Lucene search
+L

48 matches found

F5 Networks
F5 Networks
•added 2023/02/21 6:59 p.m.•61 views

K30002521: GNU C Library vulnerability CVE-2018-19591

Security Advisory Description In the GNU C Library aka glibc or libc6 through 2.28, attempting to resolve a crafted hostname via getaddrinfo leads to the allocation of a socket descriptor that is not closed. This is related to the ifnametoindex function. CVE-2018-19591 Impact There is no impact; ...

7.5CVSS7.5AI score0.05532EPSS
SaveExploits1
SUSE CVE
SUSE CVE
•added 2023/02/15 4:52 a.m.•11 views

SUSE CVE-2017-3144

A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond...

5.3CVSS6.7AI score0.72724EPSS
SaveExploits0References6
OSV
OSV
•added 2022/06/14 6:15 p.m.•14 views

CVE-2022-21504

The code in UEK6 U3 was missing an appropiate file descriptor count to be missing. This resulted in a use count error that allowed a file descriptor to a socket to be closed and freed while it was still in use by another portion of the kernel. An attack with local access can operate on the socket...

5.5CVSS5.6AI score0.00248EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/06/14 12:00 a.m.•15 views

Oracle UEK 6 资源管理错误漏洞

Oracle UEK 6 is an Oracle-built Linux kernel from Oracle Corporation and is supported through Oracle Linux Support. A resource management error vulnerability exists in Oracle UEK 6 that stems from code in UEK 6 U3 that lacks proper file descriptor counting. This results in a usage count error tha...

5.5CVSS5.8AI score0.00248EPSS
SaveExploits0References2
Rosalinux
Rosalinux
•added 2021/07/02 4:37 p.m.•39 views

Advisory ROSA-SA-2021-1822

Software: dhcp 4.2.5 OS: Cobalt 7.9 CVE-ID: CVE-2013-2494 CVE-Crit: HIGH CVE-DESC: libdns in ISC DHCP 4.2.x through 4.2.5-P1 allows remote name servers to cause a denial of service memory consumption using vectors that include a regular expression, as demonstrated by a memory scarcity attack on a...

7.5CVSS7.2AI score0.82728EPSS
SaveExploits0
CVE
CVE
•added 2019/01/16 8:00 p.m.•201 views

CVE-2017-3144

ISC DHCP vulnerability CVE-2017-3144 arises from failure to properly clean up closed OMAPI connections, which can exhaust the DHCP server’s socket descriptor pool and cause a denial of service. Affected releases include ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, and 4.3.0 to 4.3.6; older vers...

7.5CVSS6.2AI score0.72724EPSS
SaveExploits0References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/01/16 12:00 a.m.•6 views

CVE-2017-3144: Uncontrolled Resource Consumption

A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond...

7.5CVSS7AI score0.72724EPSS
SaveExploits0References2
Amazon
Amazon
•added 2019/01/07 12:00 a.m.•54 views

Medium: glibc

Issue Overview: In the GNU C Library aka glibc or libc6 through 2.28, attempting to resolve a crafted hostname via getaddrinfo leads to the allocation of a socket descriptor that is not closed. This is related to the ifnametoindex function.CVE-2018-19591 Affected Packages: glibc Note: This adviso...

7.5CVSS7.8AI score0.05532EPSS
SaveExploits1
OSV
OSV
•added 2018/12/04 4:29 p.m.•11 views

DEBIAN-CVE-2018-19591

In the GNU C Library aka glibc or libc6 through 2.28, attempting to resolve a crafted hostname via getaddrinfo leads to the allocation of a socket descriptor that is not closed. This is related to the ifnametoindex function...

7.5CVSS7.4AI score0.05532EPSS
SaveExploits1References1
Prion
Prion
•added 2018/12/04 4:29 p.m.•26 views

Design/Logic Flaw

In the GNU C Library aka glibc or libc6 through 2.28, attempting to resolve a crafted hostname via getaddrinfo leads to the allocation of a socket descriptor that is not closed. This is related to the ifnametoindex function...

