Lucene search
+L

7750 matches found

OSS-Fuzz
OSS-Fuzz
•added 2022/09/27 5:48 a.m.•18 views

skia:region_set_path: Heap-buffer-overflow in SkPath::reverseAddPath

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5024275493158912 Project: skia Fuzzing Engine: afl Fuzz Target: regionsetpath Job Type: aflasanskia Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x604000000248 Crash...

5.9AI score
SaveExploits0
CNVD
CNVD
•added 2022/09/26 12:00 a.m.•110 views

Linux Kernel Arbitrary Memory Read Vulnerability

The Linux kernel is an open source Unix-like operating system macro kernel for efficient resource management. A security vulnerability exists in the Linux Kernel where constants used to populate pointers in structures passed to bpfsysbpf are unverified and can point anywhere, and an attacker with...

6.7CVSS5.4AI score0.00265EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/09/24 12:00 a.m.•61 views

ISC BIND Buffer Overflow Vulnerability

ISC BIND is the United States ISC company's set of open source software that implements the DNS protocol. ISC BIND suffers from a buffer overflow vulnerability that originates when reusing an HTTP connection to request statistics from the stats channel, where the length of the contents of...

6.4CVSS7.2AI score0.01419EPSS
SaveExploits0Affected Software2
RedhatCVE
RedhatCVE
•added 2022/09/23 5:18 p.m.•47 views

CVE-2022-2785

An out-of-bounds OOB memory read problem was found in bpf in the Linux kernel's kernel/bpf/syscall.c function due to an improper check of bpfsysbpf arguments. The bounds check failure allows a local attacker to access out-of-bounds memory, leading to a leak of internal kernel information...

6.7CVSS1.3AI score0.00265EPSS
SaveExploits0References4
osv_azl
osv_azl
•added 2022/09/23 11:15 a.m.•28 views

AZL-34860 CVE-2022-2785 affecting package kernel for versions less than 6.6.35.1-4

There exists an arbitrary memory read within the Linux Kernel BPF - Constants provided to fill pointers in structs passed in to bpfsysbpf are not verified and can point anywhere, including memory not owned by BPF. An attacker with CAPBPF can arbitrarily read memory from anywhere on the system. We...

5.5CVSS6.2AI score0.00265EPSS
SaveExploits0References1
NVD
NVD
•added 2022/09/23 11:15 a.m.•28 views

CVE-2022-2785

There exists an arbitrary memory read within the Linux Kernel BPF - Constants provided to fill pointers in structs passed in to bpfsysbpf are not verified and can point anywhere, including memory not owned by BPF. An attacker with CAPBPF can arbitrarily read memory from anywhere on the system. We...

6.7CVSS0.00265EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2022/09/23 11:15 a.m.•12 views

DEBIAN-CVE-2022-2785

There exists an arbitrary memory read within the Linux Kernel BPF - Constants provided to fill pointers in structs passed in to bpfsysbpf are not verified and can point anywhere, including memory not owned by BPF. An attacker with CAPBPF can arbitrarily read memory from anywhere on the system. We...

5.5CVSS5.9AI score0.00265EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2022/09/23 11:15 a.m.•20 views

AZL-11015 CVE-2022-2785 affecting package kernel for versions less than 5.15.82.1-1

There exists an arbitrary memory read within the Linux Kernel BPF - Constants provided to fill pointers in structs passed in to bpfsysbpf are not verified and can point anywhere, including memory not owned by BPF. An attacker with CAPBPF can arbitrarily read memory from anywhere on the system. We...

5.5CVSS6.2AI score0.00265EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2022/09/23 11:15 a.m.•19 views

CVE-2022-2785

There exists an arbitrary memory read within the Linux Kernel BPF - Constants provided to fill pointers in structs passed in to bpfsysbpf are not verified and can point anywhere, including memory not owned by BPF. An attacker with CAPBPF can arbitrarily read memory from anywhere on the system. We...

