Lucene search
+L

2924 matches found

Positive Technologies
Positive Technologies
•added 2021/11/14 12:00 a.m.•3 views

PT-2021-30575

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.15 Description The issue is related to a mismatch between reconstructed freelist depth and count in the slub allocator. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/11/14 12:00 a.m.•2 views

PT-2021-26518

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.76 Description The issue is related to a mismatch between reconstructed freelist depth and cnt in the slub component of the Linux Kernel. The actual impact and attack plausibility have not yet been proven...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/11/14 12:00 a.m.•2 views

PT-2021-30513

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.76 Description The issue is related to a mismatch between reconstructed freelist depth and cnt in the slub component of the Linux Kernel. The actual impact and attack plausibility have not yet been proven...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/11/14 12:00 a.m.•3 views

PT-2021-30447

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.214 Description The issue is related to a mismatch between reconstructed freelist depth and cnt in the slub allocator. The actual impact and attack plausibility have not yet been proven. Recommendations For...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/11/14 12:00 a.m.•2 views

PT-2021-26580

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.15 Description The issue is related to a mismatch between reconstructed freelist depth and cnt in the slub allocator. The actual impact and attack plausibility have not yet been proven. Recommendations For...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/11/14 12:00 a.m.•4 views

PT-2021-30475

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.156 Description The issue is related to a mismatch between reconstructed freelist depth and cnt in the slub component of the Linux Kernel. The actual impact and attack plausibility have not yet been proven...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/11/14 12:00 a.m.•2 views

PT-2021-26480

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.156 Description The issue is related to a mismatch between reconstructed freelist depth and cnt in the slub allocator. The actual impact and attack plausibility have not yet been proven. Recommendations For...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/11/14 12:00 a.m.•2 views

PT-2021-30644

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15 Description The issue is related to a mismatch between reconstructed freelist depth and count in the slub allocator. It was introduced in version v4.17 and fixed in version v5.15. The actual impact and atta...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/11/14 12:00 a.m.•2 views

PT-2021-26452

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.214 Description A potential issue exists in the Linux Kernel, specifically related to a mismatch between reconstructed freelist depth and count in the slub module. The actual impact and attack plausibility...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/11/14 12:00 a.m.•3 views

PT-2021-26649

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.17 through 5.14 Description: A potential issue exists in the Linux Kernel, specifically related to a mismatch between reconstructed freelist depth and count in the slub allocator. The actual impact and attack...

5.8AI score
SaveExploits0References1
OSV
OSV
•added 2021/11/11 10:15 p.m.•6 views

DEBIAN-CVE-2021-3908

OctoRPKI does not limit the depth of a certificate chain, allowing for a CA to create children in an ad-hoc fashion, thereby making tree traversal never end...

7.5CVSS7.3AI score0.00731EPSS
SaveExploits0References1
NVD
NVD
•added 2021/11/11 10:15 p.m.•39 views

CVE-2021-3908

OctoRPKI does not limit the depth of a certificate chain, allowing for a CA to create children in an ad-hoc fashion, thereby making tree traversal never end...

7.5CVSS0.00731EPSS
SaveExploits0References2
OSV
OSV
•added 2021/11/11 10:15 p.m.•22 views

CVE-2021-3908

OctoRPKI does not limit the depth of a certificate chain, allowing for a CA to create children in an ad-hoc fashion, thereby making tree traversal never end...

7.5CVSS7.5AI score
SaveExploits0References2
Prion
Prion
•added 2021/11/11 10:15 p.m.•23 views

Design/Logic Flaw

OctoRPKI does not limit the depth of a certificate chain, allowing for a CA to create children in an ad-hoc fashion, thereby making tree traversal never end...

5CVSS7.5AI score0.00731EPSS
SaveExploits0References2Affected Software2
OSV
OSV
•added 2021/11/11 10:15 p.m.•22 views

UBUNTU-CVE-2021-3908

OctoRPKI does not limit the depth of a certificate chain, allowing for a CA to create children in an ad-hoc fashion, thereby making tree traversal never end...

7.5CVSS7.1AI score0.00731EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2021/11/11 9:45 p.m.•60 views

CVE-2021-3908

OctoRPKI does not limit the depth of a certificate chain, allowing for a CA to create children in an ad-hoc fashion, thereby making tree traversal never end...

7.5CVSS7.4AI score0.00731EPSS
SaveExploits0
Veracode
Veracode
•added 2021/11/11 7:55 a.m.•26 views

Denial Of Service (DoS)

cmd/octorpki of github.com/cloudflare/cfrpki is vulnerable to denial of service. Due to lack of limitation in the depth of a certificate chain, when a CA creates children in an ad-hoc fashion, it results in never-ending tree traversal...

7.5CVSS3.8AI score0.00731EPSS
SaveExploits0References3Affected Software1
OpenVAS
OpenVAS
•added 2021/11/11 12:00 a.m.•19 views

Mozilla Firefox Security Advisory (MFSA2015-107) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

6.4CVSS6.5AI score0.03493EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/11/10 12:00 a.m.•11 views

PT-2021-22373 · Octorpki · Octorpki

Name of the Vulnerable Software and Affected Versions: OctoRPKI affected versions not specified Description: The issue arises from OctoRPKI not limiting the depth of a certificate chain, allowing a Certificate Authority CA to create children in an ad-hoc manner. This results in tree traversal nev...

9.8CVSS7AI score0.04199EPSS
SaveExploits0References32
CNNVD
CNNVD
•added 2021/11/02 12:00 a.m.•28 views

Angle 缓冲区错误漏洞

Angle is a graphics layer engine. It is used in the default WebGl backend of Google Chrome and Mozilla Firefox on Windows platforms. A security vulnerability exists in Angle, which arises when the program incorrectly calculates the depth spacing of data and reads the end of the buffer on upload...

6.5CVSS7.3AI score0.00659EPSS
SaveExploits0References2
Rows per page
Query Builder