Lucene search
+L

6 matches found

osv-ubuntu
osv-ubuntu
•added 2026/08/15 6:22 a.m.•14 views

UBUNTU-CVE-2026-72398

In the Linux kernel, the following vulnerability has been resolved: sctp: add INIT verification after cookie unpacking In SCTP handshake, the INIT chunk is initially processed by the server and embedded into the cookie carried in INIT-ACK. The client then returns this cookie via COOKIE-ECHO, wher...

9.8CVSS6.3AI score0.00723EPSS
SaveExploits0References13
CVE
CVE
•added 2026/08/15 5:56 a.m.•99 views

CVE-2026-72398

CVE-2026-72398 concerns the Linux kernel SCTP implementation. When cookie authentication is disabled, an INIT reconstructed during COOKIE-ECHO could be untrusted unless explicitly re-verified; the patch adds sctp_verify_init() checks after cookie unpacking in COOKIE-ECHO paths and tightens sctp_u...

9.8CVSS6AI score0.00723EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/15 12:00 a.m.•22 views

PT-2026-72586

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Stream Control Transmission Protocol SCTP handshake process. During this process, a server embeds an INIT chunk into a cookie sent via INIT-ACK, which the client...

9.8CVSS5.8AI score0.00723EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/15 12:00 a.m.•6 views

CVE-2026-72398: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: sctp: add INIT verification after cookie unpacking In SCTP handshake, the INIT chunk is initially processed by the server and embedded into the cookie carried in INIT-ACK. The client then returns this cookie via COOKIE-ECHO, wher...

9.8CVSS6AI score0.00723EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2012/09/19 12:00 a.m.•59 views

RHEL 6 : java-1.7.0-ibm (RHSA-2012:1289)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:1289 advisory. - OpenJDK: AWT hardening fixes AWT, 7163201 CVE-2012-0547 - Oracle JDK: unspecified vulnerability fixed in 6u33 and 7u5 Deployment...

10CVSS8AI score0.98536EPSS
SaveExploits12References30
RedHat Linux
RedHat Linux
•added 2012/06/20 11:35 a.m.•14 views

OpenJDK: insufficient invokespecial <init> verification (HotSpot, 7160757)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, and 5 update 35 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot...

10CVSS8AI score0.05617EPSS
SaveExploits0References4
Rows per page
Query Builder