Lucene search
+L

285 matches found

Cvelist
Cvelist
added 2025/08/28 2:47 p.m.36 views

CVE-2025-8067 Udisks: out-of-bounds read in udisks daemon

A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is achieved via the loop device handler, which handles requests sent through the D-BUS interface. As two of the parameters of this handle, it receives the file descriptor...

8.5CVSS0.00653EPSS
SaveExploits1References13
RedhatCVE
RedhatCVE
added 2025/08/28 2:46 p.m.7 views

CVE-2025-8067

A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is achieved via the loop device handler, which handles requests sent through the D-BUS interface. As two of the parameters of this handle, it receives the file descriptor...

8.5CVSS6.2AI score0.00653EPSS
SaveExploits1References3
OSV
OSV
added 2025/08/28 12:00 a.m.13 views

UBUNTU-CVE-2025-8067

A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is achieved via the loop device handler, which handles requests sent through the D-BUS interface. As two of the parameters of this handle, it receives the file descriptor...

8.5CVSS5.7AI score0.00653EPSS
SaveExploits1References3
FreeBSD
FreeBSD
added 2025/08/28 12:00 a.m.15 views

libudisks -- Udisks: out-of-bounds read in udisks daemon

[email protected] reports: A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is achieved via the loop device handler, which handles requests sent through the D-BUS interface. As two of the parameters of this handle, it...

8.5CVSS6.8AI score0.00653EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/08/27 12:00 a.m.9 views

PT-2025-35093

Name of the Vulnerable Software and Affected Versions Udisks versions prior to the fix included in SlackwareLinux security advisory. Description A flaw exists in the Udisks daemon that allows unprivileged users to create loop devices via the D-BUS system. This is due to insufficient validation of...

8.5CVSS7.5AI score0.00653EPSS
SaveExploits1References113
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2010-3704

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics...

6.8CVSS7.2AI score0.03597EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/11 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2022-50040

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: fix buffer overflow in sja1105setupdevlinkregions If an error occurs in...

7.8CVSS5.7AI score0.00273EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/08 12:00 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2024-35813

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mmc: core: Avoid negative index with array access Commit 4d0c8d0aef63 mmc: core: Use mrq.sbc...

7.8CVSS5.6AI score0.00248EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/07 12:00 a.m.17 views

Linux Distros Unpatched Vulnerability : CVE-2023-52988

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: hda/via: Avoid potential array out-of-bound in addsecretdacpath sndhdagetconnections can return a negative error code. It may lead to accessing 'conn' arr...

7.8CVSS6.8AI score0.00279EPSS
SaveExploits0References3
OSV
OSV
added 2025/07/03 9:15 a.m.19 views

AZL-64523 CVE-2025-38142 affecting package kernel for versions less than 6.6.96.1-1

In the Linux kernel, the following vulnerability has been resolved: hwmon: asus-ec-sensors check sensor index in readstring Prevent a potential invalid memory access when the requested sensor is not found. findecsensorindex may return a negative value e.g. -ENOENT, but its result was used without...

5.5CVSS5.7AI score0.00176EPSS
SaveExploits0References1
OSV
OSV
added 2025/07/03 9:15 a.m.7 views

DEBIAN-CVE-2025-38142

In the Linux kernel, the following vulnerability has been resolved: hwmon: asus-ec-sensors check sensor index in readstring Prevent a potential invalid memory access when the requested sensor is not found. findecsensorindex may return a negative value e.g. -ENOENT, but its result was used without...

5.5CVSS5.5AI score0.00176EPSS
SaveExploits0References1
OSV
OSV
added 2025/07/03 9:15 a.m.11 views

UBUNTU-CVE-2025-38142

In the Linux kernel, the following vulnerability has been resolved: hwmon: asus-ec-sensors check sensor index in readstring Prevent a potential invalid memory access when the requested sensor is not found. findecsensorindex may return a negative value e.g. -ENOENT, but its result was used without...

5.5CVSS6AI score0.00176EPSS
SaveExploits0References31
SUSE CVE
SUSE CVE
added 2025/06/19 3:43 a.m.9 views

SUSE CVE-2022-50040

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: fix buffer overflow in sja1105setupdevlinkregions If an error occurs in dsadevlinkregioncreate, then 'priv-regions' array will be accessed by negative index '-1'. Found by Linux Verification Center...

5.5CVSS6.7AI score0.00273EPSS
SaveExploits0References9
NVD
NVD
added 2025/06/18 11:15 a.m.40 views

CVE-2022-50040

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: fix buffer overflow in sja1105setupdevlinkregions If an error occurs in dsadevlinkregioncreate, then 'priv-regions' array will be accessed by negative index '-1'. Found by Linux Verification Center...

7.8CVSS0.00273EPSS
SaveExploits0References4
OSV
OSV
added 2025/06/18 11:15 a.m.18 views

DEBIAN-CVE-2022-50040

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: fix buffer overflow in sja1105setupdevlinkregions If an error occurs in dsadevlinkregioncreate, then 'priv-regions' array will be accessed by negative index '-1'. Found by Linux Verification Center...

7.8CVSS5.6AI score0.00273EPSS
SaveExploits0References1
OSV
OSV
added 2025/06/18 11:15 a.m.11 views

UBUNTU-CVE-2022-50040

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: fix buffer overflow in sja1105setupdevlinkregions If an error occurs in dsadevlinkregioncreate, then 'priv-regions' array will be accessed by negative index '-1'. Found by Linux Verification Center...

7.8CVSS6.3AI score0.00273EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2025/06/18 11:01 a.m.32 views

CVE-2022-50040 net: dsa: sja1105: fix buffer overflow in sja1105_setup_devlink_regions()

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: fix buffer overflow in sja1105setupdevlinkregions If an error occurs in dsadevlinkregioncreate, then 'priv-regions' array will be accessed by negative index '-1'. Found by Linux Verification Center...

0.00273EPSS
SaveExploits0References4
CVE
CVE
added 2025/06/18 11:01 a.m.94 views

CVE-2022-50040

CVE-2022-50040 affects the Linux kernel internal DSA path for sja1105 (net: dsa: sja1105). The vulnerability is a buffer overflow caused when an error occurs in dsa_devlink_region_create(), leading to a negative index (-1) access of priv->regions. The issue has been fixed in the cited commits,...

7.8CVSS7AI score0.00273EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2025/06/18 12:00 a.m.41 views

PT-2025-25966

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A buffer overflow issue has been identified in the Linux kernel, specifically in the sja1105 setup devlink regions function. This occurs when an error happens in dsa devlink region creat...

7.8CVSS8.2AI score0.10458EPSS
SaveExploits16References1215
RedhatCVE
RedhatCVE
added 2025/05/22 9:15 p.m.19 views

CVE-2021-1916

Possible buffer underflow due to lack of check for negative indices values when processing user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables...

10CVSS7.4AI score0.00796EPSS
SaveExploits0References1
Rows per page
Query Builder