Lucene search
+L

2060 matches found

Check Point Advisories
Check Point Advisories
•added 2018/04/15 12:00 a.m.•13 views

ISC DHCP Server OMAPI Disconnect Denial Of Service (CVE-2017-3144) - Ver2

A denial-of-service vulnerability exists in ISC DHCP. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

5CVSS4.3AI score0.72724EPSS
SaveExploits0
RedHat Linux
RedHat Linux
•added 2018/03/21 2:46 p.m.•13 views

mysql: prepared statement handle use-after-free after disconnect

A flaw was found in the way MySQL client library libmysqlclient handled prepared statements when server connection was lost. A malicious server or a man-in-the-middle attacker could possibly use this flaw to crash an application using libmysqlclient...

7.5CVSS7.1AI score0.04905EPSS
SaveExploits0References4
OSV
OSV
•added 2018/03/08 7:29 a.m.•11 views

CVE-2018-0221

A vulnerability in specific CLI commands for the Cisco Identity Services Engine ISE could allow an authenticated, local attacker to perform command injection to the underlying operating system or cause a hang or disconnect of the user session. The attacker needs valid administrator credentials fo...

6.7CVSS5.8AI score0.00817EPSS
SaveExploits0References3
NVD
NVD
•added 2018/03/08 7:29 a.m.•32 views

CVE-2018-0221

A vulnerability in specific CLI commands for the Cisco Identity Services Engine ISE could allow an authenticated, local attacker to perform command injection to the underlying operating system or cause a hang or disconnect of the user session. The attacker needs valid administrator credentials fo...

7.2CVSS6.8AI score0.00817EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2018/03/08 7:00 a.m.•40 views

CVE-2018-0221

A vulnerability in specific CLI commands for the Cisco Identity Services Engine ISE could allow an authenticated, local attacker to perform command injection to the underlying operating system or cause a hang or disconnect of the user session. The attacker needs valid administrator credentials fo...

7.3AI score0.00817EPSS
SaveExploits0References3
Mageia
Mageia
•added 2018/02/22 7:49 p.m.•43 views

Updated irssi packages fix security vulnerability

Null pointer dereference when an "empty" nick has been observed by Irssi CVE-2018-7050. Certain nick names could result in out of bounds access when printing theme strings CVE-2018-7051. When the number of windows exceed the available space, Irssi would crash due to Null pointer dereference...

9.8CVSS1.6AI score0.02447EPSS
SaveExploits0References2
OSV
OSV
•added 2018/02/15 8:29 p.m.•10 views

ALPINE-CVE-2018-7054

An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. There is a use-after-free when a server is disconnected during netsplits. NOTE: this issue exists because of an incomplete fix for CVE-2017-7191...

9.8CVSS7AI score0.02383EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2018/02/15 8:00 p.m.•51 views

CVE-2018-7054

An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. There is a use-after-free when a server is disconnected during netsplits. NOTE: this issue exists because of an incomplete fix for CVE-2017-7191...

9.8CVSS9.7AI score0.02383EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2018/02/15 8:00 p.m.•64 views

CVE-2018-7054

An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. There is a use-after-free when a server is disconnected during netsplits. NOTE: this issue exists because of an incomplete fix for CVE-2017-7191...

9.8CVSS9.7AI score0.02383EPSS
SaveExploits0
RedHat Linux
RedHat Linux
•added 2018/02/06 1:00 p.m.•12 views

mysql: prepared statement handle use-after-free after disconnect

A flaw was found in the way MySQL client library libmysqlclient handled prepared statements when server connection was lost. A malicious server or a man-in-the-middle attacker could possibly use this flaw to crash an application using libmysqlclient...

7.5CVSS7.1AI score0.04905EPSS
SaveExploits0References4
Mageia
Mageia
•added 2017/12/21 10:14 p.m.•133 views

Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 4.4.105 and fixes at least the following security issues: A security flaw was discovered in nl80211setrekeydata function in the Linux kernel since v3.1-rc1 through v4.13. This function does not check whether the required attributes are present in a netlink...

