Lucene search
+L

6401 matches found

RedHat Linux
RedHat Linux
added 2018/08/14 8:23 p.m.18 views

kernel: race condition in snd_seq_write() may lead to UAF or OOB-access

ALSA sequencer core initializes the event pool on demand by invoking sndseqpoolinit when the first write happens and the pool is empty. A user can reset the pool size manually via ioctl concurrently, and this may lead to UAF or out-of-bound access...

7.8CVSS7.1AI score0.00482EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2018/08/14 6:49 p.m.10 views

kernel: race condition in snd_seq_write() may lead to UAF or OOB-access

ALSA sequencer core initializes the event pool on demand by invoking sndseqpoolinit when the first write happens and the pool is empty. A user can reset the pool size manually via ioctl concurrently, and this may lead to UAF or out-of-bound access...

7.8CVSS7.1AI score0.00482EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2018/08/14 6:31 p.m.9 views

kernel: race condition in snd_seq_write() may lead to UAF or OOB-access

ALSA sequencer core initializes the event pool on demand by invoking sndseqpoolinit when the first write happens and the pool is empty. A user can reset the pool size manually via ioctl concurrently, and this may lead to UAF or out-of-bound access...

7.8CVSS7.1AI score0.00482EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2018/08/10 12:0 a.m.44 views

EulerOS 2.0 SP3 : glusterfs (EulerOS-SA-2018-1229)

According to the version of the glusterfs packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A flaw was found in glusterfs which can lead to privilege escalation on gluster server nodes. An authenticated gluster client via TLS could use...

8.8CVSS7.1AI score0.01284EPSS
SaveExploits0References2
OSV
OSV
added 2018/08/03 5:46 p.m.13 views

SUSE-SU-2018:2193-1 Security update for ceph

This update for ceph fixes the following issues: - Update to version 12.2.7-420-gc0ef85b854: https://ceph.com/releases/12-2-7-luminous-released/ luminous: osd: eternal stuck PG in 'unfoundrecovery' bsc1094932 bluestore: db.slow used when db is not full bsc1092874 CVE-2018-10861: Ensure that...

8.1CVSS7.3AI score0.03222EPSS
SaveExploits0References8
OSV
OSV
added 2018/08/01 3:29 p.m.9 views

CVE-2018-3666

Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as administrator via a non-paged pool overflow...

8.8CVSS6.1AI score0.00377EPSS
SaveExploits0References1
Prion
Prion
added 2018/08/01 3:29 p.m.18 views

Buffer overflow

Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as administrator via a non-paged pool overflow...

7.2CVSS8.7AI score0.00377EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2018/08/01 3:29 p.m.20 views

CVE-2018-3666

Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as administrator via a non-paged pool overflow...

8.8CVSS8.6AI score0.00377EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2018/08/01 3:0 p.m.27 views

CVE-2018-3666

Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as administrator via a non-paged pool overflow...

8.6AI score0.00377EPSS
SaveExploits0References1
CVE
CVE
added 2018/08/01 3:0 p.m.82 views

CVE-2018-3666

Intel Smart Sound Technology driver vulnerable to local privilege escalation (CVE-2018-3666) due to non-paged pool overflow, with variants affecting additional issues (buffer overflow and system calls) in versions prior to 9.21.00.3541. The Intel advisory and related Lenovo/HP documents confirm t...

8.8CVSS8.5AI score0.00377EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2018/07/27 12:0 a.m.132 views

RHEL 7 : Red Hat Ceph Storage 2.5 (RHSA-2018:2261)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:2261 advisory. Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable version of the Ceph storage system...

8.1CVSS7AI score0.03222EPSS
SaveExploits0References26
Prion
Prion
added 2018/07/26 8:29 p.m.8 views

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2016. Notes: none...

7AI score
SaveExploits0
Prion
Prion
added 2018/07/26 8:29 p.m.5 views

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2016. Notes: none...

7AI score
SaveExploits0
Prion
Prion
added 2018/07/26 8:29 p.m.8 views

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2016. Notes: none...

7AI score
SaveExploits0
Prion
Prion
added 2018/07/26 8:29 p.m.6 views

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2016. Notes: none...

7AI score
SaveExploits0
Prion
Prion
added 2018/07/26 8:29 p.m.9 views

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2016. Notes: none...

7AI score
SaveExploits0
Prion
Prion
added 2018/07/26 8:29 p.m.9 views

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2016. Notes: none...

7AI score
SaveExploits0
Prion
Prion
added 2018/07/26 8:29 p.m.6 views

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2016. Notes: none...

7AI score
SaveExploits0
CVE
CVE
added 2018/07/26 8:0 p.m.36 views

CVE-2017-6149

CVE-2017-6149 entry is rejected/not used and does not represent an active vulnerability.

7.3AI score
SaveExploits0
CVE
CVE
added 2018/07/26 8:0 p.m.25 views

CVE-2016-9255

CVE-2016-9255 is rejected/not used; this CVE ID does not represent an active vulnerability.

6.7AI score
SaveExploits0
Rows per page
Query Builder