Lucene search
+L

89 matches found

Github Security Blog
Github Security Blog
added 2024/11/14 3:45 p.m.25 views

s2n-tls has undefined behavior at process exit

Impact s2n-tls uses the Linux atexit function to register functions that clean up the global state when the process exits. In multi-threaded environments, the atexit handler may clean up state which is still in use by other threads. When this occurs, the exiting process may experience a...

6.8AI score
SaveExploits0References4Affected Software1
OSV
OSV
added 2024/11/08 6:15 a.m.14 views

AZL-53723 CVE-2024-50187 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Stop the active perfmon before being destroyed Upon closing the file descriptor, the active performance monitor is not stopped. Although all perfmons are destroyed in vc4perfmonclosefile, the active performance monitor's...

5.5CVSS6.3AI score0.0023EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/10/04 12:00 a.m.32 views

PT-2024-34020

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel's drm/vc4 code has been resolved. The issue occurred when a file descriptor was closed, and the active performance monitor was not stopped. Although...

5.5CVSS5.5AI score0.0023EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2024/08/08 4:53 a.m.16 views

kernel: userfaultfd: fix a race between writeprotect and exit_mmap()

A possible race condition flaw was found in the Linux kernel. When a process exits, its virtual memory areas VMAs are removed by exitmmap, and at the same time, userfaultfdwriteprotect is called...

7.8CVSS7.2AI score0.00173EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2024/08/08 4:44 a.m.12 views

kernel: userfaultfd: fix a race between writeprotect and exit_mmap()

A possible race condition flaw was found in the Linux kernel. When a process exits, its virtual memory areas VMAs are removed by exitmmap, and at the same time, userfaultfdwriteprotect is called...

7.8CVSS7.2AI score0.00173EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2023/04/10 12:00 a.m.19 views

CVE-2023-26919

delight-nashorn-sandbox 0.2.4 and 0.2.5 is vulnerable to sandbox escape. When allowExitFunctions is set to false, the loadWithNewGlobal function can be used to invoke the exit and quit methods to exit the Java process...

7AI score0.00608EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2023/04/10 12:00 a.m.53 views

CVE-2023-26919

delight-nashorn-sandbox 0.2.4 and 0.2.5 is vulnerable to sandbox escape. When allowExitFunctions is set to false, the loadWithNewGlobal function can be used to invoke the exit and quit methods to exit the Java process...

7.2AI score0.00608EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2023/04/10 12:00 a.m.18 views

Delight Nashorn Sandbox 注入漏洞

Delight Nashorn Sandbox is a Java Delight open source sandbox for executing JavaScript in Java using Nashorn. A security vulnerability exists in Delight Nashorn Sandbox version 0.2.4, 0.2.5. An attacker exploiting this vulnerability can exit a Java process by calling the exit and quit methods usi...

7.2CVSS7AI score0.00608EPSS
SaveExploits1References2
OSV
OSV
added 2022/03/22 12:15 p.m.27 views

CVE-2022-0667

When the vulnerability is triggered the BIND process will exit. BIND 9.18.0...

7.5CVSS7.1AI score
SaveExploits0References2
OSV
OSV
added 2022/03/22 12:15 p.m.8 views

DEBIAN-CVE-2022-0667

When the vulnerability is triggered the BIND process will exit. BIND 9.18.0...

7.5CVSS7.6AI score0.01348EPSS
SaveExploits0References1
CVE
CVE
added 2022/03/22 11:15 a.m.192 views

CVE-2022-0667

CVE-2022-0667 affects ISC BIND 9.18.0 where the recursive client backstop lifetime timer can trigger an assertion failure, causing BIND to terminate. This enables a remote denial-of-service and, potentially, cache poisoning. Upstream fixes are in 9.18.1 (and related patches).

7.5CVSS7.5AI score0.01348EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
added 2022/03/22 11:15 a.m.54 views

CVE-2022-0667

When the vulnerability is triggered the BIND process will exit. BIND 9.18.0...

7.5CVSS7.6AI score0.01348EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2022/03/16 7:00 p.m.25 views

CVE-2022-0667

When the vulnerability is triggered the BIND process will exit. BIND 9.18.0...

7.5CVSS7.2AI score0.01348EPSS
SaveExploits0References3Affected Software1
UbuntuCve
UbuntuCve
added 2022/03/16 12:00 a.m.37 views

CVE-2022-0667

When the vulnerability is triggered the BIND process will exit. BIND 9.18.0...

7.5CVSS7.1AI score0.01348EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/01/01 12:00 a.m.14 views

PT-2025-8061

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock issue has been identified in the Linux kernel, specifically in the drm/amdkfd component. The problem occurs when the svm range restore work is flushed during process exit,...

5.5CVSS6.3AI score0.0026EPSS
SaveExploits0
Veracode
Veracode
added 2020/04/10 12:30 a.m.56 views

Denial Of Service (DoS)

kernel is vulnerable to denial of service. A deficiency in the clone system call when called with the CLONEPARENT flag permits the caller the parent process to indicate an arbitrary signal it wants to receive when its child process exits. This could lead to a denial of service of the parent proce...

2.1CVSS3.5AI score0.00698EPSS
SaveExploits2References38Affected Software2
NVD
NVD
added 2019/10/16 6:15 p.m.21 views

CVE-2019-6473

An invalid hostname option can trigger an assertion failure in the Kea DHCPv4 server process kea-dhcp4, causing the server process to exit. Versions affected: 1.4.0 to 1.5.0, 1.6.0-beta1, and 1.6.0-beta2...

6.5CVSS6.4AI score0.00803EPSS
SaveExploits0References1
zdt
zdt
added 2019/10/07 12:00 a.m.87 views

Microsoft Windows Silent Process Exit Persistence Exploit

This Metasploit module uploads a payload and declares that it is the debug process to launch when a specified process exits. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/post/file' require...

0.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2019/10/05 12:00 a.m.452 views

Microsoft Windows Silent Process Exit Persistence

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/post/file' require 'msf/core/exploit/exe' class MetasploitModule 'Windows Silent Process Exit Persistence', 'Description' = %q Windows allows you to se...

7.4AI score
SaveExploits0
Metasploit
Metasploit
added 2019/09/30 9:34 p.m.38 views

Windows Silent Process Exit Persistence

Windows allows you to set up a debug process when a process exits. This module uploads a payload and declares that it is the debug process to launch when a specified process exits. This module requires Metasploit: https://metasploit.com/download Current source:...

6.9AI score
SaveExploits0
Rows per page
Query Builder