Lucene search
+L

704 matches found

SUSE CVE
SUSE CVE
•added 2023/12/21 2:26 a.m.•11 views

SUSE CVE-2023-6932

A use-after-free vulnerability in the Linux kernel's ipv4: igmp component can be exploited to achieve local privilege escalation. A race condition can be exploited to cause a timer be mistakenly registered on a RCU read locked object which is freed by another thread. We recommend upgrading past...

7CVSS6.5AI score0.00367EPSS
SaveExploits0References44
RedhatCVE
RedhatCVE
•added 2023/12/19 9:46 p.m.•52 views

CVE-2023-6932

A race condition has been discovered in the Linux kernel's Internet Group Management Protocol IGMP implementation. This vulnerability may enable an attacker to provoke an application crash or potentially escalate privileges locally. By exploiting the race condition, an adversary could disrupt the...

7CVSS7.3AI score0.00367EPSS
SaveExploits0References3
osv_azl
osv_azl
•added 2023/12/19 2:15 p.m.•20 views

AZL-34870 CVE-2023-6932 affecting package kernel for versions less than 6.6.29.1-4

A use-after-free vulnerability in the Linux kernel's ipv4: igmp component can be exploited to achieve local privilege escalation. A race condition can be exploited to cause a timer be mistakenly registered on a RCU read locked object which is freed by another thread. We recommend upgrading past...

7CVSS6.6AI score0.00367EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2023/12/19 2:15 p.m.•13 views

CVE-2023-6932

A use-after-free vulnerability in the Linux kernel's ipv4: igmp component can be exploited to achieve local privilege escalation. A race condition can be exploited to cause a timer be mistakenly registered on a RCU read locked object which is freed by another thread. We recommend upgrading past...

7.8CVSS7.2AI score0.00367EPSS
SaveExploits0References6Affected Software1
osv_ubuntu
osv_ubuntu
•added 2023/12/19 2:15 p.m.•21 views

UBUNTU-CVE-2023-6932

A use-after-free vulnerability in the Linux kernel's ipv4: igmp component can be exploited to achieve local privilege escalation. A race condition can be exploited to cause a timer be mistakenly registered on a RCU read locked object which is freed by another thread. We recommend upgrading past...

7.8CVSS6.6AI score0.00367EPSS
SaveExploits0References22
UbuntuCve
UbuntuCve
•added 2023/12/19 2:15 p.m.•52 views

CVE-2023-6932

A use-after-free vulnerability in the Linux kernel's ipv4: igmp component can be exploited to achieve local privilege escalation. A race condition can be exploited to cause a timer be mistakenly registered on a RCU read locked object which is freed by another thread. We recommend upgrading past...

7.8CVSS6.3AI score0.00367EPSS
SaveExploits0References21
osv_cve
osv_cve
•added 2023/12/19 2:09 p.m.•18 views

CVE-2023-6932 Use-after-free in Linux kernel's ipv4: igmp component

A use-after-free vulnerability in the Linux kernel's ipv4: igmp component can be exploited to achieve local privilege escalation. A race condition can be exploited to cause a timer be mistakenly registered on a RCU read locked object which is freed by another thread. We recommend upgrading past...

7.8CVSS6.6AI score
SaveExploits0References12
Vulnrichment
Vulnrichment
•added 2023/12/19 2:09 p.m.•13 views

CVE-2023-6932 Use-after-free in Linux kernel's ipv4: igmp component

A use-after-free vulnerability in the Linux kernel's ipv4: igmp component can be exploited to achieve local privilege escalation. A race condition can be exploited to cause a timer be mistakenly registered on a RCU read locked object which is freed by another thread. We recommend upgrading past...

7.8CVSS6.6AI score0.00367EPSS
SaveExploits0References5
Mend
Mend
•added 2023/12/19 2:09 p.m.•3 views

CVE-2023-6932

A use-after-free vulnerability in the Linux kernel's ipv4: igmp component can be exploited to achieve local privilege escalation. A race condition can be exploited to cause a timer be mistakenly registered on a RCU read locked object which is freed by another thread. We recommend upgrading past...

