Lucene search
+L

3215 matches found

osv_ubuntu
osv_ubuntu
•added 2021/06/02 1:15 p.m.•24 views

UBUNTU-CVE-2020-14340

A vulnerability was discovered in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cycles. It may allow the attacker to cause a denial of service. It affects XNIO versions 3.6.0.Beta1 through 3.8.1.Final...

5.9CVSS6.8AI score0.02212EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2021/06/02 12:04 p.m.•55 views

CVE-2020-14340

A vulnerability was discovered in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cycles. It may allow the attacker to cause a denial of service. It affects XNIO versions 3.6.0.Beta1 through 3.8.1.Final...

5.6AI score0.02212EPSS
SaveExploits0References3
Mend
Mend
•added 2021/06/02 12:04 p.m.•10 views

CVE-2020-14340

A vulnerability was discovered in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cycles. It may allow the attacker to cause a denial of service. It affects XNIO versions 3.6.0.Beta1 through 3.8.1.Final...

8.2CVSS0.02212EPSS
SaveExploits0References4
CVE
CVE
•added 2021/06/02 12:04 p.m.•199 views

CVE-2020-14340

CVE-2020-14340 affects XNIO prior to the fix in RHSA-2020:4246. A file descriptor leak occurs due to growing NIO Selector handles across garbage collection cycles, enabling a denial-of-service condition. Affected: XNIO 3.6.0.Beta1 through 3.8.1.Final. Root cause: leak in file descriptor managemen...

5.9CVSS5.5AI score0.02212EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
•added 2021/06/02 12:04 p.m.•99 views

CVE-2020-14340

A vulnerability was discovered in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cycles. It may allow the attacker to cause a denial of service. It affects XNIO versions 3.6.0.Beta1 through 3.8.1.Final...

5.9CVSS6.2AI score0.02212EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/02 12:00 a.m.•7 views

CVE-2020-14340: Uncontrolled Resource Consumption

A vulnerability was discovered in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cycles. It may allow the attacker to cause a denial of service. It affects XNIO versions 3.6.0.Beta1 through 3.8.1.Final...

5.9CVSS5.6AI score0.02212EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2021/06/01 2:15 p.m.•10 views

DEBIAN-CVE-2021-3543

A flaw null pointer dereference in the Nitro Enclaves kernel driver was found in the way that Enclaves VMs forces closures on the enclave file descriptor. A local user of a host machine could use this flaw to crash the system or escalate their privileges on the system...

6.7CVSS7AI score0.00301EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2021/06/01 2:15 p.m.•15 views

UBUNTU-CVE-2021-3543

A flaw null pointer dereference in the Nitro Enclaves kernel driver was found in the way that Enclaves VMs forces closures on the enclave file descriptor. A local user of a host machine could use this flaw to crash the system or escalate their privileges on the system...

6.7CVSS7.2AI score0.00301EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2021/06/01 2:15 p.m.•13 views

CVE-2021-3543

A flaw null pointer dereference in the Nitro Enclaves kernel driver was found in the way that Enclaves VMs forces closures on the enclave file descriptor. A local user of a host machine could use this flaw to crash the system or escalate their privileges on the system...

7.2CVSS5.4AI score0.00301EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2021/06/01 2:15 p.m.•42 views

CVE-2021-3543

A flaw null pointer dereference in the Nitro Enclaves kernel driver was found in the way that Enclaves VMs forces closures on the enclave file descriptor. A local user of a host machine could use this flaw to crash the system or escalate their privileges on the system...

7.2CVSS6.9AI score0.00301EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2021/06/01 11:11 a.m.•26 views

kernel: nitro_enclaves stale file descriptors on failed usercopy

A flaw null pointer dereference in the Nitro Enclaves kernel driver was found in the way that Enclaves VMs forces closures on the enclave file descriptor. A local user of a host machine could use this flaw to crash the system or escalate their privileges on the system...

7.2CVSS7.3AI score0.00301EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2021/05/19 12:25 a.m.•71 views

CVE-2021-3543

A flaw null pointer dereference in the Nitro Enclaves kernel driver was found in the way that Enclaves VMs forces closures on the enclave file descriptor. A local user of a host machine could use this flaw to crash the system or escalate their privileges on the system...

7.2CVSS1.1AI score0.00301EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2021/05/19 12:00 a.m.•40 views

CentOS 8 : spice-vdagent (CESA-2021:1791)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:1791 advisory. - spice-vdagent: memory DoS via arbitrary entries in activexfers hash table CVE-2020-25650 - spice-vdagent: possible file transfer DoS and information...

6.4CVSS6.2AI score0.005EPSS
SaveExploits4References5
osv_oesa
osv_oesa
•added 2021/05/15 11:04 a.m.•18 views

OESA-2021-1186 binutils security update

Security Fixes: There's a flaw in the BFD library of binutils in versions before 2.36. An attacker who supplies a crafted file to an application linked with BFD, and using the DWARF functionality, could cause an impact to system availability by way of excessive memory consumption.CVE-2021-3487...

6.5CVSS6.7AI score
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
•added 2021/05/13 7:34 p.m.•58 views

Security Bulletin: A security vulnerability in Node.js affects IBM Cloud Pak for Multicloud Management Managed Service

Summary A security vulnerability in Node.js affects IBM Cloud Pak for Multicloud Management Managed Service. Vulnerability Details CVEID: CVE-2021-23840 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by an integer overflow in CipherUpdate. By sending an overly long argument, an...

7.8CVSS6.5AI score0.77385EPSS
SaveExploits1Affected Software1
osv_cve
osv_cve
•added 2021/05/06 1:15 p.m.•37 views

CVE-2020-28012

Exim 4 before 4.94.2 allows Exposure of File Descriptor to Unintended Control Sphere because rdainterpret uses a privileged pipe that lacks a close-on-exec flag...

7.8CVSS9.3AI score
SaveExploits0References1
osv_debian
osv_debian
•added 2021/05/06 1:15 p.m.•17 views

DEBIAN-CVE-2020-28012

Exim 4 before 4.94.2 allows Exposure of File Descriptor to Unintended Control Sphere because rdainterpret uses a privileged pipe that lacks a close-on-exec flag...

7.8CVSS7.5AI score0.00395EPSS
SaveExploits1References1
NVD
NVD
•added 2021/05/06 1:15 p.m.•24 views

CVE-2020-28012

Exim 4 before 4.94.2 allows Exposure of File Descriptor to Unintended Control Sphere because rdainterpret uses a privileged pipe that lacks a close-on-exec flag...

7.8CVSS0.00395EPSS
SaveExploits1References1
Prion
Prion
•added 2021/05/06 1:15 p.m.•37 views

Code injection

Exim 4 before 4.94.2 allows Exposure of File Descriptor to Unintended Control Sphere because rdainterpret uses a privileged pipe that lacks a close-on-exec flag...

7.2CVSS8.4AI score0.00395EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2021/05/06 3:33 a.m.•51 views

CVE-2020-28012

Exim 4 before 4.94.2 allows Exposure of File Descriptor to Unintended Control Sphere because rdainterpret uses a privileged pipe that lacks a close-on-exec flag...

8.5AI score0.00395EPSS
SaveExploits1References1
Rows per page
Query Builder