Lucene search
+L

306 matches found

Prion
Prion
added 2019/05/08 2:29 p.m.31 views

Race condition

An issue was discovered in rdstcpkillsock in net/rds/tcp.c in the Linux kernel before 5.0.8. There is a race condition leading to a use-after-free, related to net namespace cleanup...

9.3CVSS7.3AI score0.04458EPSS
Exploits1References19Affected Software8
NVD
NVD
added 2019/05/08 2:29 p.m.28 views

CVE-2019-11815

An issue was discovered in rdstcpkillsock in net/rds/tcp.c in the Linux kernel before 5.0.8. There is a race condition leading to a use-after-free, related to net namespace cleanup...

9.3CVSS7.8AI score0.04458EPSS
Exploits1References19
OSV
OSV
added 2019/05/08 2:29 p.m.27 views

CVE-2019-11815

An issue was discovered in rdstcpkillsock in net/rds/tcp.c in the Linux kernel before 5.0.8. There is a race condition leading to a use-after-free, related to net namespace cleanup...

8.1CVSS7AI score
Exploits0References19
OSV
OSV
added 2019/05/08 2:29 p.m.8 views

DEBIAN-CVE-2019-11815

An issue was discovered in rdstcpkillsock in net/rds/tcp.c in the Linux kernel before 5.0.8. There is a race condition leading to a use-after-free, related to net namespace cleanup...

8.1CVSS7.3AI score0.04458EPSS
Exploits1References1
Cvelist
Cvelist
added 2019/05/08 1:36 p.m.32 views

CVE-2019-11815

An issue was discovered in rdstcpkillsock in net/rds/tcp.c in the Linux kernel before 5.0.8. There is a race condition leading to a use-after-free, related to net namespace cleanup...

7.6AI score0.04458EPSS
Exploits1References19
CVE
CVE
added 2019/05/08 1:36 p.m.408 views

CVE-2019-11815

The CVE-2019-11815 issue affects Linux kernels with net/rds/tcp.c: rds_tcp_kill_sock contains a race that can cause a use-after-free during net namespace cleanup (pre-5.0.8). A fix was committed and released in 5.0.8; upgrading to 5.0.8+ (or applying the patch) is the advised remediation. The Uni...

9.3CVSS7.5AI score0.04458EPSS
Exploits1References19Affected Software1
Debian CVE
Debian CVE
added 2019/05/08 1:36 p.m.45 views

CVE-2019-11815

An issue was discovered in rdstcpkillsock in net/rds/tcp.c in the Linux kernel before 5.0.8. There is a race condition leading to a use-after-free, related to net namespace cleanup...

9.3CVSS6.4AI score0.04458EPSS
Exploits1
UbuntuCve
UbuntuCve
added 2019/05/08 12:0 a.m.53 views

CVE-2019-11815

An issue was discovered in rdstcpkillsock in net/rds/tcp.c in the Linux kernel before 5.0.8. There is a race condition leading to a use-after-free, related to net namespace cleanup...

9.3CVSS6.8AI score0.04458EPSS
Exploits1References9
OSV
OSV
added 2019/05/08 12:0 a.m.2 views

UBUNTU-CVE-2019-11815

An issue was discovered in rdstcpkillsock in net/rds/tcp.c in the Linux kernel before 5.0.8. There is a race condition leading to a use-after-free, related to net namespace cleanup...

8.1CVSS6.7AI score0.04458EPSS
Exploits1References10
Tenable Nessus
Tenable Nessus
added 2019/04/04 12:0 a.m.32 views

EulerOS Virtualization 2.5.4 : kernel (EulerOS-SA-2019-1232)

According to the version of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The Linux kernel was found to be vulnerable to a NULL pointer dereference bug in the netlinknscapable function in the...

5.5CVSS6.5AI score0.00393EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2019/01/11 12:0 a.m.38 views

Virtuozzo 7 : readykernel-patch (VZA-2018-085)

According to the version of the vzkernel package and the readykernel-patch installed, the Virtuozzo installation on the remote host is affected by the following vulnerability : - The Linux kernel was found to be vulnerable to a NULL pointer dereference bug in the netlinknscapable function in the...

