Lucene search
+L

4904 matches found

OSV
OSV
added 2020/12/01 3:15 a.m.29 views

CVE-2020-15257

containerd is an industry-standard container runtime and is available as a daemon for Linux and Windows. In containerd before versions 1.3.9 and 1.4.3, the containerd-shim API is improperly exposed to host network containers. Access controls for the shim’s API socket verified that the connecting...

5.2CVSS6.5AI score
SaveExploits0References6
OSV
OSV
added 2020/12/01 3:15 a.m.6 views

DEBIAN-CVE-2020-15257

containerd is an industry-standard container runtime and is available as a daemon for Linux and Windows. In containerd before versions 1.3.9 and 1.4.3, the containerd-shim API is improperly exposed to host network containers. Access controls for the shim’s API socket verified that the connecting...

5.2CVSS6.2AI score0.03236EPSS
SaveExploits4References1
NVD
NVD
added 2020/12/01 3:15 a.m.25 views

CVE-2020-15257

containerd is an industry-standard container runtime and is available as a daemon for Linux and Windows. In containerd before versions 1.3.9 and 1.4.3, the containerd-shim API is improperly exposed to host network containers. Access controls for the shim’s API socket verified that the connecting...

5.2CVSS5.6AI score0.03236EPSS
SaveExploits4References6
Prion
Prion
added 2020/12/01 3:15 a.m.34 views

Code injection

containerd is an industry-standard container runtime and is available as a daemon for Linux and Windows. In containerd before versions 1.3.9 and 1.4.3, the containerd-shim API is improperly exposed to host network containers. Access controls for the shim’s API socket verified that the connecting...

3.6CVSS5.1AI score0.03236EPSS
SaveExploits4References6Affected Software3
AlpineLinux
AlpineLinux
added 2020/12/01 2:30 a.m.56 views

CVE-2020-15257

containerd is an industry-standard container runtime and is available as a daemon for Linux and Windows. In containerd before versions 1.3.9 and 1.4.3, the containerd-shim API is improperly exposed to host network containers. Access controls for the shim’s API socket verified that the connecting...

5.2CVSS5.5AI score0.03236EPSS
SaveExploits4
CNNVD
CNNVD
added 2020/12/01 12:0 a.m.9 views

Red Hat OpenShift Elasticsearch-operator Input Validation Error Vulnerability

Red Hat OpenShift Elasticsearch-operator is a software from Red Hat USA for use in OpenShift to support interaction with Elasticsearch. A security vulnerability exists in elasticsearch-operator-container versions prior to 4.7 that stems from not validating the namespace in which a kibana logging...

6.1CVSS6.5AI score0.00643EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2020/11/30 12:0 a.m.42 views

CVE-2020-15257

containerd is an industry-standard container runtime and is available as a daemon for Linux and Windows. In containerd before versions 1.3.9 and 1.4.3, the containerd-shim API is improperly exposed to host network containers. Access controls for the shim’s API socket verified that the connecting...

5.2CVSS6.7AI score0.03236EPSS
SaveExploits4References4
Tenable Nessus
Tenable Nessus
added 2020/11/30 12:0 a.m.64 views

openSUSE Security Update : java-1_8_0-openjdk (openSUSE-2020-2083)

This update for java-180-openjdk fixes the following issues : - Fix regression '8250861: Crash in MinINode::IdealPhaseGVN, bool', introduced in October 2020 CPU. - Update to version jdk8u272 icedtea 3.17.0 July 2020 CPU, bsc1174157, and October 2020 CPU, bsc1177943 - New features + JDK-8245468: A...

8.3CVSS6.9AI score0.0435EPSS
SaveExploits0References18
OSV
OSV
added 2020/11/30 12:0 a.m.5 views

UBUNTU-CVE-2020-15257

containerd is an industry-standard container runtime and is available as a daemon for Linux and Windows. In containerd before versions 1.3.9 and 1.4.3, the containerd-shim API is improperly exposed to host network containers. Access controls for the shim’s API socket verified that the connecting...

5.2CVSS6.6AI score0.03236EPSS
SaveExploits4References5
OSV
OSV
added 2020/11/28 7:15 a.m.2 views

DEBIAN-CVE-2020-29373

An issue was discovered in fs/iouring.c in the Linux kernel before 5.6. It unsafely handles the root directory during path lookups, and thus a process inside a mount namespace can escape to unintended filesystem locations, aka CID-ff002b30181d...

