Lucene search
+L

6428 matches found

CNVD
CNVD
•added 2019/08/16 12:00 a.m.•9 views

Linux Kernel Null Pointer Dereference Vulnerability (CNVD-2019-38266)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A null pointer dereference vulnerability exists in drivers/net/wireless/ath/ath10k/usb.c in Linux kernel 5.2.8 and...

7.8CVSS7.7AI score0.03771EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/16 12:00 a.m.•5 views

CVE-2019-15099: NULL Pointer Dereference

drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel through 5.2.8 has a NULL pointer dereference via an incomplete address in an endpoint descriptor...

7.8CVSS6.3AI score0.03771EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2019/08/14 12:00 a.m.•356 views

Ubuntu: Security Advisory (USN-4095-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7AI score0.52199EPSS
SaveExploits32References4
Tenable Nessus
Tenable Nessus
•added 2019/08/14 12:00 a.m.•135 views

Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-4093-1)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4093-1 advisory. It was discovered that a heap buffer overflow existed in the Marvell Wireless LAN device driver for the Linux kernel. An attacker could use this to cause...

9.8CVSS7.7AI score0.52199EPSS
SaveExploits28References8
Ubuntu
Ubuntu
•added 2019/08/13 4:40 p.m.•175 views

USN-4095-2: Linux kernel (Xenial HWE) vulnerabilities

USN-4095-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 16.04 LTS for Ubuntu 14.04 ESM. Eli Biham and Lior Neumann discovered that the Bluetooth implementation in the Linux...

9.8CVSS7.5AI score0.06821EPSS
SaveExploits6
osv_usn
osv_usn
•added 2019/08/13 4:40 p.m.•33 views

USN-4095-2 linux-lts-xenial, linux-aws vulnerabilities

USN-4095-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 16.04 LTS for Ubuntu 14.04 ESM. Eli Biham and Lior Neumann discovered that the Bluetooth implementation in the Linux...

9.8CVSS7.5AI score0.06821EPSS
SaveExploits6References8
osv_usn
osv_usn
•added 2019/08/13 4:19 p.m.•25 views

USN-4095-1 linux, linux-aws, linux-kvm, linux-raspi2, linux-snapdragon vulnerabilities

Eli Biham and Lior Neumann discovered that the Bluetooth implementation in the Linux kernel did not properly validate elliptic curve parameters during Diffie-Hellman key exchange in some situations. An attacker could use this to expose sensitive information. CVE-2018-5383 It was discovered that a...

9.8CVSS7.4AI score0.52199EPSS
SaveExploits32References9
osv_usn
osv_usn
•added 2019/08/13 3:04 p.m.•24 views

USN-4093-1 linux, linux-hwe, linux-azure, linux-gcp, linux-kvm, linux-raspi2, linux-snapdragon vulnerabilities

It was discovered that a heap buffer overflow existed in the Marvell Wireless LAN device driver for the Linux kernel. An attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2019-10126 Andrei Vlad Lutas and Dan Lutas discovered that some x86...

9.8CVSS7.4AI score0.52199EPSS
SaveExploits28References8
Positive Technologies
Positive Technologies
•added 2019/08/13 12:00 a.m.•13 views

PT-2019-6254

Name of the Vulnerable Software and Affected Versions OpenCV version 4.1.0 Description The issue is related to a divide-by-zero error in the cv::HOGDescriptor::getDescriptorSize function. This error can be exploited by a remote attacker to cause a denial of service. The error is located in the...

7.1CVSS6.7AI score0.02456EPSS
SaveExploits1References57
Debian CVE
Debian CVE
•added 2019/07/26 12:33 a.m.•52 views

CVE-2019-5606

Removed by vendor...

7.8CVSS7.5AI score0.00591EPSS
SaveExploits0
Cvelist
Cvelist
•added 2019/07/26 12:33 a.m.•39 views

CVE-2019-5606

In FreeBSD 12.0-STABLE before r349805, 12.0-RELEASE before 12.0-RELEASE-p8, 11.3-STABLE before r349806, 11.3-RELEASE before 11.3-RELEASE-p1, and 11.2-RELEASE before 11.2-RELEASE-p12, code which handles close of a descriptor created by posixopenpt fails to undo a signal configuration. This causes ...

