Lucene search
K

13 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 5:6 a.m.3 views

SUSE CVE-2016-2117

The atl2probe function in drivers/net/ethernet/atheros/atlx/atl2.c in the Linux kernel through 4.5.2 incorrectly enables scatter/gather I/O, which allows remote attackers to obtain sensitive information from kernel memory by reading packet data...

7.5CVSS6.4AI score0.00642EPSS
Exploits0References10
RedHat Linux
RedHat Linux
added 2016/11/03 8:8 a.m.6 views

kernel: Kernel memory leakage to ethernet frames due to buffer overflow in ethernet drivers

It was discovered that the atl2probe function in the Atheros L2 Ethernet driver in the Linux kernel incorrectly enabled scatter/gather I/O. A remote attacker could use this flaw to obtain potentially sensitive information from the kernel memory...

7.5CVSS7.2AI score0.00642EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2016/08/01 12:0 a.m.98 views

Oracle Linux 6 / 7 : kernel-uek (ELSA-2016-3587)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-3587 advisory. - vfs: rename: check backing inode being equal Miklos Szeredi Orabug: 24010060 CVE-2016-6198 CVE-2016-6197 - vfs: add vfsselectinode helper Miklos...

7.5CVSS6.8AI score0.00642EPSS
Exploits1References4
Oracle linux
Oracle linux
added 2016/08/01 12:0 a.m.75 views

Unbreakable Enterprise kernel security update

2.6.39-400.283.1 - atl2: Disable unimplemented scatter/gather feature Ben Hutchings Orabug: 23703990 CVE-2016-2117 - mlx4core: add module parameter to disable background init Mukesh Kacker Orabug: 23292107 - NFSv4: Don't decode fslocations if we didn't ask for them... Trond Myklebust Orabug:...

5CVSS1AI score0.00642EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2016/08/01 12:0 a.m.72 views

OracleVM 3.3 : kernel-uek (OVMSA-2016-0092)

The remote OracleVM system is missing necessary patches to address critical security updates : - mlx4: Increase SYNCTPT command timeout Mukesh Kacker Orabug: 22895790 - neigh: do not modify unlinked entries Julian Anastasov Orabug: 23072705 - mm/slab: Improve performance of slabinfo stats gatheri...

7.5CVSS7.2AI score0.00642EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2016/08/01 12:0 a.m.43 views

OracleVM 3.4 : kernel-uek (OVMSA-2016-0091)

The remote OracleVM system is missing necessary patches to address critical security updates : - vfs: rename: check backing inode being equal Miklos Szeredi Orabug: 24010060 CVE-2016-6198 CVE-2016-6197 - vfs: add vfsselectinode helper Miklos Szeredi Orabug: 24010060 CVE-2016-6198 CVE-2016-6197 -...

7.5CVSS6.9AI score0.00642EPSS
Exploits1References4
Oracle linux
Oracle linux
added 2016/07/29 12:0 a.m.50 views

kernel-uek security update

kernel-uek 4.1.12-37.6.1 - vfs: rename: check backing inode being equal Miklos Szeredi Orabug: 24010060 CVE-2016-6198 CVE-2016-6197 - vfs: add vfsselectinode helper Miklos Szeredi Orabug: 24010060 CVE-2016-6198 CVE-2016-6197 - ovl: verify upper dentry before unlink and rename Miklos Szeredi Orabu...

5CVSS0.4AI score0.00642EPSS
Exploits1
Positive Technologies
Positive Technologies
added 2016/05/02 12:0 a.m.3 views

PT-2016-5021 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.5.2 Description: The issue allows remote attackers to obtain sensitive information from kernel memory by reading packet data. This is due to the incorrect enabling of scatter/gather I/O in the atl2 probe...

10CVSS7.1AI score0.87EPSS
Exploits131References800
CNVD
CNVD
added 2016/03/18 12:0 a.m.2 views

atl2 driver memory leak vulnerability

The atl2 driver is a set of Linux kernel drivers for Ethernet adapters. scatter/gather IO is a standard technique used for high-performance IO. netiffsg is an identifier used to determine whether scatter/gather I/O is enabled. A security vulnerability exists in the atl2 driver versions 3.8 throug...

7.5CVSS7.6AI score0.00642EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:0 a.m.4 views

Vulnerabilities in the operating system openSUSE, which allow a malicious individual to compromise the accessibility of protected information

The atl2-kmp-debug package of the operating system openSUSE has multiple vulnerabilities. Exploiting these vulnerabilities can lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

7.8CVSS6.8AI score0.17556EPSS
Exploits32References12Affected Software2
OpenVAS
OpenVAS
added 2009/06/05 12:0 a.m.41 views

Fedora Core 10 FEDORA-2009-5356 (kernel)

The remote host is missing an update to kernel announced via advisory FEDORA-2009-5356. OpenVAS Vulnerability Test $Id: fcore20095356.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-5356 kernel Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...

10CVSS0.9AI score0.15492EPSS
Exploits12References4
OpenVAS
OpenVAS
added 2009/06/05 12:0 a.m.42 views

Fedora Core 9 FEDORA-2009-5383 (kernel)

The remote host is missing an update to the kernel announced via advisory FEDORA-2009-5383. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

7.8CVSS6.1AI score0.09719EPSS
Exploits3References3
OpenVAS
OpenVAS
added 2009/06/05 12:0 a.m.53 views

Fedora Core 10 FEDORA-2009-5356 (kernel)

The remote host is missing an update to kernel announced via advisory FEDORA-2009-5356. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

10CVSS6.5AI score0.15492EPSS
Exploits12References5
Rows per page
Query Builder