Lucene search
+L

21 matches found

OSV
OSV
•added 2026/08/22 4:16 p.m.•14 views

AZL-97053 CVE-2026-74612 affecting package kernel for versions less than 6.6.152.1-1

In the Linux kernel, the following vulnerability has been resolved: veth: fix skb length accounting after XDP frag adjustment veth exposes non-linear skb fragments through an xdpbuff. If an XDP program adjusts the fragment area, vethxdprcvskb copies xdpfragssize back to skb-datalen but leaves...

10CVSS5.8AI score0.00491EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/07/17 8:53 p.m.•11 views

CVE-2026-54466 websocket-driver: Message corruption via abuse of protocol length headers

websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.7.5, the frame format in draft versions of the WebSocket protocol includes a length header that allows an arbitrarily large integer to be encoded as a sequence of bytes with the high bit set. By sending an indefinite...

9.2CVSS5.8AI score0.0038EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2026/06/30 11:30 a.m.•35 views

kernel: net: skbuff: propagate shared-frag marker through frag-transfer helpers

A flaw was found in the Linux kernel's networking skbuff component. When skbtrycoalesce attaches paged fragments, it can lose the SKBFLSHAREDFRAG marker. This can lead to the Encapsulating Security Payload ESP input decrypting data in place over page-cache backed fragments, potentially resulting ...

8.8CVSS6.3AI score0.01987EPSS
SaveExploits8References6
attackerkb
attackerkb
•added 2026/05/29 3:58 p.m.•18 views

CVE-2026-10099

XX-Net V5.16.6 contains a WebSocket frame parsing vulnerability in the WebSocketreceiveworker routine of simplehttpserver.py that allows attackers to cause corrupted application data by sending unmasked WebSocket frames. The server unconditionally reads 4 bytes as a masking key regardless of...

5.1CVSS5.8AI score0.00125EPSS
SaveExploits0References5
OSV
OSV
•added 2026/05/29 3:58 p.m.•18 views

CVE-2026-10099 XX-Net V5.16.6 WebSocket Frame Parsing Data Corruption via simple_http_server.py

XX-Net V5.16.6 contains a WebSocket frame parsing vulnerability in the WebSocketreceiveworker routine of simplehttpserver.py that allows attackers to cause corrupted application data by sending unmasked WebSocket frames. The server unconditionally reads 4 bytes as a masking key regardless of...

5.1CVSS6AI score
SaveExploits0References6
attackerkb
attackerkb
•added 2026/05/08 2:21 p.m.•13 views

CVE-2026-43362

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix in-place encryption corruption in SMB2write SMB2write places write payload in iov1..n as part of rqiov. smb3inittransformrq pointer-shares rqiov, so cryptmessage encrypts iov1 in-place, replacing the original...

6.2AI score0.00313EPSS
SaveExploits0References6Affected Software1
Tenable Nessus
Tenable Nessus
•added 2026/01/22 12:00 a.m.•12 views

Azure Linux 3.0 Security Update: kernel (CVE-2024-45030)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-45030 advisory. - In the Linux kernel, the following vulnerability has been resolved: igb: cope with large MAXSKBFRAGS Sabrina...

9.8CVSS6.3AI score0.00478EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/11/12 12:00 a.m.•8 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990881)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990881 advisory. In the Linux kernel, the following vulnerability has been resolved: PCI: keystone: Add workaround for Errata i2037 AM65x SR 1.0 Errata i2037 in AM65x/DRA80xM...

7.3CVSS6.1AI score0.0021EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/08/07 12:00 a.m.•6 views

Linux Distros Unpatched Vulnerability : CVE-2024-45030

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: igb: cope with large MAXSKBFRAGS Sabrina reports that the igb driver does not cope well with...

9.8CVSS5.7AI score0.00478EPSS
SaveExploits0References2
OSV
OSV
•added 2024/09/11 4:15 p.m.•14 views

AZL-49236 CVE-2024-45030 affecting package kernel for versions less than 6.6.51.1-1

In the Linux kernel, the following vulnerability has been resolved: igb: cope with large MAXSKBFRAGS Sabrina reports that the igb driver does not cope well with large MAXSKBFRAG values: setting MAXSKBFRAG to 45 causes payload corruption on TX. An easy reproducer is to run ssh to connect to the...