8.5CVSS0.00367EPSS
SaveExploits0References12
Cvelist
Cvelist
•added 2023/12/19 2:09 p.m.•48 views

CVE-2023-6932 Use-after-free in Linux kernel's ipv4: igmp component

A use-after-free vulnerability in the Linux kernel's ipv4: igmp component can be exploited to achieve local privilege escalation. A race condition can be exploited to cause a timer be mistakenly registered on a RCU read locked object which is freed by another thread. We recommend upgrading past...

7.8CVSS7.7AI score0.00367EPSS
SaveExploits0References5
CVE
CVE
•added 2023/12/19 2:09 p.m.•292 views

CVE-2023-6932

CVE-2023-6932 is a Linux kernel vulnerability affecting the ipv4: igmp component. The issue is described as a use-after-free condition with a race that can cause a timer to be registered on an RCU read-locked object that is freed by another thread, enabling local privilege escalation. Connected d...

7.8CVSS7.3AI score0.00367EPSS
SaveExploits0References9Affected Software2
CNNVD
CNNVD
•added 2023/12/19 12:00 a.m.•9 views

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. The Linux kernel suffers from a resource management error vulnerability that originates from a confusion in the instructions responsible for freeing memory in the ipv4: igmp...

7.8CVSS5.1AI score0.00367EPSS
SaveExploits0References15
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/19 12:00 a.m.•5 views

CVE-2023-6932: Use After Free

A use-after-free vulnerability in the Linux kernel's ipv4: igmp component can be exploited to achieve local privilege escalation. A race condition can be exploited to cause a timer be mistakenly registered on a RCU read locked object which is freed by another thread. We recommend upgrading past...

7.8CVSS7AI score0.00367EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2023/12/15 12:00 a.m.•59 views

Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2023-461)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-461 advisory. In the Linux kernel, the following vulnerability has been resolved: lib/generic-radix-tree.c: Don't overflow in peek CVE-2021-47432 In the Linux kernel, the following vulnerability has been...

8.8CVSS6.3AI score0.00367EPSS
SaveExploits0References67
NVD
NVD
•added 2023/12/05 1:15 a.m.•33 views

CVE-2023-48691

Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause an out-of-bounds write in Azure RTOS NETX Duo, that could lead to remote code execution. The affected components include process related to IGMP protocol i...

9.8CVSS0.03109EPSS
SaveExploits0References1
Prion
Prion
•added 2023/12/05 1:15 a.m.•35 views

Remote code execution

Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause an out-of-bounds write in Azure RTOS NETX Duo, that could lead to remote code execution. The affected components include process related to IGMP protocol i...

7.5CVSS8.1AI score0.03109EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2023/12/05 12:24 a.m.•3 views

CVE-2023-48691

Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause an out-of-bounds write in Azure RTOS NETX Duo, that could lead to remote code execution. The affected components include process related to IGMP protocol i...

9.8CVSS0.03109EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2023/12/05 12:24 a.m.•43 views

CVE-2023-48691 Azure RTOS NetX Duo Remote Code Execution Vulnerability

Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause an out-of-bounds write in Azure RTOS NETX Duo, that could lead to remote code execution. The affected components include process related to IGMP protocol i...

8.1CVSS10AI score0.03109EPSS
SaveExploits0References1
CVE
CVE
•added 2023/12/05 12:24 a.m.•63 views

CVE-2023-48691

Azure RTOS NetX Duo contains an out-of-bounds write in the IGMP-related path (RTOS v6.2.1 and below) that could allow remote code execution. The vulnerability affects the NetX Duo TCP/IP stack used in embedded/IoT contexts. The publicly documented fix is in NetX Duo release 6.3.0; upgrading is ad...

9.8CVSS9.3AI score0.03109EPSS
SaveExploits0References1Affected Software1
osv_cve
osv_cve
•added 2023/12/05 12:24 a.m.•14 views

CVE-2023-48691 Azure RTOS NetX Duo Remote Code Execution Vulnerability

Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause an out-of-bounds write in Azure RTOS NETX Duo, that could lead to remote code execution. The affected components include process related to IGMP protocol i...

8.1CVSS8.2AI score
SaveExploits0References3
Rows per page
Query Builder