Lucene search
+L

490 matches found

OSV
OSV
added 2025/02/26 2:23 a.m.10 views

CVE-2022-49590 igmp: Fix data-races around sysctl_igmp_llm_reports.

In the Linux kernel, the following vulnerability has been resolved: igmp: Fix data-races around sysctligmpllmreports. While reading sysctligmpllmreports, it can be changed concurrently. Thus, we need to add READONCE to its readers. This test can be packed into a helper, so such changes will be in...

4.7CVSS5.8AI score
SaveExploits0References11
Cvelist
Cvelist
added 2025/02/26 2:23 a.m.23 views

CVE-2022-49590 igmp: Fix data-races around sysctl_igmp_llm_reports.

In the Linux kernel, the following vulnerability has been resolved: igmp: Fix data-races around sysctligmpllmreports. While reading sysctligmpllmreports, it can be changed concurrently. Thus, we need to add READONCE to its readers. This test can be packed into a helper, so such changes will be in...

0.00186EPSS
SaveExploits0References8
CVE
CVE
added 2025/02/26 2:23 a.m.162 views

CVE-2022-49589

CVE-2022-49589 affects the Linux kernel igmp subsystem: a data race occurs while reading sysctl_igmp_qrv, since the value could be changed concurrently. The fix described in the description is to add READ_ONCE() to readers of net->ipv4.sysctl_igmp_qrv, with follow-up changes planned after net ...

4.7CVSS5.3AI score0.00186EPSS
SaveExploits0References6Affected Software1
Debian CVE
Debian CVE
added 2025/02/26 2:23 a.m.18 views

CVE-2022-49589

In the Linux kernel, the following vulnerability has been resolved: igmp: Fix data-races around sysctligmpqrv. While reading sysctligmpqrv, it can be changed concurrently. Thus, we need to add READONCE to its readers. This test can be packed into a helper, so such changes will be in the follow-up...

4.7CVSS5.3AI score0.00186EPSS
SaveExploits0
CNNVD
CNNVD
added 2025/02/26 12:0 a.m.6 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the presence of data contention in sysctligmpllmreports...

4.7CVSS6.3AI score0.00186EPSS
SaveExploits0References9
Circl
Circl
added 2024/12/17 6:41 a.m.3 views

CISCO-SA-20180328-IGMP

creationtimestamp| type| source ---|---|--- 2024-12-17 06:41:53+00:00| seen| https://social.circl.lu/users/vulnerabilitylookup/statuses/113666794890561736...

7.2AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2024/12/04 12:0 a.m.9 views

Cisco NX-OS Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2012-1357)

The igmpsnooporibfillsourceupdate function in the IGMP process in NX-OS 5.0 and 5.1 on Cisco Nexus 5000 series switches allows remote attackers to cause a denial of service device reload via IGMP packets, aka Bug ID CSCts46521. This plugin only works with Tenable.ot. Please visit...

5CVSS5.5AI score0.01232EPSS
SaveExploits0References3
NVD
NVD
added 2024/11/13 5:15 a.m.35 views

CVE-2024-9409

CWE-400: An Uncontrolled Resource Consumption vulnerability exists that could cause the device to become unresponsive resulting in communication loss when a large amount of IGMP packets is present in the network...

8.7CVSS0.00776EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/13 4:29 a.m.35 views

CVE-2024-9409

CWE-400: An Uncontrolled Resource Consumption vulnerability exists that could cause the device to become unresponsive resulting in communication loss when a large amount of IGMP packets is present in the network...

8.7CVSS0.00776EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/13 4:29 a.m.12 views

CVE-2024-9409

CWE-400: An Uncontrolled Resource Consumption vulnerability exists that could cause the device to become unresponsive resulting in communication loss when a large amount of IGMP packets is present in the network...

8.7CVSS7AI score0.00776EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/13 4:29 a.m.406 views

CVE-2024-9409

CVE-2024-9409 affects Schneider Electric PowerLogic PM5300 series with Ethernet. Description confirms an Uncontrolled Resource Consumption vulnerability (CWE-400) that can cause devices to become unresponsive and lose communication when a large amount of IGMP packets is observed on the network. C...

