Lucene search
+L

91 matches found

OSV
OSV
added 2022/10/18 8:15 p.m.6 views

DEBIAN-CVE-2022-3594

A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function intrcallback of the file drivers/net/usb/r8152.c of the component BPF. The manipulation leads to logging of excessive data. The attack can be launched remotely. It is...

5.3CVSS5.1AI score0.02211EPSS
Exploits0References1
OSV
OSV
added 2022/10/18 8:15 p.m.16 views

AZL-11268 CVE-2022-3594 affecting package kernel for versions less than 5.15.79.1-1

A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function intrcallback of the file drivers/net/usb/r8152.c of the component BPF. The manipulation leads to logging of excessive data. The attack can be launched remotely. It is...

5.3CVSS5.4AI score0.02211EPSS
Exploits0References1
OSV
OSV
added 2022/10/18 8:15 p.m.2 views

UBUNTU-CVE-2022-3594

A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function intrcallback of the file drivers/net/usb/r8152.c of the component BPF. The manipulation leads to logging of excessive data. The attack can be launched remotely. It is...

5.3CVSS5.5AI score0.02211EPSS
Exploits0References18
CNNVD
CNNVD
added 2022/10/18 12:0 a.m.6 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a security vulnerability that originates from an affected function intrcallback in file drivers/net/usb/r8152.c, which results in logging of too much...

5.3CVSS6.5AI score0.02211EPSS
Exploits0References21
Vulnrichment
Vulnrichment
added 2022/10/18 12:0 a.m.6 views

CVE-2022-3594 Linux Kernel BPF r8152.c intr_callback logging of excessive data

A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function intrcallback of the file drivers/net/usb/r8152.c of the component BPF. The manipulation leads to logging of excessive data. The attack can be launched remotely. It is...

5.3CVSS6.9AI score0.02211EPSS
Exploits0References4
Mageia
Mageia
added 2022/09/10 8:26 p.m.70 views

Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 5.15.65 and fixes at least the following security issues: An out-of-bounds memory read flaw was found in the Linux kernel's BPF subsystem in how a user calls the bpftailcall function with a key larger than the maxentries of the map. This flaw allows a local...

7.8CVSS7.2AI score0.00871EPSS
Exploits4References5
OSV
OSV
added 2022/09/10 8:26 p.m.8 views

MGASA-2022-0324 Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 5.15.65 and fixes at least the following security issues: An out-of-bounds memory read flaw was found in the Linux kernel's BPF subsystem in how a user calls the bpftailcall function with a key larger than the maxentries of the map. This flaw allows a local...

7.8CVSS6.5AI score0.00871EPSS
Exploits4References6
OSV
OSV
added 2021/12/26 1:6 p.m.7 views

OPENSUSE-SU-2021:1625-1 Security update for runc

This update for runc fixes the following issues: Update to runc v1.0.3. CVE-2021-43784: Fixed a potential vulnerability related to the internal usage of netlink, which is believed to not be exploitable with any released versions of runc bsc1193436 Fixed inability to start a container with...

6CVSS6.1AI score0.01677EPSS
Exploits1References3
OSV
OSV
added 2021/03/17 3:15 p.m.4 views

CVE-2020-35456

The Taidii Diibear Android application 2.4.0 and all its derivatives allow attackers to view private chat messages and media files via logcat because of excessive logging...

5.5CVSS5.8AI score0.0054EPSS
Exploits0References2
NVD
NVD
added 2021/03/17 3:15 p.m.15 views

CVE-2020-35456

The Taidii Diibear Android application 2.4.0 and all its derivatives allow attackers to view private chat messages and media files via logcat because of excessive logging...

5.5CVSS0.0054EPSS
Exploits0References2
Cvelist
Cvelist
added 2021/03/17 2:56 p.m.24 views

CVE-2020-35456

The Taidii Diibear Android application 2.4.0 and all its derivatives allow attackers to view private chat messages and media files via logcat because of excessive logging...

5.5AI score0.0054EPSS
Exploits0References2
CVE
CVE
added 2021/03/17 2:56 p.m.50 views

CVE-2020-35456

The CVE-2020-35456 entry concerns the Taidii Diibear Android application version 2.4.0 (and derivatives). The vulnerability is caused by excessive logging that allows attackers who can access logcat to view private chat messages and media files, exposing partial confidentiality. Affected componen...

5.5CVSS5.4AI score0.0054EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2021/01/19 12:0 a.m.10 views

My AIA SG application security vulnerability

A security vulnerability exists in My AIA SG application 1.2.6 for Android that allows attackers to obtain user credentials via logcat due to excessive logging...

5.8AI score
Exploits0References2
NVD
NVD
added 2020/08/13 1:15 p.m.23 views

CVE-2020-13280

For GitLab before 13.0.12, 13.1.6, 13.2.3 a memory exhaustion flaw exists due to excessive logging of an invite email error message...

6.5CVSS6.5AI score0.0105EPSS
Exploits1References2
Prion
Prion
added 2020/08/13 1:15 p.m.22 views

Memory corruption

For GitLab before 13.0.12, 13.1.6, 13.2.3 a memory exhaustion flaw exists due to excessive logging of an invite email error message...

4CVSS6.5AI score0.0105EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2020/08/13 1:15 p.m.4 views

UBUNTU-CVE-2020-13280

For GitLab before 13.0.12, 13.1.6, 13.2.3 a memory exhaustion flaw exists due to excessive logging of an invite email error message...

6.5CVSS5.8AI score0.0105EPSS
Exploits1References3
CVE
CVE
added 2020/08/13 12:49 p.m.57 views

CVE-2020-13280

CVE-2020-13280 affects GitLab before versions 13.0.12, 13.1.6, and 13.2.3. The vulnerability is a memory-exhaustion flaw caused by excessive logging of an invite email error message. The public sources in the connected documents consistently describe this issue as a memory-related impact, with no...

6.5CVSS6.3AI score0.0105EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2019/01/16 8:29 p.m.4 views

ALPINE-CVE-2018-5737

A problem with the implementation of the new serve-stale feature in BIND 9.12 can lead to an assertion failure in rbtdb.c, even when stale-answer-enable is off. Additionally, problematic interaction between the serve-stale feature and NSEC aggressive negative caching can in some cases cause...

7.5CVSS6.5AI score0.10355EPSS
Exploits0References1
Prion
Prion
added 2019/01/16 8:29 p.m.20 views

Design/Logic Flaw

A problem with the implementation of the new serve-stale feature in BIND 9.12 can lead to an assertion failure in rbtdb.c, even when stale-answer-enable is off. Additionally, problematic interaction between the serve-stale feature and NSEC aggressive negative caching can in some cases cause...

5CVSS7.2AI score0.10355EPSS
Exploits0References4Affected Software1
FreeBSD
FreeBSD
added 2018/05/18 12:0 a.m.37 views

BIND -- multiple vulnerabilities

ISC reports: An error in zone database reference counting can lead to an assertion failure if a server which is running an affected version of BIND attempts several transfers of a slave zone in quick succession. A problem with the implementation of the new serve-stale feature in BIND 9.12 can lea...

2AI score
Exploits0References2
Rows per page
Query Builder