Lucene search
+L

3437 matches found

BDU FSTEC
BDU FSTEC
added 2024/08/19 12:00 a.m.16 views

The vulnerability of the Kubernetes Linkerd security tool for clusters lies in insufficient validation of requests on the server side. This allows a malicious actor to perform an SSRF attack and cause service failure.

The vulnerability of the Kubernetes Linkerd security tool for clusters is related to insufficient validation of requests on the server side. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack and cause a service failure by sending specially crafted requests to...

3.7CVSS5.5AI score0.00444EPSS
SaveExploits0References4
OSV
OSV
added 2024/08/16 11:07 a.m.7 views

OESA-2024-1991 qemu security update

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: A flaw was found in the QEMU NBD Server. This vulnerability allows a denial of service DoS attack via improper synchronization during socket closure when a client keeps a socket open as t...

7.5CVSS6.5AI score0.01027EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2024/08/09 1:53 a.m.7 views

SUSE CVE-2024-7409

A flaw was found in the QEMU NBD Server. This vulnerability allows a denial of service DoS attack via improper synchronization during socket closure when a client keeps a socket open as the server is taken offline...

7.5CVSS6.4AI score0.01027EPSS
SaveExploits0References14
RedHat Linux
RedHat Linux
added 2024/08/08 4:53 a.m.17 views

kernel: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets

In the Linux kernel, the following vulnerability has been resolved: tcp: defer shutdownSENDSHUTDOWN for TCPSYNRECV sockets TCPSYNRECV state is really special, it is only used by cross-syn connections, mostly used by fuzzers. In the following crash 1, syzbot managed to trigger a divide by zero in...

5.5CVSS6.7AI score0.00332EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2024/08/08 4:53 a.m.13 views

kernel: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg

In the Linux kernel, the following vulnerability has been resolved: afunix: Fix data races in unixreleasesock/unixstreamsendmsg A data-race condition has been identified in afunix. In one data path, the write function unixreleasesock atomically writes to sk-skshutdown using WRITEONCE. However, on...

4.7CVSS6.7AI score0.00186EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2024/08/08 4:44 a.m.11 views

kernel: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets

In the Linux kernel, the following vulnerability has been resolved: tcp: defer shutdownSENDSHUTDOWN for TCPSYNRECV sockets TCPSYNRECV state is really special, it is only used by cross-syn connections, mostly used by fuzzers. In the following crash 1, syzbot managed to trigger a divide by zero in...

5.5CVSS6.7AI score0.00332EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2024/08/08 4:44 a.m.15 views

kernel: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg

In the Linux kernel, the following vulnerability has been resolved: afunix: Fix data races in unixreleasesock/unixstreamsendmsg A data-race condition has been identified in afunix. In one data path, the write function unixreleasesock atomically writes to sk-skshutdown using WRITEONCE. However, on...

4.7CVSS6.7AI score0.00186EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2024/08/07 9:43 a.m.10 views

kernel: mlxbf_gige: stop interface during shutdown

In the Linux kernel, the following vulnerability has been resolved: mlxbfgige: stop interface during shutdown The Linux kernel CVE team has assigned CVE-2024-35885 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024051946-CVE-2024-35885-ce9c@gregkh/T...

5.5CVSS6AI score0.00231EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2024/08/07 12:14 a.m.9 views

kernel: mlxbf_gige: stop interface during shutdown

In the Linux kernel, the following vulnerability has been resolved: mlxbfgige: stop interface during shutdown The Linux kernel CVE team has assigned CVE-2024-35885 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024051946-CVE-2024-35885-ce9c@gregkh/T...

5.5CVSS6AI score0.00231EPSS
SaveExploits0References5
OSV
OSV
added 2024/08/05 2:15 p.m.8 views

DEBIAN-CVE-2024-7409

A flaw was found in the QEMU NBD Server. This vulnerability allows a denial of service DoS attack via improper synchronization during socket closure when a client keeps a socket open as the server is taken offline...

7.5CVSS7.2AI score0.01027EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2024/07/31 9:14 a.m.33 views

CVE-2024-41048

In the Linux kernel, the following vulnerability has been resolved: skmsg: Skip zero length skb in skmsgrecvmsg When running BPF selftests ./testprogs -t sockmapbasic on a Loongarch platform, the following kernel panic occurs: ... Oops1: CPU: 22 PID: 2824 Comm: testprogs Tainted: G OE 6.10.0-rc2+...

5CVSS6.8AI score0.00799EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2024/07/31 12:54 a.m.8 views

kernel: mlxbf_gige: stop interface during shutdown

In the Linux kernel, the following vulnerability has been resolved: mlxbfgige: stop interface during shutdown The Linux kernel CVE team has assigned CVE-2024-35885 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024051946-CVE-2024-35885-ce9c@gregkh/T...

5.5CVSS6.8AI score0.00231EPSS
SaveExploits0References5
OSV
OSV
added 2024/07/30 8:15 a.m.22 views

AZL-47232 CVE-2024-42230 affecting package kernel for versions less than 6.6.43.1-7

In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: Fix scv instruction crash with kexec kexec on pseries disables AIL reloconexc, required for scv instruction support, before other CPUs have been shut down. This means they can execute scv instructions after AIL i...

4.4CVSS6.5AI score0.00202EPSS
SaveExploits0References1
OSV
OSV
added 2024/07/30 8:15 a.m.4 views

DEBIAN-CVE-2024-42137

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot Commit 272970be3dab "Bluetooth: hciqca: Fix driver shutdown on closed serdev" will cause below regression issue: BT can't be enabled after below steps: col...

5.5CVSS5.5AI score0.00233EPSS
SaveExploits0References1
OSV
OSV
added 2024/07/30 8:15 a.m.27 views

UBUNTU-CVE-2024-42137

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot Commit 272970be3dab "Bluetooth: hciqca: Fix driver shutdown on closed serdev" will cause below regression issue: BT can't be enabled after below steps: col...

5.5CVSS6.1AI score0.00233EPSS
SaveExploits0References25
OSV
OSV
added 2024/07/30 8:15 a.m.10 views

UBUNTU-CVE-2024-42230

In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: Fix scv instruction crash with kexec kexec on pseries disables AIL reloconexc, required for scv instruction support, before other CPUs have been shut down. This means they can execute scv instructions after AIL i...

4.4CVSS6.3AI score0.00202EPSS
SaveExploits0References30
CNNVD
CNNVD
added 2024/07/30 12:00 a.m.6 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates in the powerpc/pseries module when kexec is used and the pseries platform disables AIL before the other CPUs...

4.4CVSS8.2AI score0.00202EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/07/30 12:00 a.m.9 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which originates in the Bluetooth:qca module On a QCA6390 device, if an attempt is made to enable BT after a warm reboot, i...

5.5CVSS6.3AI score0.00233EPSS
SaveExploits0References7
OSV
OSV
added 2024/07/29 11:15 p.m.6 views

CVE-2024-40816

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Sonoma 14.6, macOS Monterey 12.7.6, macOS Ventura 13.6.8. A local attacker may be able to cause unexpected system shutdown...

5.5CVSS5.7AI score0.00247EPSS
SaveExploits0References9
NVD
NVD
added 2024/07/29 11:15 p.m.25 views

CVE-2024-40816

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. A local attacker may be able to cause unexpected system shutdown...

5.5CVSS0.00247EPSS
SaveExploits0References12
Rows per page
Query Builder