8.8CVSS0.9AI score0.02285EPSS
SaveExploits11References14
BDU FSTEC
BDU FSTEC
•added 2017/12/14 12:00 a.m.•18 views

The vulnerability of the `usbSerialConsoleDisconnect` function (drivers/usb/serial/console.c) in the Linux kernel allows a hacker to cause a service failure or exert other effects.

The vulnerability of the usbserialconsoledisconnect function in the Linux kernel’s drivers/usb/serial/console.c file relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure or other effects through a specially crafted USB...

6.8CVSS6.6AI score0.00393EPSS
SaveExploits0References26Affected Software1
CNVD
CNVD
•added 2017/12/06 12:00 a.m.•14 views

Linux kernel memory misreference vulnerability (CNVD-2018-00233)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A memory misreference vulnerability exists in the dccpdisconnect function in net/dccp/proto.c in 4.14.3 and earlier...

7.8CVSS7.5AI score0.01344EPSS
SaveExploits5References1
OSV
OSV
•added 2017/12/05 12:00 a.m.•10 views

UBUNTU-CVE-2017-8824

The dccpdisconnect function in net/dccp/proto.c in the Linux kernel through 4.14.3 allows local users to gain privileges or cause a denial of service use-after-free via an AFUNSPEC connect system call during the DCCPLISTEN state...

7.8CVSS6.7AI score0.01344EPSS
SaveExploits5References12
CNVD
CNVD
•added 2017/11/06 12:00 a.m.•28 views

Linux kernel local denial of service vulnerability (CNVD-2017-33088)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A local denial of service vulnerability exists in the 'usbserialconsoledisconnect' function in the drivers/usb/serial/console.c file in versions of Linux kernel prior to 4.13....

7.2CVSS6.3AI score0.00393EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2017/11/05 9:45 p.m.•36 views

KRACK Detector - Detect and prevent KRACK attacks in your network

KRACK Detector is a Python script to detect possible KRACK attacks against client devices on your network. The script is meant to be run on the Access Point rather than the client devices. It listens on the Wi-Fi interface and waits for duplicate message 3 of the 4-way handshake. It then...

7.2AI score
SaveExploits0References1
OSV
OSV
•added 2017/11/04 1:29 a.m.•5 views

DEBIAN-CVE-2017-16525

The usbserialconsoledisconnect function in drivers/usb/serial/console.c in the Linux kernel before 4.13.8 allows local users to cause a denial of service use-after-free and system crash or possibly have unspecified other impact via a crafted USB device, related to disconnection and failed setup...

6.6CVSS7.7AI score0.00393EPSS
SaveExploits0References1
OSV
OSV
•added 2017/11/03 12:00 a.m.•10 views

UBUNTU-CVE-2017-16525

The usbserialconsoledisconnect function in drivers/usb/serial/console.c in the Linux kernel before 4.13.8 allows local users to cause a denial of service use-after-free and system crash or possibly have unspecified other impact via a crafted USB device, related to disconnection and failed setup...

6.6CVSS6.7AI score0.00393EPSS
SaveExploits0References11
OSV
OSV
•added 2017/10/24 5:50 a.m.•16 views

MGASA-2017-0383 Updated kernel-linus packages fix security vulnerabilities

This kernel-linus update is based on upstream 4.9.56 and fixes at least the following security issues: A flaw was found in the way the Linux KVM module processed the trap flagTF bit in EFLAGS during emulation of the syscall instruction, which leads to a debug exceptionDB being raised in the guest...

7.8CVSS7.2AI score0.03763EPSS
SaveExploits8References8
Veracode
Veracode
•added 2017/10/10 10:21 a.m.•10 views

Denial Of Service (DoS)

ftpd is vulnerable to denial of service DoS attacks. A malicious user can terminate the application by disconnecting the client before the server can obtain the client's IP, causing an exception and crashing the application...

6.4AI score
SaveExploits0
Rows per page
Query Builder