Lucene search
+L

9713 matches found

Microsoft CVE
Microsoft CVE
added 2020/12/03 8:00 a.m.8 views

An issue was discovered in the Linux kernel before 5.7.3 related to mm/gup.c and mm/huge_memory.c. The get_user_pages (aka gup) implementation when used for a copy-on-write page does not properly consider the semantics of read operations and therefore can grant unintended write access aka CID-17839856fd58.

...

3.6CVSS8.3AI score0.00402EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
added 2020/12/03 8:00 a.m.6 views

An issue was discovered in __split_huge_pmd in mm/huge_memory.c in the Linux kernel before 5.7.5. The copy-on-write implementation can grant unintended write access because of a race condition in a THP mapcount check aka CID-c444eb564fb1.

...

7CVSS8.3AI score0.0036EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
added 2020/12/03 12:00 a.m.7 views

The vulnerability of the KD_FONT_OP_COPY function in the fbcon driver of Linux operating systems allows attackers to escalate their privileges or cause service failures.

The vulnerability of the KDFONTOPCOPY function in the fbcon driver of Linux operating system kernels relates to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or cause service...

6.1CVSS6.8AI score0.00517EPSS
SaveExploits1References31Affected Software2
Microsoft CVE
Microsoft CVE
added 2020/12/02 8:00 a.m.15 views

A slab-out-of-bounds read in fbcon in the Linux kernel before 5.9.7 could be used by local attackers to read privileged information or potentially crash the kernel aka CID-3c4e0dff2095. This occurs because KD_FONT_OP_COPY in drivers/tty/vt/vt.c can be used for manipulations such as font height.

...

6.1CVSS8.3AI score0.00517EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2020/12/01 5:29 p.m.36 views

CVE-2020-29368

An issue was discovered in splithugepmd in mm/hugememory.c in the Linux kernel. The copy-on-write implementation can grant unintended write access because of a race condition in a THP mapcount check. Mitigation Mitigation for this issue is either not available or the currently available options...

6.9CVSS1.4AI score0.0036EPSS
SaveExploits1References3
CNVD
CNVD
added 2020/12/01 12:00 a.m.4 views

Linux kernel code issue vulnerability (CNVD-2020-68543)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in versions of Linux kernel prior to 5.7.5, which stems from a contention condition in split huge pmd in mm huge memoryc, where the copy-on-writ...

7CVSS7AI score0.0036EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2020/11/29 12:00 a.m.11 views

PT-2020-6398 · Openexr · Openexr

Name of the Vulnerable Software and Affected Versions: OpenEXR versions prior to 3.0.1 Description: A heap-buffer overflow was found in the copyIntoFrameBuffer function of OpenEXR. This issue allows an attacker to execute arbitrary code with the permissions of the user running the application...

8.8CVSS6.8AI score0.02291EPSS
SaveExploits0References35
OSV
OSV
added 2020/11/28 7:15 a.m.9 views

DEBIAN-CVE-2020-29368

An issue was discovered in splithugepmd in mm/hugememory.c in the Linux kernel before 5.7.5. The copy-on-write implementation can grant unintended write access because of a race condition in a THP mapcount check, aka CID-c444eb564fb1...

7CVSS6.4AI score0.0036EPSS
SaveExploits1References1
OSV
OSV
added 2020/11/28 7:15 a.m.12 views

CVE-2020-29374

An issue was discovered in the Linux kernel before 5.7.3, related to mm/gup.c and mm/hugememory.c. The getuserpages aka gup implementation, when used for a copy-on-write page, does not properly consider the semantics of read operations and therefore can grant unintended write access, aka...

3.6CVSS5AI score
SaveExploits0References9
OSV
OSV
added 2020/11/28 7:15 a.m.3 views

DEBIAN-CVE-2020-29374

An issue was discovered in the Linux kernel before 5.7.3, related to mm/gup.c and mm/hugememory.c. The getuserpages aka gup implementation, when used for a copy-on-write page, does not properly consider the semantics of read operations and therefore can grant unintended write access, aka...

