Lucene search
+L

2927 matches found

Veracode
Veracode
added 2020/04/10 1:1 a.m.28 views

Denial Of Service (DoS)

kernel is vulnerable to a NULL pointer dereference flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. A remote attacker could send a specially-crafted SCTP packet to a target system, resulting in a denial of service...

7.5CVSS2.8AI score0.03769EPSS
SaveExploits1References12Affected Software1
Veracode
Veracode
added 2020/04/10 1:0 a.m.31 views

Denial Of Service (DoS)

kernel is vulnerable to denial of service. A flaw in the Linux kernel's Stream Control Transmission Protocol SCTP implementation could allow a remote attacker to cause a denial of service if the sysctl "net.sctp.addipenable" and "authenable" variables were turned on they are off by default...

5.9CVSS3.3AI score0.02791EPSS
SaveExploits1References10Affected Software1
Veracode
Veracode
added 2020/04/10 12:53 a.m.32 views

Denial Of Service (DoS)

kernel is vulnerable to denial of service. A flaw was found in the sctpicmpprotounreachable function in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. A remote attacker could use this flaw to cause a denial of service...

7.1CVSS2.6AI score0.02523EPSS
SaveExploits0References19Affected Software2
Veracode
Veracode
added 2020/04/10 12:50 a.m.46 views

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists as the flaw in sctpprocessunkparam, allowing a remote attacker to send a specially-crafted SCTP packet to an SCTP listening port on a target system, causing a denial of service...

7.1CVSS3.5AI score0.21238EPSS
SaveExploits7References24Affected Software2
Veracode
Veracode
added 2020/04/10 12:50 a.m.22 views

Denial Of Service (DoS)

kernel is vulnerable to denial of service. A flaw was found in sctpauthasocgethmac in the Linux kernel's SCTP implementation. When iterating through the hmacids array, it did not reset the last id element if it was out of range. This could allow a remote attacker to cause a denial of service...

8.3CVSS3.7AI score0.02024EPSS
SaveExploits0References20Affected Software2
Veracode
Veracode
added 2020/04/10 12:50 a.m.33 views

Denial Of Service (DoS)

kernel is vulnerable to denial of service. A flaw in sctppacketconfig in the Linux kernel's Stream Control Transmission Protocol SCTP implementation could allow a remote attacker to cause a denial of service...

7.8CVSS3.7AI score0.05542EPSS
SaveExploits0References33Affected Software2
Veracode
Veracode
added 2020/04/10 12:42 a.m.30 views

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists as a NULL pointer dereference flaw was found in the sctprcvootb function in the Linux kernel Stream Control Transmission Protocol SCTP implementation. A remote attacker could send a specially-crafted SCTP packet to a target...

7.8CVSS2.6AI score0.0452EPSS
SaveExploits1References21Affected Software1
Veracode
Veracode
added 2020/04/10 12:34 a.m.28 views

Information Disclosure

kernel is vulnerable to information disclosure. The vulnerability exists as missing boundary checks were reported in the Linux kernel SCTP implementation. This could, potentially, cause information disclosure via a specially crafted SCTPHMACIDENT IOCTL request...

4.7CVSS1.9AI score0.00833EPSS
SaveExploits5References20Affected Software1
Veracode
Veracode
added 2020/04/10 12:34 a.m.34 views

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists as a deficiency was found in the Linux kernel Stream Control Transmission Protocol SCTP Authentication Extension implementation. All the SCTP-AUTH socket options could cause a kernel panic if the API was used when the extensi...

7.1CVSS2.3AI score0.02668EPSS
SaveExploits2References24Affected Software1
Veracode
Veracode
added 2020/04/10 12:34 a.m.25 views

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists as a possible integer overflow was found in the Linux kernel Stream Control Transmission Protocol SCTP implementation...

7.8CVSS3.9AI score0.03494EPSS
SaveExploits2References17Affected Software1
Veracode
Veracode
added 2020/04/10 12:29 a.m.35 views

Denial Of Service (DoS)

The kernel packages is vulnerable to Denial Of Service DoS. A buffer overflow was found in the Linux kernel Partial Reliable Stream Control Transmission Protocol PR-SCTP implementation. This could, potentially, lead to a denial of service if a Forward-TSN chunk is received with a large stream ID...