5CVSS7.2AI score0.05532EPSS
SaveExploits1References11Affected Software2
UbuntuCve
UbuntuCve
•added 2018/12/04 4:29 p.m.•46 views

CVE-2018-19591

In the GNU C Library aka glibc or libc6 through 2.28, attempting to resolve a crafted hostname via getaddrinfo leads to the allocation of a socket descriptor that is not closed. This is related to the ifnametoindex function...

7.5CVSS7AI score0.05532EPSS
SaveExploits1References2
NVD
NVD
•added 2018/12/04 4:29 p.m.•30 views

CVE-2018-19591

In the GNU C Library aka glibc or libc6 through 2.28, attempting to resolve a crafted hostname via getaddrinfo leads to the allocation of a socket descriptor that is not closed. This is related to the ifnametoindex function...

7.5CVSS8.3AI score0.05532EPSS
SaveExploits1References11
OSV
OSV
•added 2018/12/04 4:29 p.m.•12 views

UBUNTU-CVE-2018-19591

In the GNU C Library aka glibc or libc6 through 2.28, attempting to resolve a crafted hostname via getaddrinfo leads to the allocation of a socket descriptor that is not closed. This is related to the ifnametoindex function...

7.5CVSS7.1AI score0.05532EPSS
SaveExploits1References3
OSV
OSV
•added 2018/12/04 4:29 p.m.•38 views

CVE-2018-19591

In the GNU C Library aka glibc or libc6 through 2.28, attempting to resolve a crafted hostname via getaddrinfo leads to the allocation of a socket descriptor that is not closed. This is related to the ifnametoindex function...

7.5CVSS6.5AI score
SaveExploits0References11
Cvelist
Cvelist
•added 2018/12/04 4:00 p.m.•43 views

CVE-2018-19591

In the GNU C Library aka glibc or libc6 through 2.28, attempting to resolve a crafted hostname via getaddrinfo leads to the allocation of a socket descriptor that is not closed. This is related to the ifnametoindex function...

6.3AI score0.05532EPSS
SaveExploits1References11
Debian CVE
Debian CVE
•added 2018/12/04 4:00 p.m.•57 views

CVE-2018-19591

In the GNU C Library aka glibc or libc6 through 2.28, attempting to resolve a crafted hostname via getaddrinfo leads to the allocation of a socket descriptor that is not closed. This is related to the ifnametoindex function...

7.5CVSS7.2AI score0.05532EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/12/04 12:00 a.m.•4 views

CVE-2018-19591: Improper Input Validation

In the GNU C Library aka glibc or libc6 through 2.28, attempting to resolve a crafted hostname via getaddrinfo leads to the allocation of a socket descriptor that is not closed. This is related to the ifnametoindex function...

7.5CVSS7.2AI score0.05532EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2018/11/27 8:19 p.m.•36 views

CVE-2018-19591

In the GNU C Library aka glibc or libc6 through 2.28, attempting to resolve a crafted hostname via getaddrinfo leads to the allocation of a socket descriptor that is not closed. This is related to the ifnametoindex function...

7.5CVSS1.8AI score0.05532EPSS
SaveExploits1References2
OSV
OSV
•added 2018/06/12 12:29 p.m.•12 views

DEBIAN-CVE-2018-12232

In net/socket.c in the Linux kernel through 4.17.1, there is a race condition between fchownat and close in cases where they target the same socket file descriptor, related to the sockclose and sockfssetattr functions. fchownat does not increment the file descriptor reference count, which allows...

5.9CVSS7.3AI score0.06526EPSS
SaveExploits0References1
zdt
zdt
•added 2018/05/31 12:00 a.m.•38 views

Linux/x86 - Bind (4444/TCP) Shell Shellcode (105 bytes)

/ ; Filename: tcpbindshellcodelight.nasm ; Author: Paolo Perego ; Website: https://codiceinsicuro.it ; Twitter: @thesp0nge ; SLAE-ID: 1217 ; Purpose: binds on TCP port 4444 and spawn a shell on incoming connections. global start section .text start: ; Creating the socket. ; ; int socketint domain...

7.4AI score
SaveExploits0
Rows per page
Query Builder