3.6CVSS6.4AI score0.00402EPSS
SaveExploits1References1
OSV
OSV
added 2020/11/28 7:15 a.m.10 views

CVE-2020-29368

An issue was discovered in splithugepmd in mm/hugememory.c in the Linux kernel before 5.7.5. The copy-on-write implementation can grant unintended write access because of a race condition in a THP mapcount check, aka CID-c444eb564fb1...

7CVSS6.9AI score
SaveExploits0References4
Prion
Prion
added 2020/11/28 7:15 a.m.30 views

Race condition

An issue was discovered in splithugepmd in mm/hugememory.c in the Linux kernel before 5.7.5. The copy-on-write implementation can grant unintended write access because of a race condition in a THP mapcount check, aka CID-c444eb564fb1...

6.9CVSS6.6AI score0.0036EPSS
SaveExploits1References4Affected Software1
UbuntuCve
UbuntuCve
added 2020/11/28 7:15 a.m.36 views

CVE-2020-29368

An issue was discovered in splithugepmd in mm/hugememory.c in the Linux kernel before 5.7.5. The copy-on-write implementation can grant unintended write access because of a race condition in a THP mapcount check, aka CID-c444eb564fb1...

7CVSS6.8AI score0.0036EPSS
SaveExploits1References6
Prion
Prion
added 2020/11/28 7:15 a.m.27 views

Design/Logic Flaw

An issue was discovered in the Linux kernel before 5.7.3, related to mm/gup.c and mm/hugememory.c. The getuserpages aka gup implementation, when used for a copy-on-write page, does not properly consider the semantics of read operations and therefore can grant unintended write access, aka...

3.3CVSS5AI score0.00402EPSS
SaveExploits1References9Affected Software2
OSV
OSV
added 2020/11/28 7:15 a.m.7 views

UBUNTU-CVE-2020-29374

An issue was discovered in the Linux kernel before 5.7.3, related to mm/gup.c and mm/hugememory.c. The getuserpages aka gup implementation, when used for a copy-on-write page, does not properly consider the semantics of read operations and therefore can grant unintended write access, aka...

3.6CVSS6.7AI score0.00402EPSS
SaveExploits1References8
OSV
OSV
added 2020/11/28 7:15 a.m.12 views

UBUNTU-CVE-2020-29368

An issue was discovered in splithugepmd in mm/hugememory.c in the Linux kernel before 5.7.5. The copy-on-write implementation can grant unintended write access because of a race condition in a THP mapcount check, aka CID-c444eb564fb1...

7CVSS6.7AI score0.0036EPSS
SaveExploits1References7
CVE
CVE
added 2020/11/28 6:20 a.m.441 views

CVE-2020-29368

Affected software: Linux kernel up to version prior to 5.7.5 (pre-5.7.5). Vulnerability details: In mm/huge_memory.c, __split_huge_pmd, the copy-on-write CoW implementation can grant unintended write access due to a race in the THP mapcount check. This race condition can lead to local write acces...

7CVSS6.6AI score0.0036EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2020/11/28 6:18 a.m.25 views

CVE-2020-29374

An issue was discovered in the Linux kernel before 5.7.3, related to mm/gup.c and mm/hugememory.c. The getuserpages aka gup implementation, when used for a copy-on-write page, does not properly consider the semantics of read operations and therefore can grant unintended write access, aka...

5.2AI score0.00402EPSS
SaveExploits1References9
CNNVD
CNNVD
added 2020/11/28 12:00 a.m.13 views

Linux kernel 竞争条件问题漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in versions of Linux kernel prior to 5.7.5, which stems from a contention condition in split huge pmd in mm huge memoryc, where the copy-on-writ...

7CVSS6.7AI score0.0036EPSS
SaveExploits1References38
Prion
Prion
added 2020/11/25 2:15 a.m.29 views

Design/Logic Flaw

Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. This is a Consensus vulnerability in Geth before version 1.9.17 which can be used to cause a chain-split where vulnerable nodes reject the canonical chain. Geth's pre-compiled dataCopy at 0x00...04 contract di...

5.5CVSS6.6AI score0.01094EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder