Lucene search
+L

975 matches found

OSV
OSV
added 2025/06/02 12:15 p.m.4 views

UBUNTU-CVE-2025-46807

A Allocation of Resources Without Limits or Throttling vulnerability in sslh allows attackers to easily exhaust the file descriptors in sslh and deny legitimate users service.This issue affects sslh before 2.2.4...

8.7CVSS5.7AI score0.00393EPSS
SaveExploits0References5
OSV
OSV
added 2025/06/02 11:29 a.m.7 views

CVE-2025-46807 File Descriptor Exhaustion in sslh-select and sslh-ev triggers SEGFAULT

A Allocation of Resources Without Limits or Throttling vulnerability in sslh allows attackers to easily exhaust the file descriptors in sslh and deny legitimate users service.This issue affects sslh before 2.2.4...

8.7CVSS7AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/06/02 11:29 a.m.6 views

CVE-2025-46807 File Descriptor Exhaustion in sslh-select and sslh-ev triggers SEGFAULT

A Allocation of Resources Without Limits or Throttling vulnerability in sslh allows attackers to easily exhaust the file descriptors in sslh and deny legitimate users service.This issue affects sslh before 2.2.4...

8.7CVSS6.5AI score0.00393EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/05/21 6:12 p.m.10 views

CVE-1999-0848

Denial of service in BIND named via consuming more than "fdmax" file descriptors...

5CVSS7AI score0.06389EPSS
SaveExploits1References1
SUSE CVE
SUSE CVE
added 2025/05/03 2:50 a.m.6 views

SUSE CVE-2023-53117

In the Linux kernel, the following vulnerability has been resolved: fs: prevent out-of-bounds array speculation when closing a file descriptor Google-Bug-Id: 114199369...

5.5CVSS6.5AI score0.00196EPSS
SaveExploits0References12
CNNVD
CNNVD
added 2025/05/02 12:0 a.m.8 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from an array out-of-bounds risk when file descriptors are closed...

7.1CVSS6.5AI score0.00196EPSS
SaveExploits0References8
Snyk
Snyk
added 2025/04/28 4:41 a.m.10 views

Allocation of File Descriptors or Handles Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of File Descriptors or Handles Without Limits or Throttling due to the manipulation of the File argument in the main function of the file examples/LOP/src/genRandomLOPInstance.c. An attacker can cause uncontrolled file...

4.8CVSS6.9AI score0.00176EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/04/09 12:0 a.m.7 views

FreeBSD : Mozilla -- privilege scalation attack (315f568e-13c8-11f0-a5bd-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 315f568e-13c8-11f0-a5bd-b42e991fc52e advisory. [email protected] reports: Leaking of file descriptors from the fork server to web content processes...

7.4CVSS7.1AI score0.00371EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2025/04/02 1:29 p.m.5 views

SUSE CVE-2025-3032

Leaking of file descriptors from the fork server to web content processes could allow for privilege escalation attacks. This vulnerability was fixed in Firefox 137 and Thunderbird 137...

7.4CVSS6.7AI score0.00371EPSS
SaveExploits0References4
OSV
OSV
added 2025/04/01 1:15 p.m.8 views

CVE-2025-3032

Leaking of file descriptors from the fork server to web content processes could allow for privilege escalation attacks. This vulnerability affects Firefox 137 and Thunderbird 137...

7.4CVSS5.8AI score0.00371EPSS
SaveExploits0References3
OSV
OSV
added 2025/04/01 1:15 p.m.17 views

UBUNTU-CVE-2025-3032

Leaking of file descriptors from the fork server to web content processes could allow for privilege escalation attacks. This vulnerability was fixed in Firefox 137 and Thunderbird 137...

7.4CVSS6.9AI score0.00371EPSS
SaveExploits0References7
Debian CVE
Debian CVE
added 2025/04/01 12:29 p.m.11 views

CVE-2025-3032

Leaking of file descriptors from the fork server to web content processes could allow for privilege escalation attacks. This vulnerability was fixed in Firefox 137 and Thunderbird 137...

7.4CVSS6.6AI score0.00371EPSS
SaveExploits0
CVE
CVE
added 2025/04/01 12:29 p.m.74 views

CVE-2025-3032

The CVE-2025-3032 entry describes a vulnerability in Firefox and Thunderbird where file descriptors leak from the fork server to web content processes, enabling privilege escalation. Affected products are Firefox and Thunderbird versions prior to 137. The root cause is the unintended propagation ...

7.4CVSS6.7AI score0.00371EPSS
SaveExploits0References3Affected Software2
Positive Technologies
Positive Technologies
added 2025/04/01 12:0 a.m.6 views

PT-2025-14107

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 137 Thunderbird versions prior to 137 Description The issue involves the leaking of file descriptors from the fork server to web content processes, which could allow for privilege escalation attacks. Recommendations F...

9.8CVSS7.6AI score0.00568EPSS
SaveExploits0References373
Tenable Nessus
Tenable Nessus
added 2025/03/07 12:0 a.m.25 views

Amazon Linux 2023 : libtirpc, libtirpc-devel (ALAS2023-2025-890)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-890 advisory. In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. This can, in turn, lead to an svcrun infinit...

7.5CVSS7.6AI score0.02606EPSS
SaveExploits0References4
Amazon
Amazon
added 2025/03/06 12:0 a.m.8 views

Important: libtirpc

Issue Overview: In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. This can, in turn, lead to an svcrun infinite loop without accepting new connections. CVE-2021-46828 Affected Packages:...

7.5CVSS6.8AI score0.02606EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2014-3956

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The smcloseonexec function in conf.c in sendmail before 8.14.9 has arguments in the wrong order, and consequently skips setting expected FDCLOEXEC flags, which...

1.9CVSS5.5AI score0.00635EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/03 12:0 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2011-1082

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/eventpoll.c in the Linux kernel before 2.6.38 places epoll file descriptors within other epoll data structures without properly checking for 1 closed loops o...

4.9CVSS5.9AI score0.00778EPSS
SaveExploits3References2
zdt
zdt
added 2025/02/22 12:0 a.m.571 views

Linux io_uring Use-After-Free Exploit

The Linux kernel suffers from a use-after-free of struct ioevfd because ioeventfddosignal frees an object when the refcount reaches zero without waiting for the required grace period. Summary UAF of struct ioevfd because ioeventfddosignal frees an object when the refcount reaches zero without...

6.9AI score0.00246EPSS
SaveExploits2
Oracle linux
Oracle linux
added 2024/12/19 12:0 a.m.20 views

pam security update

1.5.1-21.0.1 - pamaccess: clean up the remote host matching code Orabug: 36771903 - pamlimits: fix use after free in pamsmopensession Orabug: 36406534 1.5.1-21 - pamunix: always run the helper to obtain shadow password file entries. CVE-2024-10041. Resolves: RHEL-62880 1.5.1-20 - libpam: support...

4.7CVSS7.3AI score0.00459EPSS
SaveExploits1
Rows per page
Query Builder