8.7CVSS7AI score0.00776EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2024/10/14 7:53 p.m.18 views

CLSA-2024-1728935304 kernel: Fix of 12 CVEs

xfs: don't walk off the end of a directory data block CVE-2024-41013 - net/sched: clsu32: fix netns refcount changes in u32change CVE-2022-29581 - net/packet: fix slab-out-of-bounds access in packetrecvmsg CVE-2022-20368 - openvswitch: fix OOB access in reservesfasize CVE-2022-2639 - net: sched:...

8.6CVSS6.9AI score0.03872EPSS
SaveExploits9References1
NVD
NVD
added 2024/07/10 11:15 p.m.37 views

CVE-2024-39514

An Improper Check or Handling of Exceptional Conditions vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause a Denial of Service DoS. An attacker can send specific traffic to the device, which causes...

7.1CVSS0.00246EPSS
SaveExploits0References1
OSV
OSV
added 2024/07/10 11:15 p.m.9 views

CVE-2024-39514

An Improper Check or Handling of Exceptional Conditions vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause a Denial of Service DoS. An attacker can send specific traffic to the device, which causes...

7.1CVSS5.8AI score0.00246EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/07/10 11:5 p.m.22 views

CVE-2024-39514 Junos OS and Junos OS Evolved: Receiving specific traffic on devices with EVPN-VPWS with IGMP-snooping enabled will cause the rpd to crash

An Improper Check or Handling of Exceptional Conditions vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause a Denial of Service DoS. An attacker can send specific traffic to the device, which causes...

7.1CVSS7AI score0.00246EPSS
SaveExploits0References1
CVE
CVE
added 2024/07/10 11:5 p.m.73 views

CVE-2024-39514

CVE-2024-39514 affects Junos OS and Junos OS Evolved. An attacker—adjacent, unauthenticated—can trigger a crash of the Routing Protocol Daemon (rpd) by sending specific traffic on devices with EVPN-VPWS and IGMP-snooping enabled, causing a DoS. Affected ranges are listed per release: Junos OS ver...

7.1CVSS6.6AI score0.00246EPSS
SaveExploits0References1Affected Software2
Tenable Nessus
Tenable Nessus
added 2024/07/05 12:0 a.m.38 views

OracleVM 3.4 : kernel-uek (OVMSA-2024-0006)

The remote OracleVM system is missing necessary patches to address security updates: 4.1.12-124.87.2- net: sched: fix race condition in qdiscgraft Eric Dumazet Orabug: 35250827 CVE-2023-05904.1.12-124.87.1- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet Zhengchao Shao Orabug:...

7.8CVSS6.9AI score0.00549EPSS
SaveExploits0References9
SUSE CVE
SUSE CVE
added 2024/05/23 3:5 a.m.6 views

SUSE CVE-2021-47238

In the Linux kernel, the following vulnerability has been resolved: net: ipv4: fix memory leak in ipmcadd1src BUG: memory leak unreferenced object 0xffff888101bc4c00 size 32: comm "syz-executor527", pid 360, jiffies 4294807421 age 19.329s hex dump first 32 bytes: 00 00 00 00 00 00 00 00 00 00 00 ...

5.5CVSS6.6AI score0.00236EPSS
SaveExploits0References6
OSV
OSV
added 2024/05/21 3:15 p.m.1 views

DEBIAN-CVE-2021-47238

In the Linux kernel, the following vulnerability has been resolved: net: ipv4: fix memory leak in ipmcadd1src BUG: memory leak unreferenced object 0xffff888101bc4c00 size 32: comm "syz-executor527", pid 360, jiffies 4294807421 age 19.329s hex dump first 32 bytes: 00 00 00 00 00 00 00 00 00 00 00 ...

5.5CVSS5.4AI score0.00236EPSS
SaveExploits0References1
OSV
OSV
added 2024/05/21 3:15 p.m.8 views

UBUNTU-CVE-2021-47238

In the Linux kernel, the following vulnerability has been resolved: net: ipv4: fix memory leak in ipmcadd1src BUG: memory leak unreferenced object 0xffff888101bc4c00 size 32: comm "syz-executor527", pid 360, jiffies 4294807421 age 19.329s hex dump first 32 bytes: 00 00 00 00 00 00 00 00 00 00 00 ...

5.5CVSS6.2AI score0.00236EPSS
SaveExploits0References10
Rows per page
Query Builder