10CVSS4.5AI score0.1673EPSS
SaveExploits5References40Affected Software2
Veracode
Veracode
added 2020/04/10 12:27 a.m.26 views

Denial Of Service (DoS)

kernel is vulnerable to denial of service. A deficiency was found in the Linux kernel Stream Control Transmission Protocol SCTP implementation. This could lead to a possible denial of service if one end of a SCTP connection did not support the AUTH extension...

7.8CVSS3.2AI score0.0368EPSS
SaveExploits0References27Affected Software2
Veracode
Veracode
added 2020/04/10 12:20 a.m.25 views

Denial Of Service (DoS)

kernel is vulnerable to denial of service. A flaw in the connection tracking support for SCTP that allowed a remote user to cause a denial of service by dereferencing a NULL pointer...

6.1CVSS2.9AI score0.01395EPSS
SaveExploits0References32Affected Software1
RedHat Linux
RedHat Linux
added 2020/04/01 12:27 a.m.366 views

Moderate: Red Hat Security Advisory: podman security, bug fix, and enhancement update

An update for podman is now available for Red Hat Enterprise Linux 7 Extras. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

5.8CVSS6.5AI score0.0149EPSS
SaveExploits1References11
RedhatCVE
RedhatCVE
added 2020/03/28 1:52 p.m.20 views

CVE-2019-8956

A use-after-free issue was found in the Linux kernel's SCTP implementation. The issue could occur while traversing a list of endpoint associations to send a message to all of them via SCTPSENDALL process. A user/process could use this flaw to crash the kernel resulting in a denial of service or...

7.8CVSS4.3AI score0.01129EPSS
SaveExploits2References2
RedHat Linux
RedHat Linux
added 2020/03/23 8:54 a.m.5 views

usrsctp: Out of bounds reads in sctp_load_addresses_from_init()

The Mozilla Foundation Security Advisory describes this flaw as: The inputs to sctploadaddressesfrominit are verified by sctparethereunrecognizedparameters; however, the two functions handled parameter bounds differently, resulting in out of bounds reads when parameters are partially outside a...

6.5CVSS7.3AI score0.03155EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2020/03/23 8:41 a.m.7 views

usrsctp: Out of bounds reads in sctp_load_addresses_from_init()

The Mozilla Foundation Security Advisory describes this flaw as: The inputs to sctploadaddressesfrominit are verified by sctparethereunrecognizedparameters; however, the two functions handled parameter bounds differently, resulting in out of bounds reads when parameters are partially outside a...

6.5CVSS7.3AI score0.03155EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2020/03/16 1:41 p.m.13 views

usrsctp: Out of bounds reads in sctp_load_addresses_from_init()

The Mozilla Foundation Security Advisory describes this flaw as: The inputs to sctploadaddressesfrominit are verified by sctparethereunrecognizedparameters; however, the two functions handled parameter bounds differently, resulting in out of bounds reads when parameters are partially outside a...

6.5CVSS7.3AI score0.03155EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2020/03/16 10:0 a.m.7 views

usrsctp: Out of bounds reads in sctp_load_addresses_from_init()

The Mozilla Foundation Security Advisory describes this flaw as: The inputs to sctploadaddressesfrominit are verified by sctparethereunrecognizedparameters; however, the two functions handled parameter bounds differently, resulting in out of bounds reads when parameters are partially outside a...

6.5CVSS7.3AI score0.03155EPSS
SaveExploits1References5
OSV
OSV
added 2020/03/06 8:15 p.m.5 views

AZL-35345 CVE-2019-20503 affecting package usrsctp for versions less than 0.9.5.0-1

usrsctp before 2019-12-20 has out-of-bounds reads in sctploadaddressesfrominit...

6.5CVSS6.9AI score0.03155EPSS
SaveExploits1References1
Rows per page
Query Builder