7.8AI score0.00591EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2019/07/26 12:16 a.m.•47 views

CVE-2019-5603

Removed by vendor...

7.8CVSS7.5AI score0.00623EPSS
SaveExploits0
osv_ubuntu
osv_ubuntu
•added 2019/07/25 7:15 p.m.•16 views

UBUNTU-CVE-2019-1010127

VCFTools vcftools prior to version 0.1.15 is affected by: Use-after-free. The impact is: Denial of Service or possibly other impact eg. code execution or information disclosure. The component is: The header::addFILTERdescriptor method in header.cpp. The attack vector is: The victim must open a...

7.8CVSS7.5AI score0.01649EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2019/07/25 12:00 a.m.•4 views

PT-2019-11474

Name of the Vulnerable Software and Affected Versions: VCFTools versions prior to 0.1.15 Description: The issue is related to a use-after-free problem, which can lead to a Denial of Service or possibly other impacts such as code execution or information disclosure. The component affected is the...

7.8CVSS0.01649EPSS
SaveExploits1References14
CNVD
CNVD
•added 2019/07/22 12:00 a.m.•27 views

Linux kernel buffer overflow vulnerability (CNVD-2019-38520)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A buffer overflow vulnerability exists in the 'parsehidreportdescriptor' function in the drivers/input/tablet/gtco.c file in Linux kernel 5.2.1 and earlier. The...

6.8CVSS6.9AI score0.00817EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2019/07/22 12:00 a.m.•50 views

openSUSE Security Update : libu2f-host / pam_u2f (openSUSE-2019-1708)

This update for libu2f-host and pamu2f to version 1.0.8 fixes the following issues : Security issues fixed for libu2f-host : - CVE-2019-9578: Fixed a memory leak due to a wrong parse of init's response bsc1128140. Security issues fixed for pamu2f : - CVE-2019-12209: Fixed an issue where symlinks ...

8.1CVSS6.3AI score0.02807EPSS
SaveExploits2References6
osv_opensuse
osv_opensuse
•added 2019/07/19 3:59 p.m.•12 views

OPENSUSE-SU-2019:1725-1 Security update for libu2f-host, pam_u2f

This update for libu2f-host and pamu2f to version 1.0.8 fixes the following issues: Security issues fixed for libu2f-host: - CVE-2019-9578: Fixed a memory leak due to a wrong parse of init's response bsc1128140. Security issues fixed for pamu2f: - CVE-2019-12209: Fixed an issue where symlinks in...

8.1CVSS7.6AI score0.02807EPSS
SaveExploits2References7
osv_opensuse
osv_opensuse
•added 2019/07/19 5:59 a.m.•8 views

OPENSUSE-SU-2019:1708-1 Security update for libu2f-host, pam_u2f

This update for libu2f-host and pamu2f to version 1.0.8 fixes the following issues: Security issues fixed for libu2f-host: - CVE-2019-9578: Fixed a memory leak due to a wrong parse of init's response bsc1128140. Security issues fixed for pamu2f: - CVE-2019-12209: Fixed an issue where symlinks in...

8.1CVSS7.6AI score0.02807EPSS
SaveExploits2References7
OPENSUSE Linux
OPENSUSE Linux
•added 2019/07/19 12:00 a.m.•156 views

Security update for libu2f-host, pam_u2f (moderate)

openSUSE Security Update: Security update for libu2f-host, pamu2f Announcement ID: openSUSE-SU-2019:1708-1 Rating: moderate References: 1128140 1135727 1135729 Cross-References: CVE-2019-12209 CVE-2019-12210 CVE-2019-9578 Affected Products: openSUSE Leap 15.1 An update that fixes three...

8.1CVSS7.6AI score0.02807EPSS
SaveExploits2References3
BDU FSTEC
BDU FSTEC
•added 2019/07/18 12:00 a.m.•29 views

Sn5Crypto.sys Driver DoS

The vulnerability of the Sn5Crypto.sys driver of the Secret Net Studio security system is related to errors in processing the SECURITYDESCRIPTOR structure. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.9CVSS5.5AI score
SaveExploits0Affected Software1
Rows per page
Query Builder