5.5CVSS6.4AI score0.00393EPSS
Exploits0References5
Virtuozzo
Virtuozzo
added 2018/11/30 12:0 a.m.38 views

Kernel security update: Virtuozzo ReadyKernel patch 67.0 for Virtuozzo 7.0.8 and 7.0.8 HF1

The cumulative Virtuozzo ReadyKernel patch was updated with security and stability fixes. The patch applies to Virtuozzo kernels 3.10.0-862.9.1.vz7.63.3 7.0.8 and 3.10.0-862.11.6.vz7.64.7 7.0.8 HF1. Vulnerability id: CVE-2018-14646 The Linux kernel was found to be vulnerable to a NULL pointer...

5.5CVSS2AI score0.00393EPSS
Exploits0References3
Prion
Prion
added 2018/11/26 7:29 p.m.34 views

Null pointer dereference

The Linux kernel before 4.15-rc8 was found to be vulnerable to a NULL pointer dereference bug in the netlinknscapable function in the net/netlink/afnetlink.c file. A local attacker could exploit this when a net namespace with a netnsid is assigned to cause a kernel panic and a denial of service...

4.9CVSS5.1AI score0.00393EPSS
Exploits0References6Affected Software7
NVD
NVD
added 2018/11/26 7:29 p.m.20 views

CVE-2018-14646

The Linux kernel before 4.15-rc8 was found to be vulnerable to a NULL pointer dereference bug in the netlinknscapable function in the net/netlink/afnetlink.c file. A local attacker could exploit this when a net namespace with a netnsid is assigned to cause a kernel panic and a denial of service...

5.5CVSS5AI score0.00393EPSS
Exploits0References6
UbuntuCve
UbuntuCve
added 2018/11/26 7:29 p.m.42 views

CVE-2018-14646

The Linux kernel before 4.15-rc8 was found to be vulnerable to a NULL pointer dereference bug in the netlinknscapable function in the net/netlink/afnetlink.c file. A local attacker could exploit this when a net namespace with a netnsid is assigned to cause a kernel panic and a denial of service...

5.5CVSS6.7AI score0.00393EPSS
Exploits0References3
OSV
OSV
added 2018/11/26 7:29 p.m.3 views

CVE-2018-14646

The Linux kernel before 4.15-rc8 was found to be vulnerable to a NULL pointer dereference bug in the netlinknscapable function in the net/netlink/afnetlink.c file. A local attacker could exploit this when a net namespace with a netnsid is assigned to cause a kernel panic and a denial of service...

5.5CVSS5.4AI score0.00393EPSS
Exploits0References6
Debian CVE
Debian CVE
added 2018/11/26 7:0 p.m.21 views

CVE-2018-14646

The Linux kernel before 4.15-rc8 was found to be vulnerable to a NULL pointer dereference bug in the netlinknscapable function in the net/netlink/afnetlink.c file. A local attacker could exploit this when a net namespace with a netnsid is assigned to cause a kernel panic and a denial of service...

5.5CVSS5.8AI score0.00393EPSS
Exploits0
Cvelist
Cvelist
added 2018/11/26 7:0 p.m.25 views

CVE-2018-14646

The Linux kernel before 4.15-rc8 was found to be vulnerable to a NULL pointer dereference bug in the netlinknscapable function in the net/netlink/afnetlink.c file. A local attacker could exploit this when a net namespace with a netnsid is assigned to cause a kernel panic and a denial of service...

5.5CVSS5.5AI score0.00393EPSS
Exploits0References6
ATTACKERKB
ATTACKERKB
added 2017/12/07 12:29 a.m.4 views

CVE-2017-17448

net/netfilter/nfnetlinkcthelper.c in the Linux kernel through 4.14.4 does not require the CAPNETADMIN capability for new, get, and del operations, which allows local users to bypass intended access restrictions because the nfnlcthelperlist data structure is shared across all net namespaces...

7.8CVSS7.9AI score0.00372EPSS
Exploits0References25
OSV
OSV
added 2017/12/07 12:29 a.m.8 views

CVE-2017-17449

The netlinkdelivertapskb function in net/netlink/afnetlink.c in the Linux kernel through 4.14.4, when CONFIGNLMON is enabled, does not restrict observations of Netlink messages to a single net namespace, which allows local users to obtain sensitive information by leveraging the CAPNETADMIN...

4.7CVSS6.6AI score
Exploits0References17
Rows per page
Query Builder