Lucene search
+L

1615 matches found

OSV
OSV
added 2022/04/05 1:15 p.m.8 views

ALPINE-CVE-2022-26356

Racy interactions between dirty vram tracking and paging log dirty hypercalls Activation of log dirty mode done by XENDMOPtrackdirtyvram was named HVMOPtrackdirtyvram before Xen 4.9 is racy with ongoing log dirty hypercalls. A suitably timed call to XENDMOPtrackdirtyvram can enable log dirty whil...

5.6CVSS6.6AI score0.00241EPSS
SaveExploits0References1
OSV
OSV
added 2022/04/05 1:15 p.m.34 views

CVE-2022-26356

Racy interactions between dirty vram tracking and paging log dirty hypercalls Activation of log dirty mode done by XENDMOPtrackdirtyvram was named HVMOPtrackdirtyvram before Xen 4.9 is racy with ongoing log dirty hypercalls. A suitably timed call to XENDMOPtrackdirtyvram can enable log dirty whil...

5.6CVSS6.7AI score
SaveExploits0References7
NVD
NVD
added 2022/04/05 1:15 p.m.21 views

CVE-2022-26356

Racy interactions between dirty vram tracking and paging log dirty hypercalls Activation of log dirty mode done by XENDMOPtrackdirtyvram was named HVMOPtrackdirtyvram before Xen 4.9 is racy with ongoing log dirty hypercalls. A suitably timed call to XENDMOPtrackdirtyvram can enable log dirty whil...

5.6CVSS0.00241EPSS
SaveExploits0References7
Prion
Prion
added 2022/04/05 1:15 p.m.26 views

Memory corruption

Racy interactions between dirty vram tracking and paging log dirty hypercalls Activation of log dirty mode done by XENDMOPtrackdirtyvram was named HVMOPtrackdirtyvram before Xen 4.9 is racy with ongoing log dirty hypercalls. A suitably timed call to XENDMOPtrackdirtyvram can enable log dirty whil...

4CVSS5.8AI score0.00241EPSS
SaveExploits0References7Affected Software3
AlpineLinux
AlpineLinux
added 2022/04/05 1:15 p.m.137 views

CVE-2022-26356

Racy interactions between dirty vram tracking and paging log dirty hypercalls Activation of log dirty mode done by XENDMOPtrackdirtyvram was named HVMOPtrackdirtyvram before Xen 4.9 is racy with ongoing log dirty hypercalls. A suitably timed call to XENDMOPtrackdirtyvram can enable log dirty whil...

5.6CVSS1.6AI score0.00241EPSS
SaveExploits0
OSV
OSV
added 2022/04/05 1:15 p.m.12 views

UBUNTU-CVE-2022-26356

Racy interactions between dirty vram tracking and paging log dirty hypercalls Activation of log dirty mode done by XENDMOPtrackdirtyvram was named HVMOPtrackdirtyvram before Xen 4.9 is racy with ongoing log dirty hypercalls. A suitably timed call to XENDMOPtrackdirtyvram can enable log dirty whil...

5.6CVSS6.7AI score0.00241EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2022/04/05 1:15 p.m.36 views

CVE-2022-26356

Racy interactions between dirty vram tracking and paging log dirty hypercalls Activation of log dirty mode done by XENDMOPtrackdirtyvram was named HVMOPtrackdirtyvram before Xen 4.9 is racy with ongoing log dirty hypercalls. A suitably timed call to XENDMOPtrackdirtyvram can enable log dirty whil...

5.6CVSS6.8AI score0.00241EPSS
SaveExploits0References5
Xen Project
Xen Project
added 2022/04/05 12:00 p.m.61 views

Racy interactions between dirty vram tracking and paging log dirty hypercalls

ISSUE DESCRIPTION Activation of log dirty mode done by XENDMOPtrackdirtyvram was named HVMOPtrackdirtyvram before Xen 4.9 is racy with ongoing log dirty hypercalls. A suitably timed call to XENDMOPtrackdirtyvram can enable log dirty while another CPU is still in the process of tearing down the...

5.6CVSS0.5AI score0.00241EPSS
SaveExploits0Affected Software1
CVE
CVE
added 2022/04/05 12:00 a.m.148 views

CVE-2022-26356

CVE-2022-26356 describes a race in Xen between log-dirty tracking and log-dirty hypercalls. Activation of log-dirty via XEN_DMOP_track_dirty_vram can race with tearing down structures from a prior log-dirty mode, causing entries to be written into freed slots and resulting in a memory leak. Vulne...

