 a.m.5 views

UBUNTU-CVE-2020-16119

Use-after-free vulnerability in the Linux kernel exploitable by a local attacker due to reuse of a DCCP socket with an attached dccpshctxccid object as a listener after being released. Fixed in Ubuntu Linux kernel 5.4.0-51.56, 5.3.0-68.63, 4.15.0-121.123, 4.4.0-193.224, 3.13.0.182.191 and...

7.8CVSS6.7AI score0.00422EPSS
SaveExploits1References10
GithubExploit
GithubExploit
added 2020/09/08 11:57 a.m.16 views

Exploit for Use After Free in Linux Linux_Kernel

Public-Vulnerabilities 2020 CVE-2020-161...

7.8CVSS7AI score0.00422EPSS
SaveExploits1
Veracode
Veracode
added 2020/05/15 1:21 a.m.33 views

Denial Of Service (DoS)

kernel is vulnerable to denial of service. The vulnerability exists due to a flaw in the Datagram Congestion Control Protocol DCCP packets in the skbheaderpointer function allowing an attacker to send a maliciously crafted DCCP packet to crash the system...

4.7CVSS3.9AI score0.00476EPSS
SaveExploits2References11Affected Software1
Veracode
Veracode
added 2020/04/10 1:02 a.m.34 views

Denial Of Service (DoS)

The kernel is vulnerable to denial of service DoS. An integer underflow flaw, leading to a buffer overflow, was found in the Linux kernel's Datagram Congestion Control Protocol DCCP implementation. This could allow a remote attacker to cause a denial of service...

7.5CVSS4.3AI score0.04364EPSS
SaveExploits1References15Affected Software2
Tenable Nessus
Tenable Nessus
added 2020/02/19 12:00 a.m.452 views

Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-4285-1)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4285-1 advisory. It was discovered that the Linux kernel did not properly clear data structures on context switches for certain Intel graphics processors. A local attacke...

7.8CVSS7.1AI score0.10114EPSS
SaveExploits3References13
Ubuntu
Ubuntu
added 2020/02/18 8:34 p.m.134 views

USN-4286-1: Linux kernel vulnerabilities

It was discovered that the Linux kernel did not properly clear data structures on context switches for certain Intel graphics processors. A local attacker could use this to expose sensitive information. CVE-2019-14615 It was discovered that a race condition existed in the Softmac USB Prism54 devi...

7.4CVSS6.5AI score0.10114EPSS
SaveExploits5
RedhatCVE
RedhatCVE
added 2020/01/16 7:09 p.m.59 views

CVE-2019-20096

A flaw was found in the Linux kernel’s implementation of the Datagram Congestion Control Protocol DCCP. A local attacker with access to the system can create DCCP sockets to cause a memory leak and repeat this operation to exhaust all memory and panic the system. Mitigation As the DCCP module wil...

5.5CVSS6.9AI score0.00994EPSS
SaveExploits0References3
OSV
OSV
added 2019/12/30 5:15 a.m.1 views

DEBIAN-CVE-2019-20096

In the Linux kernel before 5.1, there is a memory leak in featregistersp in net/dccp/feat.c, which may cause denial of service, aka CID-1d3ff0950e2b...

5.5CVSS6.5AI score0.00994EPSS
SaveExploits0References1
OSV
OSV
added 2019/12/30 5:15 a.m.11 views

UBUNTU-CVE-2019-20096

In the Linux kernel before 5.1, there is a memory leak in featregistersp in net/dccp/feat.c, which may cause denial of service, aka CID-1d3ff0950e2b...

5.5CVSS6.7AI score0.00994EPSS
SaveExploits0References10
Veracode
Veracode
added 2019/01/15 9:15 a.m.27 views

Denial Of Service

The kernel packages is vulnerable to use-after-free flaw. Linux kernel's Datagram Congestion Control Protocol DCCP implementation has a flaw in freeing SKB socket buffer resources for a DCCPPKTREQUEST packet when the IPV6RECVPKTINFO option is set on the socket, allowing a local user with little...

7.5CVSS7.2AI score0.05176EPSS
SaveExploits0References14Affected Software1
Veracode
Veracode
added 2019/01/15 9:15 a.m.37 views

Denial Of Service (DoS)

The kernel-rt package is vulnerable to denial of serviceDoS. The attack exists because of a use-after-free flaw in the way the Linux kernel's Datagram Congestion Control Protocol DCCP implementation freed SKB socket buffer resources for a DCCPPKTREQUEST packet when the IPV6RECVPKTINFO option is s...

7.8CVSS7.2AI score0.0596EPSS
SaveExploits13References27Affected Software3
Rows per page
Query Builder