Lucene search
+L

2691 matches found

OSV
OSV
added 2019/11/27 11:15 p.m.1 views

DEBIAN-CVE-2019-18660

The Linux kernel before 5.4.1 on powerpc allows Information Exposure because the Spectre-RSB mitigation is not in place for all applicable CPUs, aka CID-39e72bf96f58. This is related to arch/powerpc/kernel/entry64.S and arch/powerpc/kernel/security.c...

4.7CVSS6.4AI score0.00736EPSS
SaveExploits0References1
OSV
OSV
added 2019/11/27 11:15 p.m.10 views

CVE-2019-18660

The Linux kernel before 5.4.1 on powerpc allows Information Exposure because the Spectre-RSB mitigation is not in place for all applicable CPUs, aka CID-39e72bf96f58. This is related to arch/powerpc/kernel/entry64.S and arch/powerpc/kernel/security.c...

4.7CVSS6.4AI score
SaveExploits0References18
Prion
Prion
added 2019/11/27 11:15 p.m.36 views

Design/Logic Flaw

The Linux kernel before 5.4.1 on powerpc allows Information Exposure because the Spectre-RSB mitigation is not in place for all applicable CPUs, aka CID-39e72bf96f58. This is related to arch/powerpc/kernel/entry64.S and arch/powerpc/kernel/security.c...

1.9CVSS5.9AI score0.00736EPSS
SaveExploits0References18Affected Software5
Cvelist
Cvelist
added 2019/11/27 10:11 p.m.40 views

CVE-2019-18660

The Linux kernel before 5.4.1 on powerpc allows Information Exposure because the Spectre-RSB mitigation is not in place for all applicable CPUs, aka CID-39e72bf96f58. This is related to arch/powerpc/kernel/entry64.S and arch/powerpc/kernel/security.c...

6.7AI score0.00736EPSS
SaveExploits0References18
CVE
CVE
added 2019/11/27 10:11 p.m.376 views

CVE-2019-18660

CVE-2019-18660 affects: Linux kernel on PowerPC. Summary: Information exposure due to Spectre-RSB mitigation not being active on all applicable CPUs, related to arch/powerpc/kernel/entry_64.S and arch/powerpc/kernel/security.c. Impact: potential partial leakage of sensitive data through side chan...

4.7CVSS6.5AI score0.00736EPSS
SaveExploits0References18Affected Software1
Debian CVE
Debian CVE
added 2019/11/27 10:11 p.m.48 views

CVE-2019-18660

The Linux kernel before 5.4.1 on powerpc allows Information Exposure because the Spectre-RSB mitigation is not in place for all applicable CPUs, aka CID-39e72bf96f58. This is related to arch/powerpc/kernel/entry64.S and arch/powerpc/kernel/security.c...

4.7CVSS7.1AI score0.00736EPSS
SaveExploits0
OSV
OSV
added 2019/11/27 8:00 p.m.6 views

UBUNTU-CVE-2019-18660

The Linux kernel before 5.4.1 on powerpc allows Information Exposure because the Spectre-RSB mitigation is not in place for all applicable CPUs, aka CID-39e72bf96f58. This is related to arch/powerpc/kernel/entry64.S and arch/powerpc/kernel/security.c...

4.7CVSS6.7AI score0.00736EPSS
SaveExploits0References11
UbuntuCve
UbuntuCve
added 2019/11/27 8:00 p.m.55 views

CVE-2019-18660

The Linux kernel before 5.4.1 on powerpc allows Information Exposure because the Spectre-RSB mitigation is not in place for all applicable CPUs, aka CID-39e72bf96f58. This is related to arch/powerpc/kernel/entry64.S and arch/powerpc/kernel/security.c...

4.7CVSS6.8AI score0.00736EPSS
SaveExploits0References10
OSV
OSV
added 2019/11/19 9:16 p.m.19 views

MGASA-2019-0333 Updated kernel-linus packages fix security vulnerabilities

This kernel-linus update is based on the upstream 5.3.11 and fixes at least the following security issues: Insufficient access control in a subsystem for Intel R processor graphics may allow an authenticated user to potentially enable escalation of privilege via local access CVE-2019-0155. A...