5.5CVSS6.6AI score0.00478EPSS
SaveExploits0References1
OSV
OSV
•added 2024/09/11 4:15 p.m.•6 views

DEBIAN-CVE-2024-45030

In the Linux kernel, the following vulnerability has been resolved: igb: cope with large MAXSKBFRAGS Sabrina reports that the igb driver does not cope well with large MAXSKBFRAG values: setting MAXSKBFRAG to 45 causes payload corruption on TX. An easy reproducer is to run ssh to connect to the...

5.5CVSS6.3AI score0.00478EPSS
SaveExploits0References1
NVD
NVD
•added 2024/09/11 4:15 p.m.•15 views

CVE-2024-45030

In the Linux kernel, the following vulnerability has been resolved: igb: cope with large MAXSKBFRAGS Sabrina reports that the igb driver does not cope well with large MAXSKBFRAG values: setting MAXSKBFRAG to 45 causes payload corruption on TX. An easy reproducer is to run ssh to connect to the...

9.8CVSS0.00478EPSS
SaveExploits0References3
OSV
OSV
•added 2024/09/11 4:15 p.m.•10 views

UBUNTU-CVE-2024-45030

In the Linux kernel, the following vulnerability has been resolved: igb: cope with large MAXSKBFRAGS Sabrina reports that the igb driver does not cope well with large MAXSKBFRAG values: setting MAXSKBFRAG to 45 causes payload corruption on TX. An easy reproducer is to run ssh to connect to the...

9.8CVSS6.5AI score0.00478EPSS
SaveExploits0References11
OSV
OSV
•added 2024/09/11 3:14 p.m.•21 views

CVE-2024-45030 igb: cope with large MAX_SKB_FRAGS

In the Linux kernel, the following vulnerability has been resolved: igb: cope with large MAXSKBFRAGS Sabrina reports that the igb driver does not cope well with large MAXSKBFRAG values: setting MAXSKBFRAG to 45 causes payload corruption on TX. An easy reproducer is to run ssh to connect to the...

9.8CVSS6.1AI score
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2024/09/11 3:14 p.m.•22 views

CVE-2024-45030 igb: cope with large MAX_SKB_FRAGS

In the Linux kernel, the following vulnerability has been resolved: igb: cope with large MAXSKBFRAGS Sabrina reports that the igb driver does not cope well with large MAXSKBFRAG values: setting MAXSKBFRAG to 45 causes payload corruption on TX. An easy reproducer is to run ssh to connect to the...

9.8CVSS6.8AI score0.00478EPSS
SaveExploits0References3
CVE
CVE
•added 2024/09/11 3:14 p.m.•126 views

CVE-2024-45030

CVE-2024-45030 affects the Linux kernel igb driver: when MAX_SKB_FRAG is set to very large values (e.g., 45), payload corruption can occur on TX, demonstrated by an SSH session repro. Root cause: the driver fails to account for possibly large shared info size when choosing ring layout and may att...

9.8CVSS6.1AI score0.00478EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2024/09/11 3:14 p.m.•36 views

CVE-2024-45030 igb: cope with large MAX_SKB_FRAGS

In the Linux kernel, the following vulnerability has been resolved: igb: cope with large MAXSKBFRAGS Sabrina reports that the igb driver does not cope well with large MAXSKBFRAG values: setting MAXSKBFRAG to 45 causes payload corruption on TX. An easy reproducer is to run ssh to connect to the...

9.8CVSS0.00478EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/11 12:00 a.m.•2 views

CVE-2024-45030: Out-of-bounds Write

In the Linux kernel, the following vulnerability has been resolved: igb: cope with large MAXSKBFRAGS Sabrina reports that the igb driver does not cope well with large MAXSKBFRAG values: setting MAXSKBFRAG to 45 causes payload corruption on TX. An easy reproducer is to run ssh to connect to the...

9.8CVSS6AI score0.00478EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2024/08/20 12:00 a.m.•1 views

PT-2024-31383

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the igb driver in the Linux kernel, which does not handle large MAX SKB FRAGS values properly. Setting MAX SKB FRAG to 45 causes payload corruption on TX. The roo...

9.8CVSS6AI score0.00478EPSS
SaveExploits0
zdt
zdt
•added 2013/06/03 12:00 a.m.•146 views

Apache Struts includeParams Remote Code Execution

This Metasploit module exploits a remote command execution vulnerability in Apache Struts versions prior to 2.3.14.2. A specifically crafted request parameter can be used to inject arbitrary OGNL code into the stack bypassing Struts and OGNL library protections. When targeting an action which...

9.3CVSS8.3AI score0.74636EPSS
SaveExploits11
Rows per page
Query Builder