Lucene search
+L

1975 matches found

RedHat Linux
RedHat Linux
added 2023/11/07 9:3 a.m.5 views

kernel: eBPF: insufficient stack type checks in dynptr

An improper input validation flaw was found in the eBPF subsystem in the Linux kernel. The issue occurs due to a lack of proper validation of dynamic pointers within user-supplied eBPF programs prior to executing them. This may allow an attacker with CAPBPF privileges to escalate privileges and...

8.2CVSS7AI score0.00516EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
added 2023/11/06 12:0 a.m.27 views

Rocky Linux 8 : libdb (RLSA-2021:1675)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:1675 advisory. - Vulnerability in the Data Store component of Oracle Berkeley DB. Supported versions that are affected are Prior to 6.138, prior to 6.2.38 and prior to 18.1.32...

3.3CVSS5.5AI score0.00604EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2023/10/20 12:0 a.m.33 views

Ubuntu 16.04 LTS / 18.04 LTS : Berkeley DB vulnerability (USN-4004-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4004-1 advisory. It was discovered that Berkeley DB incorrectly handled certain inputs. An attacker could possibly use this issue to read sensitive information. Tenabl...

9.8CVSS7.5AI score0.45426EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2023/10/17 9:32 a.m.55 views

Important: Red Hat Security Advisory: bind9.16 security update

An update for bind9.16 is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

7.5CVSS7AI score0.02647EPSS
SaveExploits0References2
Microsoft CVE
Microsoft CVE
added 2023/10/11 7:0 a.m.5 views

Kernel: ebpf: insufficient stack type checks in dynptr

...

8.2CVSS7AI score0.00516EPSS
SaveExploits1
RedHat Linux
RedHat Linux
added 2023/10/09 10:55 a.m.48 views

Important: Red Hat Security Advisory: bind security update

An update for bind is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

7.5CVSS7AI score0.02647EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2023/10/05 2:42 p.m.42 views

Important: Red Hat Security Advisory: bind security update

An update for bind is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

7.5CVSS7AI score0.02647EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2023/10/05 1:13 p.m.39 views

Important: Red Hat Security Advisory: bind9.16 security update

An update for bind9.16 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

7.5CVSS7AI score0.02647EPSS
SaveExploits0References2
OSV
OSV
added 2023/10/04 7:15 p.m.12 views

AZL-31150 CVE-2023-39191 affecting package kernel for versions less than 5.15.137.1-1

An improper input validation flaw was found in the eBPF subsystem in the Linux kernel. The issue occurs due to a lack of proper validation of dynamic pointers within user-supplied eBPF programs prior to executing them. This may allow an attacker with CAPBPF privileges to escalate privileges and...

8.2CVSS7.1AI score0.00516EPSS
SaveExploits1References1
OSV
OSV
added 2023/10/04 7:15 p.m.8 views

UBUNTU-CVE-2023-39191

An improper input validation flaw was found in the eBPF subsystem in the Linux kernel. The issue occurs due to a lack of proper validation of dynamic pointers within user-supplied eBPF programs prior to executing them. This may allow an attacker with CAPBPF privileges to escalate privileges and...

8.2CVSS7AI score0.00516EPSS
SaveExploits1References6
SUSE CVE
SUSE CVE
added 2023/10/03 2:1 a.m.3 views

SUSE CVE-2023-39191

An improper input validation flaw was found in the eBPF subsystem in the Linux kernel. The issue occurs due to a lack of proper validation of dynamic pointers within user-supplied eBPF programs prior to executing them. This may allow an attacker with CAPBPF privileges to escalate privileges and...

8.2CVSS7.5AI score0.00516EPSS
SaveExploits1References13
CNNVD
CNNVD
added 2023/09/29 12:0 a.m.2 views

Linux kernel 安全漏洞

Linux Kernel is an open source operating system. A security vulnerability exists in the Linux Kernel eBPF processing, which can be exploited by a local attacker to submit a special request that can elevate privileges...

8.2CVSS7AI score0.00516EPSS
SaveExploits1References9
Fedora
Fedora
added 2023/09/26 12:19 a.m.35 views

[SECURITY] Fedora 39 Update: cups-2.4.7-1.fc39

CUPS printing system provides a portable printing layer for UNIX=EF=BF=BD=EF=BF=BD operating systems. It has been developed by Apple Inc. to promote a standard printing solution for all UNIX vendors and users. CUPS provides the System V and Berkeley command-line interfaces...

7CVSS7AI score0.00663EPSS
SaveExploits2
Positive Technologies
Positive Technologies
added 2023/09/16 12:0 a.m.4 views

PT-2023-9747 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the BPF Berkeley Packet Filter program in the Linux kernel. When the bpf throw kfunc is called, it triggers dead code elimination in an unprecedented way, causi...

6.6CVSS5.4AI score0.00246EPSS
SaveExploits0References28
OSV
OSV
added 2023/08/30 8:21 p.m.12 views

CLSA-2023-1693426883 kernel: Fix of 20 CVEs

netfilter: nftsetpipapo: fix improper element removal CVE-2023-4004 - net: tun: fix bugs for oversize packet when napi frags enabled CVE-2023-3812 - net/sched: clsfw: Fix improper refcount update leads to use-after-free CVE-2023-3776 - net/sched: schqfq: account for stab overhead in qfqenqueue...

7.8CVSS7.2AI score0.21314EPSS
SaveExploits4References1
OSV
OSV
added 2023/08/08 12:34 p.m.44 views

RLSA-2023:4100 Important: bind9.16 security update

The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. Security Fixes:...

7.5CVSS8AI score0.03776EPSS
SaveExploits0References2
Rockylinux
Rockylinux
added 2023/08/08 12:34 p.m.55 views

bind9.16 security update

An update is available for bind9.16. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Berkeley Internet Name Domain BIND is an implementation of the Domain Na...

7.5CVSS6.8AI score0.03776EPSS
SaveExploits0
OSV
OSV
added 2023/08/08 12:33 p.m.35 views

RLSA-2023:4102 Important: bind security update

The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. Security Fixes:...

7.5CVSS8AI score0.03776EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2023/07/31 9:39 a.m.37 views

Important: Red Hat Security Advisory: bind security update

An update for bind is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, and Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as havi...

7.5CVSS7.1AI score0.03776EPSS
SaveExploits0References2
Microsoft CVE
Microsoft CVE
added 2023/07/21 7:0 a.m.7 views

Linux Kernel BPF usdt.c parse_usdt_arg memory leak

...

5.7CVSS7.1AI score0.00431EPSS
SaveExploits0
Rows per page
Query Builder