5.5CVSS6.6AI score
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2022/09/23 11:15 a.m.•15 views

UBUNTU-CVE-2022-2785

There exists an arbitrary memory read within the Linux Kernel BPF - Constants provided to fill pointers in structs passed in to bpfsysbpf are not verified and can point anywhere, including memory not owned by BPF. An attacker with CAPBPF can arbitrarily read memory from anywhere on the system. We...

6.7CVSS6.2AI score0.00265EPSS
SaveExploits0References4
Prion
Prion
•added 2022/09/23 11:15 a.m.•25 views

Design/Logic Flaw

There exists an arbitrary memory read within the Linux Kernel BPF - Constants provided to fill pointers in structs passed in to bpfsysbpf are not verified and can point anywhere, including memory not owned by BPF. An attacker with CAPBPF can arbitrarily read memory from anywhere on the system. We...

1.7CVSS5.3AI score0.00265EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2022/09/23 11:10 a.m.•116 views

CVE-2022-2785

CVE-2022-2785 affects the Linux kernel BPF subsystem. The vulnerability arises because constants used to fill pointers in structs passed to bpf_sys_bpf are not verified, allowing an attacker with CAP_BPF to read memory anywhere on the system. Affected systems can face arbitrary memory reads, with...

6.7CVSS5.4AI score0.00265EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2022/09/23 11:10 a.m.•8 views

CVE-2022-2785 Arbitrary Memory read in BPF Linux Kernel

There exists an arbitrary memory read within the Linux Kernel BPF - Constants provided to fill pointers in structs passed in to bpfsysbpf are not verified and can point anywhere, including memory not owned by BPF. An attacker with CAPBPF can arbitrarily read memory from anywhere on the system. We...

6.7CVSS6.4AI score0.00265EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2022/09/23 11:10 a.m.•120 views

CVE-2022-2785

There exists an arbitrary memory read within the Linux Kernel BPF - Constants provided to fill pointers in structs passed in to bpfsysbpf are not verified and can point anywhere, including memory not owned by BPF. An attacker with CAPBPF can arbitrarily read memory from anywhere on the system. We...

6.7CVSS5.8AI score0.00265EPSS
SaveExploits0
Cvelist
Cvelist
•added 2022/09/23 11:10 a.m.•53 views

CVE-2022-2785 Arbitrary Memory read in BPF Linux Kernel

There exists an arbitrary memory read within the Linux Kernel BPF - Constants provided to fill pointers in structs passed in to bpfsysbpf are not verified and can point anywhere, including memory not owned by BPF. An attacker with CAPBPF can arbitrarily read memory from anywhere on the system. We...

6.7CVSS6.5AI score0.00265EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2022/09/23 12:00 a.m.•62 views

CVE-2022-2785

There exists an arbitrary memory read within the Linux Kernel BPF - Constants provided to fill pointers in structs passed in to bpfsysbpf are not verified and can point anywhere, including memory not owned by BPF. An attacker with CAPBPF can arbitrarily read memory from anywhere on the system. We...

6.7CVSS6.2AI score0.00265EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/23 12:00 a.m.•3 views

CVE-2022-2785: Out-of-bounds Read

There exists an arbitrary memory read within the Linux Kernel BPF - Constants provided to fill pointers in structs passed in to bpfsysbpf are not verified and can point anywhere, including memory not owned by BPF. An attacker with CAPBPF can arbitrarily read memory from anywhere on the system. We...

6.7CVSS6.5AI score0.00265EPSS
SaveExploits0References3
NVD
NVD
•added 2022/09/21 11:15 a.m.•18 views

CVE-2022-2881

The underlying bug might cause read past end of the buffer and either read memory it should not read, or crash the process...

8.2CVSS0.01419EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2022/09/21 11:15 a.m.•37 views

CVE-2022-2881

The underlying bug might cause read past end of the buffer and either read memory it should not read, or crash the process...

8.2CVSS1.5AI score
SaveExploits0References3
osv_alpine
osv_alpine
•added 2022/09/21 11:15 a.m.•9 views

ALPINE-CVE-2022-2881

The underlying bug might cause read past end of the buffer and either read memory it should not read, or crash the process...

8.2CVSS7.1AI score0.01419EPSS
SaveExploits0References1
Rows per page
Query Builder