Lucene search
+L

46 matches found

OSV
OSV
added 2017/03/29 12:00 a.m.7 views

UBUNTU-CVE-2017-7308

The packetsetring function in net/packet/afpacket.c in the Linux kernel through 4.10.6 does not properly validate certain block-size data, which allows local users to cause a denial of service integer signedness error and out-of-bounds write, or gain privileges if the CAPNETRAW capability is held...

7.8CVSS6.7AI score0.17827EPSS
SaveExploits17References5
Positive Technologies
Positive Technologies
added 2017/03/28 12:00 a.m.7 views

PT-2017-2268

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.10.6 Description The issue is caused by a signedness error in the packet set ring function in the Linux kernel, which allows local users to cause a denial of service or gain privileges if the CAP NET RAW...

7.8CVSS6.6AI score0.17827EPSS
SaveExploits17
RedHat Linux
RedHat Linux
added 2017/03/02 4:04 p.m.6 views

kernel: Race condition in packet_set_ring leads to use after free

A race condition issue leading to a use-after-free flaw was found in the way the raw packet sockets implementation in the Linux kernel networking subsystem handled synchronization while creating the TPACKETV3 ring buffer. A local user able to open a raw packet socket requires the CAPNETRAW...

7.8CVSS6.8AI score0.11127EPSS
SaveExploits17References4
OSV
OSV
added 2016/12/08 8:59 a.m.9 views

DEBIAN-CVE-2016-8655

Race condition in net/packet/afpacket.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cause a denial of service use-after-free by leveraging the CAPNETRAW capability to change a socket version, related to the packetsetring and packetsetsockopt functions...

7.8CVSS7.6AI score0.11127EPSS
SaveExploits17References1
OSV
OSV
added 2016/12/05 12:00 a.m.11 views

UBUNTU-CVE-2016-8655

Race condition in net/packet/afpacket.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cause a denial of service use-after-free by leveraging the CAPNETRAW capability to change a socket version, related to the packetsetring and packetsetsockopt functions...

7.8CVSS6.9AI score0.11127EPSS
SaveExploits17References13
Positive Technologies
Positive Technologies
added 2016/12/02 12:00 a.m.14 views

PT-2016-2922 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.8.12 Description: The issue exists due to insufficient checking of a resource's state when it can be shared, allowing a local attacker to potentially gain privileges or cause a denial of service use-after-free...

10CVSS7.6AI score0.24299EPSS
SaveExploits26References409
Rows per page
Query Builder