Lucene search
+L

3215 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/08 12:00 a.m.•9 views

CVE-2021-42075: Missing Release of Resource after Effective Lifetime

An issue was discovered in Barrier before 2.3.4. The barriers component aka the server-side implementation of Barrier does not correctly close file descriptors for established TCP connections. An unauthenticated remote attacker can thus cause file descriptor exhaustion in the server process,...

7.5CVSS5.8AI score0.02196EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/11/08 12:00 a.m.•10 views

PT-2021-23507

Name of the Vulnerable Software and Affected Versions Barrier versions prior to 2.3.4 Description An issue in the barriers component, which is the server-side implementation of Barrier, fails to correctly close file descriptors for established TCP connections. This allows an unauthenticated remot...

7.5CVSS0.02196EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
•added 2021/10/28 12:00 a.m.•24 views

F5 Networks BIG-IP : D-Bus vulnerability (K16729408)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.4.1 / 17.1.3 / 17.5.1. It is, therefore, affected by a vulnerability as referenced in the K16729408 advisory. An issue was discovered in dbus = 1.3.0 before 1.12.18. The DBusServer in libdbus, as used in dbus- daemon,...

5.5CVSS6.7AI score0.00569EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2021/10/27 12:00 a.m.•22 views

NewStart CGSL CORE 5.05 / MAIN 5.05 : dbus Vulnerability (NS-SA-2021-0136)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has dbus packages installed that are affected by a vulnerability: - An issue was discovered in dbus = 1.3.0 before 1.12.18. The DBusServer in libdbus, as used in dbus- daemon, leaks file descriptors when a message exceeds the...

5.5CVSS6.7AI score0.00569EPSS
SaveExploits1References3
osv_gsd
osv_gsd
•added 2021/10/19 4:31 p.m.•17 views

GSD-2021-1001678 binder: make sure fd closes complete

binder: make sure fd closes complete This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.70 by commit d5b0473707fa53b03a5db0256ce62b2874bddbc7...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2021/10/19 12:00 a.m.•3 views

PT-2021-30082

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.150 Description The issue is related to the binder in the Linux Kernel, where it does not ensure that file descriptor closes are complete. This could potentially lead to security vulnerabilities, although th...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/10/19 12:00 a.m.•2 views

PT-2021-30143

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.70 Description The issue is related to the binder in the Linux Kernel, where it does not ensure that file descriptor closes are complete. This is an automated ID intended to aid in the discovery of potentia...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/10/19 12:00 a.m.•2 views

PT-2021-26236

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.9 Description: The issue is related to the binder in the Linux Kernel, where it does not ensure that file descriptor closes are complete. This is an automated ID intended to aid in the discovery of potenti...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/10/19 12:00 a.m.•4 views

PT-2021-26087

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.150 Description The issue is related to the binder in the Linux Kernel, where it does not ensure that file descriptor closes are complete. This could potentially lead to security vulnerabilities, although th...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/10/19 12:00 a.m.•2 views

PT-2021-26148

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.70 Description The issue is related to the binder in the Linux Kernel, where it does not ensure that file descriptor closes are complete. This is an automated ID intended to aid in the discovery of potentia...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/10/19 12:00 a.m.•4 views

PT-2021-30231

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.0 through v5.14.8 Description The issue is related to the binder in the Linux Kernel, where it does not ensure that file descriptor closes are complete. This is an automated ID intended to aid in discovery of potential...

5.8AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2021/09/20 12:00 a.m.•25 views

XNIO Uncontrolled Resource Consumption DoS

The vulnerability of the XNIO input/output file descriptor structure relates to the increasing amount of data between garbage collection cycles. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

5.9CVSS7AI score0.02212EPSS
SaveExploits0References7Affected Software2
Amazon
Amazon
•added 2021/09/15 12:00 a.m.•92 views

Medium: gcc10-binutils

Issue Overview: An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.35.1. A heap-based buffer over-read can occur in bfdgetlsigned32 in libbfd.c because shentsize is not validated in bfdelfslurpsecondaryrelocsection in elf.c. CVE-2020-354...

7.8CVSS7.1AI score0.03278EPSS
SaveExploits4
Positive Technologies
Positive Technologies
•added 2021/09/12 12:00 a.m.•25 views

PT-2021-6871

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a lack of authentication procedure in the Linux kernel, specifically in the control groups and namespaces subsystem. This allows an unprivileged user to write to ...

8.2CVSS6.7AI score0.00536EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2021/08/30 12:00 a.m.•4 views

PT-2024-11357

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the Linux kernel's binder mechanism. During BC FREE BUFFER processing, the BINDER TYPE FDA object cleanup may close one or more file descriptors. The close...

5.5CVSS0.0025EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2021/08/27 12:00 a.m.•37 views

openSUSE 15 Security Update : dbus-1 (openSUSE-SU-2021:1204-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:1204-1 advisory. - An issue was discovered in dbus = 1.3.0 before 1.12.18. The DBusServer in libdbus, as used in dbus- daemon, leaks file descriptors when a message...

5.5CVSS6.6AI score0.00569EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
•added 2021/08/25 9:00 p.m.•30 views

Compiler optimisation leads to SEGFAULT

Affected versions of the pnet crate were optimized out by compiler, which caused dereference of uninitialized file descriptor which caused segfault...

2.8AI score
SaveExploits0References4Affected Software1
osv_ghsa
osv_ghsa
•added 2021/08/25 9:00 p.m.•51 views

GHSA-R6FF-2Q3C-V3PV Compiler optimisation leads to SEGFAULT

Affected versions of the pnet crate were optimized out by compiler, which caused dereference of uninitialized file descriptor which caused segfault...

6CVSS7.5AI score0.0099EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2021/08/24 12:00 a.m.•28 views

openSUSE 15 Security Update : dbus-1 (openSUSE-SU-2021:2810-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:2810-1 advisory. - An issue was discovered in dbus = 1.3.0 before 1.12.18. The DBusServer in libdbus, as used in dbus- daemon, leaks file descriptors when a message...

5.5CVSS6.6AI score0.00569EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2021/08/23 12:00 a.m.•19 views

PT-2021-7235 · Gitlab · Gitlab Runner +1

Name of the Vulnerable Software and Affected Versions: GitLab Runner versions up to 14.3.4 GitLab Runner versions 14.4 to 14.4.2 GitLab Runner versions 14.5 to 14.5.2 Description: The issue is related to information disclosure in GitLab Runner. In specific circumstances, trace file buffers would...

7.8CVSS6.9AI score0.0087EPSS
SaveExploits0References12
Rows per page
Query Builder