Lucene search
+L

21 matches found

Tenable Nessus
Tenable Nessus
added 2026/05/08 12:0 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2026-33811

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash. CVE-2026-33811 Note that Nessus...

7.5CVSS7.2AI score0.00813EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2026/05/06 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-43249

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - 9p/xen: protect xen9pfsfrontfree against concurrent calls The xenwatch thread can race with other back- end change notifications and call xen9pfsfrontfree twice...

8.8CVSS6.7AI score0.00241EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/11/20 12:0 a.m.3 views

TencentOS Server 4: vim (TSSA-2024:0334)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0334 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

5.3CVSS5.7AI score0.00363EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/11/05 12:0 a.m.3 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989404)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989404 advisory. In the Linux kernel, the following vulnerability has been resolved: ath10k: skip ath10khalt during suspend for driver state RESTARTING Double free crash is observed...

7.8CVSS5.9AI score0.00266EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/21 12:31 p.m.9 views

EUVD-2022-54710

In the Linux kernel, the following vulnerability has been resolved: ath10k: skip ath10khalt during suspend for driver state RESTARTING Double free crash is observed when FW recoverycaused by wmi timeout/crash is followed by immediate suspend event. The FW recovery is triggered by ath10kcorerestar...

7.8CVSS5.3AI score0.00266EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2018-1886

Malware in sbrugna...

8.8CVSS8.7AI score0.01471EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.16 views

Linux Distros Unpatched Vulnerability : CVE-2022-49519

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ath10k: skip ath10khalt during suspend for driver state RESTARTING Double free crash is observed when FW recoverycaused by wmi timeout/crash is followed by...

7.8CVSS6.2AI score0.00266EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2025/02/27 3:5 a.m.8 views

SUSE CVE-2022-49519

In the Linux kernel, the following vulnerability has been resolved: ath10k: skip ath10khalt during suspend for driver state RESTARTING Double free crash is observed when FW recoverycaused by wmi timeout/crash is followed by immediate suspend event. The FW recovery is triggered by ath10kcorerestar...

5.5CVSS6.2AI score0.00266EPSS
Exploits0References8
NVD
NVD
added 2025/02/26 7:1 a.m.23 views

CVE-2022-49519

In the Linux kernel, the following vulnerability has been resolved: ath10k: skip ath10khalt during suspend for driver state RESTARTING Double free crash is observed when FW recoverycaused by wmi timeout/crash is followed by immediate suspend event. The FW recovery is triggered by ath10kcorerestar...

7.8CVSS0.00266EPSS
Exploits0References5
OSV
OSV
added 2025/02/26 7:1 a.m.8 views

DEBIAN-CVE-2022-49519

In the Linux kernel, the following vulnerability has been resolved: ath10k: skip ath10khalt during suspend for driver state RESTARTING Double free crash is observed when FW recoverycaused by wmi timeout/crash is followed by immediate suspend event. The FW recovery is triggered by ath10kcorerestar...

7.8CVSS5.3AI score0.00266EPSS
Exploits0References1
CVE
CVE
added 2025/02/26 2:13 a.m.159 views

CVE-2022-49519

The CVE-2022-49519 issue concerns the Linux kernel wireless driver ath10k. A double invocation of ath10k_halt during a suspend sequence could occur when FW recovery triggered by ath10k_core_restart() interleaves with suspend, freezing the restart worker and causing ath10k_htt_rx_free() to be free...

7.8CVSS5.3AI score0.00266EPSS
Exploits0References5Affected Software1
Debian CVE
Debian CVE
added 2025/02/26 2:13 a.m.11 views

CVE-2022-49519

In the Linux kernel, the following vulnerability has been resolved: ath10k: skip ath10khalt during suspend for driver state RESTARTING Double free crash is observed when FW recoverycaused by wmi timeout/crash is followed by immediate suspend event. The FW recovery is triggered by ath10kcorerestar...

7.8CVSS5.3AI score0.00266EPSS
Exploits0
OSV
OSV
added 2025/02/26 2:13 a.m.12 views

CVE-2022-49519 ath10k: skip ath10k_halt during suspend for driver state RESTARTING

In the Linux kernel, the following vulnerability has been resolved: ath10k: skip ath10khalt during suspend for driver state RESTARTING Double free crash is observed when FW recoverycaused by wmi timeout/crash is followed by immediate suspend event. The FW recovery is triggered by ath10kcorerestar...

7.8CVSS5.6AI score0.00266EPSS
Exploits0References8
OSV
OSV
added 2024/11/15 11:15 a.m.2 views

DEBIAN-CVE-2023-4679

A use after free vulnerability exists in GPAC version 2.3-DEV-revrelease, specifically in the gffilterpacketdel function in filtercore/filter.c at line 38. This vulnerability can lead to a double-free condition, which may cause the application to crash...

5.5CVSS5.8AI score0.00272EPSS
Exploits1References1
OSV
OSV
added 2024/11/08 3:7 p.m.5 views

OESA-2024-2343 mosquitto security update

Mosquitto is an open source message broker that implements the MQ Telemetry Transport protocol version 3.1 and 3.1.1 MQTT provides a lightweight method of carrying out messaging using a publish/subscribe model. This makes it suitable for "machine to machine" messaging such as with low power senso...

9.8CVSS6.8AI score0.579EPSS
Exploits2References3
OSV
OSV
added 2024/10/30 12:15 p.m.2 views

DEBIAN-CVE-2024-3935

In Eclipse Mosquito, versions from 2.0.0 through 2.0.18, if a Mosquitto broker is configured to create an outgoing bridge connection, and that bridge connection has an incoming topic configured that makes use of topic remapping, then if the remote connection sends a crafted PUBLISH packet to the...

6.5CVSS5.4AI score0.00761EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2023/09/23 12:0 a.m.7 views

PT-2023-36037 · Net Snmp · Net-Snmp

Name of the Vulnerable Software and Affected Versions: netsnmp affected versions not specified Description: The issue is related to a heap-double-free crash. Technical details include the crash type and state, which involve the snmp e2e fuzzer.c file and the netsnmp cleanup session function...

6.8AI score
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/07/16 12:0 a.m.6 views

PT-2023-35910 · Git +1 · Opensc

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-double-free crash. Technical details include the crash state, which involves the sc pkcs15 free object content and sc pkcs...

6.9AI score
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/03/27 12:0 a.m.4 views

PT-2023-35737 · Git +1 · Libdwarf

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-double-free crash. Technical details include the crash state, which involves functions such as dwarf read line table heade...

6.8AI score
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/02/09 12:0 a.m.5 views

PT-2023-32971 · Openssl · Openssl

Name of the Vulnerable Software and Affected Versions: OpenSSL versions prior to 1.1.0 Description: A double-free issue exists where a malicious PEM file with 0 bytes of payload data can cause a crash when parsed. This occurs because the file points to already freed memory, which when freed again...

7AI score
Exploits0References6
Rows per page
Query Builder