Lucene search
+L

2283 matches found

RedhatCVE
RedhatCVE
•added 2020/04/08 5:19 a.m.•39 views

CVE-2018-20510

The printbindertransactionilocked function in drivers/android/binder.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address information by reading "from code flags" lines in a debugfs file...

5.5CVSS2.8AI score0.0041EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2020/04/02 8:12 p.m.•23 views

CVE-2018-7754

A flaw was found in the Linux kernel in that the aoediskdebugfsshow function in drivers/block/aoe/aoeblk.c allows local users to obtain some kernel address information by reading a debugfs file. This address is not useful to commit a further attack...

5.5CVSS3.8AI score0.00383EPSS
SaveExploits0References2
OSV
OSV
•added 2020/03/24 8:15 p.m.•17 views

CVE-2019-20625

An issue was discovered on Samsung mobile devices with N7.1 and O8.x Exynos chipsets software. The ion debugfs driver allows information disclosure. The Samsung ID is SVE-2018-13427 February 2019...

3.3CVSS5.8AI score0.00132EPSS
SaveExploits0References1
NVD
NVD
•added 2020/03/24 8:15 p.m.•28 views

CVE-2019-20625

An issue was discovered on Samsung mobile devices with N7.1 and O8.x Exynos chipsets software. The ion debugfs driver allows information disclosure. The Samsung ID is SVE-2018-13427 February 2019...

3.3CVSS3.9AI score0.00132EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2020/03/24 7:41 p.m.•32 views

CVE-2019-20625

An issue was discovered on Samsung mobile devices with N7.1 and O8.x Exynos chipsets software. The ion debugfs driver allows information disclosure. The Samsung ID is SVE-2018-13427 February 2019...

3.9AI score0.00132EPSS
SaveExploits0References1
CVE
CVE
•added 2020/03/24 7:41 p.m.•59 views

CVE-2019-20625

Summary: CVE-2019-20625 affects Samsung mobile devices with N(7.1) and O(8.x) (Exynos chipsets). The issue is due to the ion debugfs driver, which can disclose information. The Samsung internal identifier is SVE-2018-13427 (Feb 2019). What’s affected / root cause: An information disclosure flaw i...

3.3CVSS4.1AI score0.00132EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/03/24 12:00 a.m.•6 views

CVE-2019-20625: Insertion of Sensitive Information into Log File

An issue was discovered on Samsung mobile devices with N7.1 and O8.x Exynos chipsets software. The ion debugfs driver allows information disclosure. The Samsung ID is SVE-2018-13427 February 2019...

3.3CVSS5.4AI score0.00132EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2020/01/29 12:00 a.m.•7 views

The vulnerability of the debugfs_remove function in Linux kernel, related to the use of memory after it is freed, allows an attacker to gain access to confidential data and also trigger a service failure.

The vulnerability of the debugfsremove function in Linux operating systems relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to gain access to confidential data and also trigger a service failure...

8.5CVSS6.6AI score0.02447EPSS
SaveExploits1References30Affected Software3
OSV
OSV
•added 2019/12/12 8:15 p.m.•7 views

DEBIAN-CVE-2019-19770

In the Linux kernel 4.19.83, there is a use-after-free read in the debugfsremove function in fs/debugfs/inode.c which is used to remove a file or directory in debugfs that was previously created with a call to another debugfs function such as debugfscreatefile. NOTE: Linux kernel developers dispu...

8.2CVSS6.4AI score0.02447EPSS
SaveExploits1References1
NVD
NVD
•added 2019/12/12 8:15 p.m.•34 views

CVE-2019-19770

In the Linux kernel 4.19.83, there is a use-after-free read in the debugfsremove function in fs/debugfs/inode.c which is used to remove a file or directory in debugfs that was previously created with a call to another debugfs function such as debugfscreatefile. NOTE: Linux kernel developers dispu...

8.2CVSS7.7AI score0.02447EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
•added 2019/12/12 8:15 p.m.•56 views

CVE-2019-19770

In the Linux kernel 4.19.83, there is a use-after-free read in the debugfsremove function in fs/debugfs/inode.c which is used to remove a file or directory in debugfs that was previously created with a call to another debugfs function such as debugfscreatefile. NOTE: Linux kernel developers dispu...

