Lucene search
+L

243 matches found

OSV
OSV
added 2022/10/14 12:15 a.m.1 views

DEBIAN-CVE-2022-41674

An issue was discovered in the Linux kernel before 5.19.16. Attackers able to inject WLAN frames could cause a buffer overflow in the ieee80211bssinfoupdate function in net/mac80211/scan.c...

8.1CVSS6.8AI score0.03763EPSS
Exploits1References1
OSV
OSV
added 2022/10/14 12:15 a.m.12 views

UBUNTU-CVE-2022-42721

A list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers able to inject WLAN frames to corrupt a linked list and, in turn, potentially execute code...

5.5CVSS6.7AI score0.00572EPSS
Exploits1References12
Prion
Prion
added 2022/10/14 12:15 a.m.31 views

Design/Logic Flaw

Various refcounting bugs in the multi-BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers able to inject WLAN frames to trigger use-after-free conditions to potentially execute code...

4.3CVSS7.7AI score0.00798EPSS
Exploits1References10Affected Software3
OSV
OSV
added 2022/10/14 12:15 a.m.5 views

UBUNTU-CVE-2022-41674

An issue was discovered in the Linux kernel before 5.19.16. Attackers able to inject WLAN frames could cause a buffer overflow in the ieee80211bssinfoupdate function in net/mac80211/scan.c...

8.1CVSS7AI score0.03763EPSS
Exploits1References14
Prion
Prion
added 2022/10/14 12:15 a.m.28 views

Code injection

A list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers able to inject WLAN frames to corrupt a linked list and, in turn, potentially execute code...

1.7CVSS6.3AI score0.00572EPSS
Exploits1References10Affected Software3
Cvelist
Cvelist
added 2022/10/13 12:0 a.m.32 views

CVE-2022-42720

Various refcounting bugs in the multi-BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers able to inject WLAN frames to trigger use-after-free conditions to potentially execute code...

8.2AI score0.00798EPSS
Exploits1References10
AlpineLinux
AlpineLinux
added 2022/10/13 12:0 a.m.71 views

CVE-2022-42720

Various refcounting bugs in the multi-BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers able to inject WLAN frames to trigger use-after-free conditions to potentially execute code...

7.8CVSS8.2AI score0.00798EPSS
Exploits1
AlpineLinux
AlpineLinux
added 2022/10/13 12:0 a.m.47 views

CVE-2022-42721

A list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers able to inject WLAN frames to corrupt a linked list and, in turn, potentially execute code...

5.5CVSS7AI score0.00572EPSS
Exploits1
Cvelist
Cvelist
added 2022/10/13 12:0 a.m.33 views

CVE-2022-42721

A list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers able to inject WLAN frames to corrupt a linked list and, in turn, potentially execute code...

6.8AI score0.00572EPSS
Exploits1References10
CVE
CVE
added 2022/10/13 12:0 a.m.305 views

CVE-2022-42721

CVE-2022-42721 is a local, WLAN-frame–triggered vulnerability in the Linux kernel mac80211/BSS handling (linked-list corruption in net/wireless/scan.c; cfg80211_add_nontrans_list) affecting 5.1–5.19.x prior to 5.19.16. Exploitation could enable code execution via crafted frames; patches exist in ...

5.5CVSS6.5AI score0.00572EPSS
Exploits1References10Affected Software1
OpenVAS
OpenVAS
added 2022/08/26 12:0 a.m.37 views

Ubuntu: Security Advisory (USN-4095-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.7AI score0.06821EPSS
Exploits6References2
Microsoft CVE
Microsoft CVE
added 2022/08/09 7:0 a.m.4 views

The Linux kernel before 5.18.13 lacks a certain clear operation for the block starting symbol (.bss). This allows Xen PV guest OS users to cause a denial of service or gain privileges.

...

7.8CVSS7AI score0.00871EPSS
Exploits1
BDU FSTEC
BDU FSTEC
added 2022/08/01 12:0 a.m.8 views

The vulnerability of the `clear_bss` function in Linux operating system kernels, related to errors during the clearing of the initial symbol of a block (.bss), allows an attacker to execute arbitrary code.

The vulnerability of the clearbss function in Linux operating systems is related to errors during the clearing of the initial symbol of a block .bss. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7AI score0.00871EPSS
Exploits1References17Affected Software4
ATTACKERKB
ATTACKERKB
added 2022/07/29 2:15 p.m.3 views

CVE-2022-36123

The Linux kernel before 5.18.13 lacks a certain clear operation for the block starting symbol .bss. This allows Xen PV guest OS users to cause a denial of service or gain privileges...

7.8CVSS5.8AI score0.00871EPSS
Exploits1References7
OSV
OSV
added 2022/07/29 2:15 p.m.0 views

DEBIAN-CVE-2022-36123

The Linux kernel before 5.18.13 lacks a certain clear operation for the block starting symbol .bss. This allows Xen PV guest OS users to cause a denial of service or gain privileges...

7.8CVSS6.3AI score0.00871EPSS
Exploits1References1
OSV
OSV
added 2022/07/29 2:15 p.m.3 views

UBUNTU-CVE-2022-36123

The Linux kernel before 5.18.13 lacks a certain clear operation for the block starting symbol .bss. This allows Xen PV guest OS users to cause a denial of service or gain privileges...

7.8CVSS6.7AI score0.00871EPSS
Exploits1References7
Cvelist
Cvelist
added 2022/07/29 1:43 p.m.38 views

CVE-2022-36123

The Linux kernel before 5.18.13 lacks a certain clear operation for the block starting symbol .bss. This allows Xen PV guest OS users to cause a denial of service or gain privileges...

7.6AI score0.00871EPSS
Exploits1References6
CNNVD
CNNVD
added 2022/07/29 12:0 a.m.4 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in Linux kernel versions v5.18-rc1 through v5.19-rc6, which originates from an inability to clear the block start symbol .bss of a statically assigned variable in .bss,...

7.8CVSS7AI score0.00871EPSS
Exploits1References8
Qualys Blog
Qualys Blog
added 2022/05/09 4:40 a.m.34 views

Ursnif Malware Banks on News Events for Phishing Attacks

Ursnif aka Gozi, Dreambot, ISFB is one of the most widespread banking trojans. It has been observed evolving over the past few years. Ursnif has shown incredible theft capabilities. In 2020 Ursnif rose to prominence becoming one of the top ten most prolific pieces of malware. Among its core...

0.6AI score
Exploits0
Kitploit
Kitploit
added 2022/02/04 11:30 a.m.40 views

Elfloader - An Architecture-Agnostic ELF File Flattener For Shellcode

elfloader is a super simple loader for ELF files that generates a flat in-memory representation of the ELF. Pair this with Rust and now you can write your shellcode in a proper, safe, high-level language. Any target that LLVM can target can be used, including custom target specifications for real...

7.2AI score
Exploits0References1
Rows per page
Query Builder