6.5CVSS6.7AI score0.00512EPSS
SaveExploits1References1
Prion
Prion
added 2020/11/28 7:15 a.m.20 views

Design/Logic Flaw

An issue was discovered in fs/iouring.c in the Linux kernel before 5.6. It unsafely handles the root directory during path lookups, and thus a process inside a mount namespace can escape to unintended filesystem locations, aka CID-ff002b30181d...

2.1CVSS6.1AI score0.00512EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2020/11/28 7:15 a.m.9 views

UBUNTU-CVE-2020-29373

An issue was discovered in fs/iouring.c in the Linux kernel before 5.6. It unsafely handles the root directory during path lookups, and thus a process inside a mount namespace can escape to unintended filesystem locations, aka CID-ff002b30181d...

6.5CVSS6.7AI score0.00512EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2020/11/28 12:0 a.m.11 views

Linux kernel 路径遍历漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A path traversal vulnerability exists in versions of Linux kernel prior to 5.6, which stems from its failure to safely handle the root directory during path lookups, so that...

6.5CVSS6.7AI score0.00512EPSS
SaveExploits1References8
HashiCorp Security Advisories
HashiCorp Security Advisories
added 2020/11/25 8:31 p.m.14 views

Consul Enterprise Namespace Config Entry Replication Denial of Service

Summary Consul Enterprise version 1.7.0 up to 1.8.4 includes a namespace replication bug which can be triggered to cause infinite Raft writes. This vulnerability, CVE-2020-25201, was fixed in 1.7.9 and 1.8.5. Background Consul Enterprise namespaces enable organizational multi-tenancy so that...

7.5CVSS6.9AI score0.0261EPSS
SaveExploits0Affected Software1
HashiCorp Security Advisories
HashiCorp Security Advisories
added 2020/11/25 7:7 p.m.13 views

Vault Enterprise Prefixed Mount Policies May Result In Unauthorized Namespace Access

Summary A vulnerability was identified in Vault Enterprise such that, under certain circumstances, existing nested-path policies may give access to Namespaces created after-the-fact. This vulnerability, CVE-2020-10661, affects Vault Enterprise versions 0.11 and newer and is fixed in 1.3.4...

9.1CVSS7AI score0.01116EPSS
SaveExploits0Affected Software1
HashiCorp Security Advisories
HashiCorp Security Advisories
added 2020/11/25 6:33 p.m.15 views

Vault Enterprise’s Dynamic Secrets May Persist After Namespace Deletion

Summary A vulnerability was identified in Vault Enterprise such that when deleting a namespace, in certain circumstances, the deletion process will fail to revoke dynamic secrets for a mount in that namespace. This vulnerability, CVE-2020-7220, affects Vault Enterprise 0.11.0 and newer and is fix...

7.5CVSS7AI score0.01422EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2020/11/06 6:15 p.m.27 views

AZL-45321 CVE-2017-18926 affecting package raptor2 2.0.15-29

raptorxmlwriterstartelementcommon in raptorxmlwriter.c in Raptor RDF Syntax Library 2.0.15 miscalculates the maximum nspace declarations for the XML writer, leading to heap-based buffer overflows sometimes seen in raptorqnameformatasxml...

7.1CVSS5.9AI score0.03117EPSS
SaveExploits1References1
OSV
OSV
added 2020/11/06 6:15 p.m.4 views

DEBIAN-CVE-2017-18926

raptorxmlwriterstartelementcommon in raptorxmlwriter.c in Raptor RDF Syntax Library 2.0.15 miscalculates the maximum nspace declarations for the XML writer, leading to heap-based buffer overflows sometimes seen in raptorqnameformatasxml...

7.1CVSS7.2AI score0.03117EPSS
SaveExploits1References1
OSV
OSV
added 2020/11/06 6:15 p.m.6 views

UBUNTU-CVE-2017-18926

raptorxmlwriterstartelementcommon in raptorxmlwriter.c in Raptor RDF Syntax Library 2.0.15 miscalculates the maximum nspace declarations for the XML writer, leading to heap-based buffer overflows sometimes seen in raptorqnameformatasxml...

7.1CVSS7.2AI score0.03117EPSS
SaveExploits1References8
Veracode
Veracode
added 2020/11/06 5:55 a.m.37 views

Denial Of Service (DoS)

github.com/hashicorp/consul is vulnerable to denial of service DoS. Incorrect use of namespaces in comparisons allow an attacker to send infinite Raft writes to cause a namespace replication bug, leading to a resource exhaustion and an application crash...

7.5CVSS3.4AI score0.0261EPSS
SaveExploits0References4Affected Software2
Rows per page
Query Builder