8.2CVSS6.7AI score0.02447EPSS
SaveExploits1References6
OSV
OSV
•added 2019/12/12 8:15 p.m.•8 views

UBUNTU-CVE-2019-19770

In the Linux kernel 4.19.83, there is a use-after-free read in the debugfsremove function in fs/debugfs/inode.c which is used to remove a file or directory in debugfs that was previously created with a call to another debugfs function such as debugfscreatefile. NOTE: Linux kernel developers dispu...

8.2CVSS6.6AI score0.02447EPSS
SaveExploits1References7
Cvelist
Cvelist
•added 2019/12/12 7:39 p.m.•27 views

CVE-2019-19770

In the Linux kernel 4.19.83, there is a use-after-free read in the debugfsremove function in fs/debugfs/inode.c which is used to remove a file or directory in debugfs that was previously created with a call to another debugfs function such as debugfscreatefile. NOTE: Linux kernel developers dispu...

7.7AI score0.02447EPSS
SaveExploits1References5
Debian CVE
Debian CVE
•added 2019/12/12 7:39 p.m.•57 views

CVE-2019-19770

In the Linux kernel 4.19.83, there is a use-after-free read in the debugfsremove function in fs/debugfs/inode.c which is used to remove a file or directory in debugfs that was previously created with a call to another debugfs function such as debugfscreatefile. NOTE: Linux kernel developers dispu...

8.2CVSS6.5AI score0.02447EPSS
SaveExploits1
CVE
CVE
•added 2019/12/12 7:39 p.m.•466 views

CVE-2019-19770

CVE-2019-19770 affects the Linux kernel 4.19.83 and is described as a use-after-free (read) in the debugfs_remove function (fs/debugfs/inode.c), which handles removal of files/dirs created via debugfs. Note: kernel developers dispute this as a debugfs issue, characterizing it as misuse of debugfs...

8.2CVSS7.2AI score0.02447EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/12 12:00 a.m.•2 views

CVE-2019-19770: Use After Free

In the Linux kernel 4.19.83, there is a use-after-free read in the debugfsremove function in fs/debugfs/inode.c which is used to remove a file or directory in debugfs that was previously created with a call to another debugfs function such as debugfscreatefile. NOTE: Linux kernel developers dispu...

8.2CVSS6.3AI score0.02447EPSS
SaveExploits1References2
OSV
OSV
•added 2019/09/06 10:15 p.m.•13 views

DEBIAN-CVE-2019-9444

In the Android kernel in sync debug fs driver there is a kernel pointer leak due to the usage of printf with %p. This could lead to local information disclosure with system execution privileges needed. User interaction is not needed for exploitation...

4.4CVSS6.2AI score0.00196EPSS
SaveExploits0References1
Oracle linux
Oracle linux
•added 2019/08/04 12:00 a.m.•188 views

kernel security update

kernel - 2.6.18-419.0.0.0.14 - x86/speculation/mds: Conditionally clear CPU buffers on idle entry Thomas Gleixner orabug 29821515 CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091 - x86/speculation/mds: Call VERW on NMI path when returning to user Patrick Colp orabug 29821515...

10CVSS6.9AI score0.93838EPSS
SaveExploits31
Tenable Nessus
Tenable Nessus
•added 2019/05/15 12:00 a.m.•59 views

OracleVM 3.4 : Unbreakable / etc (OVMSA-2019-0018) (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)

The remote OracleVM system is missing necessary patches to address critical security updates : - x86/mds: Add empty commit for CVE-2019-11091 Konrad Rzeszutek Wilk Orabug: 29721935 CVE-2019-11091 - x86/microcode: Add loader version file in debugfs Boris Ostrovsky Orabug: 29754165 - x86/microcode:...

5.9CVSS6.6AI score0.01566EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2019/05/06 12:00 a.m.•68 views

Debian DLA-1771-1 : linux-4.9 security update

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. CVE-2018-14625 A use-after-free bug was found in the vhost driver for the Virtual Socket protocol. If this driver is used to communicate with a malicio...

8.1CVSS6.2AI score0.16523EPSS
SaveExploits15References17
Rows per page
Query Builder