8.8CVSS8.1AI score0.04521EPSS
SaveExploits8References16
Mageia
Mageia
added 2019/11/19 9:16 p.m.93 views

Updated kernel-linus packages fix security vulnerabilities

This kernel-linus update is based on the upstream 5.3.11 and fixes at least the following security issues: Insufficient access control in a subsystem for Intel R processor graphics may allow an authenticated user to potentially enable escalation of privilege via local access CVE-2019-0155. A...

8.8CVSS3.3AI score0.04521EPSS
SaveExploits8References15
RedhatCVE
RedhatCVE
added 2019/11/04 4:10 p.m.52 views

CVE-2019-1125

A Spectre gadget was found in the Linux kernel's implementation of system interrupts. An attacker with local access could use this information to reveal private data through a Spectre like side channel. Mitigation For mitigation related information, please refer to the Red Hat Knowledgebase artic...

5.9CVSS0.5AI score0.04521EPSS
SaveExploits4References3
RedHat Linux
RedHat Linux
added 2019/10/30 9:45 a.m.8 views

kernel: hw: Spectre SWAPGS gadget vulnerability

A Spectre gadget was found in the Linux kernel's implementation of system interrupts. An attacker with local access could use this information to reveal private data through a Spectre like side channel...

5.6CVSS7.1AI score0.04521EPSS
SaveExploits4References4
Tenable Nessus
Tenable Nessus
added 2019/10/30 12:00 a.m.93 views

RHEL 7 : kernel (RHSA-2019:3220)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:3220 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: Kernel: vhostnet: infinite loop while...

8.1CVSS7AI score0.04521EPSS
SaveExploits6References9
RedHat Linux
RedHat Linux
added 2019/10/29 1:22 p.m.14 views

kernel: hw: Spectre SWAPGS gadget vulnerability

A Spectre gadget was found in the Linux kernel's implementation of system interrupts. An attacker with local access could use this information to reveal private data through a Spectre like side channel...

5.6CVSS7.1AI score0.04521EPSS
SaveExploits4References4
RedHat Linux
RedHat Linux
added 2019/10/29 1:22 p.m.87 views

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 7.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

8.1CVSS6.9AI score0.04521EPSS
SaveExploits6References5
Tenable Nessus
Tenable Nessus
added 2019/10/25 12:00 a.m.46 views

Amazon Linux 2 : java-11-openjdk (ALAS-2019-1338) (Spectre)

An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of Load & Store instructions a commonly used performance optimization. It relies on the presence of a precisely-defined instruction sequence in the privileged code as well as the...

5.5CVSS7.1AI score0.60631EPSS
SaveExploits3References2
RedHat Linux
RedHat Linux
added 2019/10/24 7:40 a.m.112 views

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 7.4 Advanced Update Support, Red Hat Enterprise Linux 7.4 Telco Extended Update Support, and Red Hat Enterprise Linux 7.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impac...

8.1CVSS7.1AI score0.02691EPSS
SaveExploits2References2
Ubuntu
Ubuntu
added 2019/10/23 4:54 a.m.172 views

USN-4162-2: Linux kernel (Azure) vulnerabilities

USN-4162-1 fixed vulnerabilities in the Linux kernel for Ubuntu 18.04 LTS. This update provides the corresponding updates for the Linux kernel for Microsoft Azure Cloud systems for Ubuntu 14.04 ESM. It was discovered that the RSI 91x Wi-Fi driver in the Linux kernel did not did not handle detach...

10CVSS7.1AI score0.07619EPSS
SaveExploits3
Ubuntu
Ubuntu
added 2019/10/23 3:29 a.m.190 views

USN-4163-2: Linux kernel (Xenial HWE) vulnerabilities

USN-4163-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 16.04 LTS for Ubuntu 14.04 ESM. It was discovered that a race condition existed in the ARC EMAC ethernet driver for th...

10CVSS6.9AI score0.07619EPSS
SaveExploits3
Ubuntu
Ubuntu
added 2019/10/22 2:40 a.m.244 views

USN-4163-1: Linux kernel vulnerabilities

It was discovered that a race condition existed in the ARC EMAC ethernet driver for the Linux kernel, resulting in a use-after-free vulnerability. An attacker could use this to cause a denial of service system crash. CVE-2016-10906 It was discovered that a race condition existed in the Serial...

10CVSS6.9AI score0.07619EPSS
SaveExploits3
Rows per page
Query Builder