Lucene search
K

1883 matches found

Tenable Nessus
Tenable Nessus
added 2025/12/31 12:0 a.m.3 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993136)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993136 advisory. In the Linux kernel, the following vulnerability has been resolved: kcm: close race conditions on skreceivequeue sk-skreceivequeue is protected by skb queue lock, bu...

4.7CVSS6.2AI score0.00128EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/12/31 12:0 a.m.1 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993051)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993051 advisory. In the Linux kernel, the following vulnerability has been resolved: misc/vmwvmci: fix an infoleak in vmcihostdoreceivedatagram struct vmcieventqp allocated by...

5.5CVSS6.2AI score0.0018EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/12/31 12:0 a.m.2 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992934)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992934 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one Eric Dumazet...

7.1CVSS5.8AI score0.00139EPSS
Exploits0References4
EUVD
EUVD
added 2025/12/24 3:30 p.m.3 views

EUVD-2023-60351

In the Linux kernel, the following vulnerability has been resolved: net: prevent skb corruption on frag list segmentation Ian reported several skb corruptions triggered by rx-gro-list, collecting different oops alike: 62.624003 BUG: kernel NULL pointer dereference, address: 00000000000000c0...

5.7AI score0.00168EPSS
Exploits0References6
OSV
OSV
added 2025/12/24 1:16 p.m.2 views

UBUNTU-CVE-2023-54094

In the Linux kernel, the following vulnerability has been resolved: net: prevent skb corruption on frag list segmentation Ian reported several skb corruptions triggered by rx-gro-list, collecting different oops alike: 62.624003 BUG: kernel NULL pointer dereference, address: 00000000000000c0...

5.7AI score0.00168EPSS
Exploits0References7
OSV
OSV
added 2025/12/24 10:55 a.m.3 views

CVE-2023-54004 udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated().

In the Linux kernel, the following vulnerability has been resolved: udplite: Fix NULL pointer dereference in skmemraiseallocated. syzbot reported 0 a null-ptr-deref in skgetrmem0 while using IPPROTOUDPLITE 0x88: 14:25:52 executing program 1: r0 = socket$inet60xa, 0x80002, 0x88 We had a similar...

6.3AI score0.00173EPSS
Exploits0References10
Tenable Nessus
Tenable Nessus
added 2025/12/24 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2023-54094

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: prevent skb corruption on frag list segmentation Ian reported several skb corruptions triggered by rx-gro-list, collecting different oops alike: 62.624003...

6.1AI score0.00168EPSS
Exploits0References3
EUVD
EUVD
added 2025/12/19 12:31 a.m.3 views

EUVD-2025-204396

Improper Bounds Check CWE-787 in Packetbeat can allow a remote unauthenticated attacker to exploit a Buffer Overflow CAPEC-100 and reliably crash the application or cause significant resource exhaustion via a single crafted UDP packet with an invalid fragment sequence number...

6.5CVSS6.6AI score0.00387EPSS
Exploits0References2
NVD
NVD
added 2025/12/18 10:16 p.m.3 views

CVE-2025-68381

Improper Bounds Check CWE-787 in Packetbeat can allow a remote unauthenticated attacker to exploit a Buffer Overflow CAPEC-100 and reliably crash the application or cause significant resource exhaustion via a single crafted UDP packet with an invalid fragment sequence number...

6.5CVSS0.00387EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/18 9:51 p.m.3 views

CVE-2025-68381 Packetbeat Improper Bounds Check

Improper Bounds Check CWE-787 in Packetbeat can allow a remote unauthenticated attacker to exploit a Buffer Overflow CAPEC-100 and reliably crash the application or cause significant resource exhaustion via a single crafted UDP packet with an invalid fragment sequence number...

6.5CVSS6.7AI score0.00387EPSS
Exploits0References1
CVE
CVE
added 2025/12/18 9:51 p.m.13 views

CVE-2025-68381

Packetbeat (Elastic Beats) Vulnerability CVE-2025-68381 stems from an improper bounds check (CWE-787) in processing UDP fragments, enabling a remote, unauthenticated attacker to trigger a buffer overflow and cause a crash or significant resource exhaustion with a crafted UDP packet containing an ...