5.6CVSS6AI score0.00241EPSS
SaveExploits0References7Affected Software1
Cvelist
Cvelist
added 2022/04/05 12:00 a.m.39 views

CVE-2022-26356

Racy interactions between dirty vram tracking and paging log dirty hypercalls Activation of log dirty mode done by XENDMOPtrackdirtyvram was named HVMOPtrackdirtyvram before Xen 4.9 is racy with ongoing log dirty hypercalls. A suitably timed call to XENDMOPtrackdirtyvram can enable log dirty whil...

6.5AI score0.00241EPSS
SaveExploits0References7
Debian CVE
Debian CVE
added 2022/04/05 12:00 a.m.80 views

CVE-2022-26356

Racy interactions between dirty vram tracking and paging log dirty hypercalls Activation of log dirty mode done by XENDMOPtrackdirtyvram was named HVMOPtrackdirtyvram before Xen 4.9 is racy with ongoing log dirty hypercalls. A suitably timed call to XENDMOPtrackdirtyvram can enable log dirty whil...

5.6CVSS1.6AI score0.00241EPSS
SaveExploits0
OSV
OSV
added 2022/04/04 9:40 p.m.101 views

GHSA-7VRM-3JC8-5WWM Incorrect Comparison in Vyper

Impact bytestrings can have dirty bytes in them, resulting in the word-for-word comparison to give incorrect results, e.g. vyper b1: Bytes32 = b"abcdef" b1 = sliceb1, 0, 1 b2: Bytes32 = b"abcdef" t: bool = b1 == b2 incorrectly evaluates to True even without dirty nonzero bytes, because there is n...

7.5CVSS5.9AI score0.0101EPSS
SaveExploits0References4
PyPA
PyPA
added 2022/04/04 6:15 p.m.12 views

PYSEC-2022-196

Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine. In version 0.3.1 and prior, bytestrings can have dirty bytes in them, resulting in the word-for-word comparisons giving incorrect results. Even without dirty nonzero bytes, two bytestrings can compare to equal if one en...

7.5CVSS6.8AI score0.0101EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2022/04/04 6:15 p.m.25 views

Design/Logic Flaw

Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine. In version 0.3.1 and prior, bytestrings can have dirty bytes in them, resulting in the word-for-word comparisons giving incorrect results. Even without dirty nonzero bytes, two bytestrings can compare to equal if one en...

5CVSS7.5AI score0.0101EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/04/04 5:35 p.m.73 views

CVE-2022-24787 Incorrect Comparison in Vyper

Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine. In version 0.3.1 and prior, bytestrings can have dirty bytes in them, resulting in the word-for-word comparisons giving incorrect results. Even without dirty nonzero bytes, two bytestrings can compare to equal if one en...

7.5CVSS7.7AI score0.0101EPSS
SaveExploits0References2
OSV
OSV
added 2022/04/04 5:35 p.m.41 views

CVE-2022-24787 Incorrect Comparison in Vyper

Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine. In version 0.3.1 and prior, bytestrings can have dirty bytes in them, resulting in the word-for-word comparisons giving incorrect results. Even without dirty nonzero bytes, two bytestrings can compare to equal if one en...

7.5CVSS7.4AI score
SaveExploits0References4
CNNVD
CNNVD
added 2022/04/04 12:00 a.m.12 views

Vyper 安全漏洞

Vyper is the Pythonic smart contract language for EVM. Vyper suffers from a security vulnerability that stems from the possibility of dirty bytes in the byte test ring in version 0.3.1 and earlier, causing word-by-word comparisons to give incorrect results. Even in the absence of dirty non-zero...

7.5CVSS7.2AI score0.0101EPSS
SaveExploits0References3
GithubExploit
GithubExploit
added 2022/04/02 1:49 p.m.590 views

Exploit for Improper Initialization in Linux Linux_Kernel

About: Title: DirtyPipe Description: Exploit for a new Li...

7.8CVSS7.5AI score0.89721EPSS
SaveExploits101
GithubExploit
GithubExploit
added 2022/03/24 5:21 a.m.127 views

Exploit for Improper Input Validation in Google Android

DirtyPipe for Android Dirty Pipe CVE-2022-0847 temporary roo...

7.8CVSS7.4AI score0.89721EPSS
SaveExploits106
GithubExploit
GithubExploit
added 2022/03/22 3:17 a.m.382 views

Exploit for Improper Initialization in Linux Linux_Kernel

CVE-2022-0847 PoC Usage dirty-pipe CVE-20...

7.8CVSS7.3AI score0.89721EPSS
SaveExploits101
Rows per page
Query Builder