Lucene search
K

48 matches found

Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.2 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001455)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001455 advisory. An issue was discovered in the Linux kernel before 4.14.16. There is a use-after-free in net/sctp/socket.c for a held lock after a peel off, aka CID-a0ff660058b8...

7.8CVSS7.9AI score0.00569EPSS
Exploits1References8
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:0 a.m.2 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003087)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003087 advisory. An issue was discovered in the Linux kernel before 4.14.16. There is a use-after-free in net/sctp/socket.c for a held lock after a peel off, aka CID-a0ff660058b8...

7.8CVSS7.9AI score0.00569EPSS
Exploits1References8
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:0 a.m.1 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003052)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003052 advisory. The sctpdopeeloff function in net/sctp/socket.c in the Linux kernel before 4.14 does not check whether the intended netns is used in a peel-off action, which allows...

7.8CVSS6.5AI score0.0047EPSS
Exploits0References19
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:0 a.m.2 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001860)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001860 advisory. Race condition in net/sctp/socket.c in the Linux kernel before 4.1.2 allows local users to cause a denial of service list corruption and panic via a rapid series of...

4.9CVSS7AI score0.00343EPSS
Exploits0References23
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:0 a.m.2 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003539)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003539 advisory. An issue was discovered in the Linux kernel before 4.14.16. There is a use-after-free in net/sctp/socket.c for a held lock after a peel off, aka CID-a0ff660058b8...

7.8CVSS7.9AI score0.00569EPSS
Exploits1References8
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:0 a.m.3 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002422)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002422 advisory. Race condition in net/sctp/socket.c in the Linux kernel before 4.1.2 allows local users to cause a denial of service list corruption and panic via a rapid series of...

4.9CVSS7AI score0.00343EPSS
Exploits0References23
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2019-13487

Malware in sbrugna...

6.5CVSS6.6AI score0.01771EPSS
Exploits0References17
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2018-13796

Malware in sbrugna...

7.8CVSS7.9AI score0.00569EPSS
Exploits1References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2006-4523

Malware in sbrugna...

4.9CVSS6AI score0.00434EPSS
Exploits0References28
RedhatCVE
RedhatCVE
added 2025/05/22 5:52 p.m.7 views

CVE-2020-7463

In FreeBSD 12.1-STABLE before r364644, 11.4-STABLE before r364651, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, improper handling in the kernel causes a use-after-free bug by sending large user messages from multiple threads on the same SCTP socket. The...

5.5CVSS6.8AI score0.00399EPSS
Exploits0References1
OSV
OSV
added 2024/02/27 10:15 a.m.4 views

CVE-2021-46929

In the Linux kernel, the following vulnerability has been resolved: sctp: use callrcu to free endpoint This patch is to delay the endpoint free by calling callrcu to fix another use-after-free issue in sctpsockdump: BUG: KASAN: use-after-free in lockacquire+0x36d9/0x4c20 Call Trace:...

5.5CVSS7.3AI score
Exploits0References6
BDU FSTEC
BDU FSTEC
added 2024/01/25 12:0 a.m.3 views

Vulnerability of the sctp_auto_asconf_init function in the Linux operating system’s kernel, which allows a hacker to trigger a service failure

The vulnerability of the sctpautoasconfinit function net/sctp/socket.c in the Linux operating system is related to the occurrence of mutual locking. Exploiting this vulnerability could allow a attacker to cause a service failure...

5.5CVSS6.4AI score0.00161EPSS
Exploits0References21Affected Software4
SUSE CVE
SUSE CVE
added 2023/02/15 6:14 a.m.2 views

SUSE CVE-2006-4535

The Linux kernel 2.6.17.10 and 2.6.17.11 and 2.6.18-rc5 allows local users to cause a denial of service crash via an SCTP socket with a certain SOLINGER value, possibly related to the patch for CVE-2006-3745. NOTE: older kernel versions for specific Linux distributions are also affected, due to...

4.9CVSS6.4AI score0.00434EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 4:20 a.m.1 views

SUSE CVE-2018-25015

An issue was discovered in the Linux kernel before 4.14.16. There is a use-after-free in net/sctp/socket.c for a held lock after a peel off, aka CID-a0ff660058b8...

7.8CVSS7.7AI score0.00569EPSS
Exploits1References3
Amazon
Amazon
added 2022/01/28 12:0 a.m.9 views

Important: kernel

Issue Overview: A use-after-free flaw was found in the Linux kernel's NFC LLCP protocol implementation in the way the user performs manipulation with an unknown input for the llcpsockbind function. This flaw allows a local user to crash or escalate their privileges on the system. CVE-2020-25670 A...

7.8CVSS6.7AI score0.03233EPSS
Exploits4
Tenable Nessus
Tenable Nessus
added 2021/12/08 12:0 a.m.52 views

SUSE SLES15 Security Update : kernel (SUSE-SU-2021:3969-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3969-1 advisory. - Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of al...

8.8CVSS7.6AI score0.60631EPSS
Exploits16References133
Tenable Nessus
Tenable Nessus
added 2021/09/24 12:0 a.m.53 views

SUSE SLES12 Security Update : kernel (SUSE-SU-2021:3217-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3217-1 advisory. - In pppol2tpconnect, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System...

8.8CVSS6.8AI score0.04425EPSS
Exploits6References89
OSV
OSV
added 2021/06/07 8:15 p.m.1 views

DEBIAN-CVE-2018-25015

An issue was discovered in the Linux kernel before 4.14.16. There is a use-after-free in net/sctp/socket.c for a held lock after a peel off, aka CID-a0ff660058b8...

7.8CVSS7.5AI score0.00569EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/06/07 12:0 a.m.2 views

Linux kernel 资源管理错误漏洞

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A post-release reuse vulnerability exists in net/sctp/socket.c in versions of Linux kernel prior to 4.14.16. An...

7.8CVSS8.2AI score0.00569EPSS
Exploits1References7
Amazon
Amazon
added 2021/05/24 12:0 a.m.50 views

Medium: kernel

Issue Overview: An issue was discovered in the Linux kernel related to mm/gup.c and mm/hugememory.c. The getuserpages aka gup implementation, when used for a copy-on-write page, does not properly consider the semantics of read operations and therefore can grant unintended read access...

7CVSS6.3AI score0.01071EPSS
Exploits2
Rows per page
Query Builder