6.5CVSS6.7AI score0.00387EPSS
Exploits0References1Affected Software1
SUSE CVE
SUSE CVE
added 2025/12/12 1:24 a.m.3 views

SUSE CVE-2002-1220

BIND 8.3.x through 8.3.3 allows remote attackers to cause a denial of service termination due to assertion failure via a request for a subdomain that does not exist, with an OPT resource record with a large UDP payload size...

5CVSS6.8AI score0.096EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/12/11 12:0 a.m.1 views

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-991199)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991199 advisory. In the Linux kernel, the following vulnerability has been resolved: misc/vmwvmci: fix an infoleak in vmcihostdoreceivedatagram struct vmcieventqp allocated by...

5.5CVSS6.2AI score0.0018EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/12/10 6:58 a.m.3 views

CVE-2023-53809

In the Linux kernel, the following vulnerability has been resolved: l2tp: Avoid possible recursive deadlock in l2tptunnelregister When a file descriptor of pppol2tp socket is passed as file descriptor of UDP socket, a recursive deadlock occurs in l2tptunnelregister. This situation is reproduced b...

5.5CVSS5.6AI score0.00156EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2025/12/10 12:38 a.m.0 views

SUSE CVE-2022-50676

In the Linux kernel, the following vulnerability has been resolved: net: rds: don't hold sock lock when cancelling work from rdstcpresetcallbacks syzbot is reporting lockdep warning at rdstcpresetcallbacks 1, for commit ac3615e7f3cffe2a "RDS: TCP: Reduce code duplication in rdstcpresetcallbacks"...

5.5CVSS6.6AI score0.00239EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2025/12/10 12:36 a.m.1 views

SUSE CVE-2023-53782

In the Linux kernel, the following vulnerability has been resolved: dccp: Fix out of bounds access in DCCP error handler There was a previous attempt to fix an out-of-bounds access in the DCCP error handlers, but that fix assumed that the error handlers only want to access the first 8 bytes of th...

5.3CVSS6.4AI score0.00199EPSS
Exploits0References17
SUSE CVE
SUSE CVE
added 2025/12/10 12:35 a.m.1 views

SUSE CVE-2023-53825

In the Linux kernel, the following vulnerability has been resolved: kcm: Fix error handling for SOCKDGRAM in kcmsendmsg. syzkaller found a memory leak in kcmsendmsg, and commit c821a88bd720 "kcm: Fix memory leak in error path of kcmsendmsg" suppressed it by updating kcmtxmsghead-lastskb if partia...

5.5CVSS6.2AI score0.00216EPSS
Exploits0References18
EUVD
EUVD
added 2025/12/09 6:30 p.m.2 views

EUVD-2023-60171

In the Linux kernel, the following vulnerability has been resolved: kcm: Fix error handling for SOCKDGRAM in kcmsendmsg. syzkaller found a memory leak in kcmsendmsg, and commit c821a88bd720 "kcm: Fix memory leak in error path of kcmsendmsg" suppressed it by updating kcmtxmsghead-lastskb if partia...

5.7AI score0.00216EPSS
Exploits0References9
NVD
NVD
added 2025/12/09 4:17 p.m.2 views

CVE-2023-53839

In the Linux kernel, the following vulnerability has been resolved: dccp: fix data-race around dp-dccpsmsscache dccpsendmsg reads dp-dccpsmsscache before locking the socket. Same thing in dodccpgetsockopt. Add READONCE/WRITEONCE annotations, and change dccpsendmsg to check again dccpsmsscache aft...

0.00216EPSS
Exploits0References8
NVD
NVD
added 2025/12/09 4:17 p.m.2 views

CVE-2023-53825

In the Linux kernel, the following vulnerability has been resolved: kcm: Fix error handling for SOCKDGRAM in kcmsendmsg. syzkaller found a memory leak in kcmsendmsg, and commit c821a88bd720 "kcm: Fix memory leak in error path of kcmsendmsg" suppressed it by updating kcmtxmsghead-lastskb if partia...

0.00216EPSS
Exploits0References8
Rows per page
Query Builder