Lucene search
+L

16339 matches found

OSV
OSV
•added 2023/03/31 4:15 p.m.•8 views

UBUNTU-CVE-2023-28464

hciconncleanup in net/bluetooth/hciconn.c in the Linux kernel through 6.2.9 has a use-after-free observed in hciconnhashflush because of calls to hcidevput and hciconnput. There is a double free that may lead to privilege escalation...

7.8CVSS6.6AI score0.00273EPSS
SaveExploits0References6
OSV
OSV
•added 2023/03/31 8:33 a.m.•5 views

SUSE-SU-2023:1708-1 Security update for the Linux Kernel (Live Patch 7 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-1504002441 fixes several issues. The following security issues were fixed: - CVE-2023-26545: Fixed double free in net/mpls/afmpls.c upon an allocation failure bsc1208700. - CVE-2023-1078: Fixed a heap out-of-bounds write in rdsrmzerocopycallback bsc1208838...

7.9CVSS7.6AI score0.03702EPSS
SaveExploits0References7
Veracode
Veracode
•added 2023/03/31 5:59 a.m.•36 views

Double Free

tensorflow is vulnerable to a Double Free attack. The vulnerability occurs when when the first and the fourth elements of the poolingratio function has parameters not equal to 1.0 in nnops.fractionalavgpoolv2 and nnops.fractionalmaxpoolv2 because pooling on batch and channel dimensions is not...

8CVSS7.5AI score0.0015EPSS
SaveExploits0References5Affected Software3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/31 12:00 a.m.•0 views

CVE-2023-28464: Double Free

hciconncleanup in net/bluetooth/hciconn.c in the Linux kernel through 6.2.9 has a use-after-free observed in hciconnhashflush because of calls to hcidevput and hciconnput. There is a double free that may lead to privilege escalation...

7.8CVSS6.2AI score0.00273EPSS
SaveExploits0References2
OSV
OSV
•added 2023/03/30 9:15 p.m.•5 views

DEBIAN-CVE-2022-4744

A double-free flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user registers the device when the registernetdevice function fails NETDEVREGISTER notifier. This flaw allows a local user to crash or potentially escalate their privileges on the system...

7.8CVSS6.3AI score0.00459EPSS
SaveExploits0References1
NVD
NVD
•added 2023/03/30 9:15 p.m.•29 views

CVE-2022-4744

A double-free flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user registers the device when the registernetdevice function fails NETDEVREGISTER notifier. This flaw allows a local user to crash or potentially escalate their privileges on the system...

7.8CVSS7.4AI score0.00459EPSS
SaveExploits0References4
OSV
OSV
•added 2023/03/30 9:15 p.m.•12 views

CVE-2022-4744

A double-free flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user registers the device when the registernetdevice function fails NETDEVREGISTER notifier. This flaw allows a local user to crash or potentially escalate their privileges on the system...

7.8CVSS7.5AI score
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2023/03/30 9:15 p.m.•42 views

CVE-2022-4744

A double-free flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user registers the device when the registernetdevice function fails NETDEVREGISTER notifier. This flaw allows a local user to crash or potentially escalate their privileges on the system...

7.8CVSS6.7AI score0.00459EPSS
SaveExploits0References2
OSV
OSV
•added 2023/03/30 9:15 p.m.•12 views

UBUNTU-CVE-2022-4744

A double-free flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user registers the device when the registernetdevice function fails NETDEVREGISTER notifier. This flaw allows a local user to crash or potentially escalate their privileges on the system...

7.8CVSS6.7AI score0.00459EPSS
SaveExploits0References3
Prion
Prion
•added 2023/03/30 9:15 p.m.•31 views

Double free

A double-free flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user registers the device when the registernetdevice function fails NETDEVREGISTER notifier. This flaw allows a local user to crash or potentially escalate their privileges on the system...

4.3CVSS7.2AI score0.00459EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2023/03/30 8:15 p.m.•15 views

AZL-38114 CVE-2023-27537 affecting package tensorflow for versions less than 2.16.1-1

A double free vulnerability exists in libcurl 8.0.0 when sharing HSTS data between separate "handles". This sharing was introduced without considerations for do this sharing across separate threads but there was no indication of this fact in the documentation. Due to missing mutexes or thread...

5.9CVSS6.7AI score0.01856EPSS
SaveExploits1References1
NVD
NVD
•added 2023/03/30 8:15 p.m.•25 views

CVE-2023-27537

A double free vulnerability exists in libcurl 8.0.0 when sharing HSTS data between separate "handles". This sharing was introduced without considerations for do this sharing across separate threads but there was no indication of this fact in the documentation. Due to missing mutexes or thread...

5.9CVSS7.3AI score0.01856EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2023/03/30 8:15 p.m.•8 views

CVE-2023-27537

A double free vulnerability exists in libcurl 8.0.0 when sharing HSTS data between separate "handles". This sharing was introduced without considerations for do this sharing across separate threads but there was no indication of this fact in the documentation. Due to missing mutexes or thread...

5.9CVSS6.6AI score0.01856EPSS
SaveExploits1References4
OSV
OSV
•added 2023/03/30 8:15 p.m.•15 views

AZL-34603 CVE-2023-27537 affecting package cmake for versions less than 3.28.2-1

A double free vulnerability exists in libcurl 8.0.0 when sharing HSTS data between separate "handles". This sharing was introduced without considerations for do this sharing across separate threads but there was no indication of this fact in the documentation. Due to missing mutexes or thread...

5.9CVSS6.5AI score0.01856EPSS
SaveExploits1References1
OSV
OSV
•added 2023/03/30 8:15 p.m.•8 views

ALPINE-CVE-2023-27537

A double free vulnerability exists in libcurl 8.0.0 when sharing HSTS data between separate "handles". This sharing was introduced without considerations for do this sharing across separate threads but there was no indication of this fact in the documentation. Due to missing mutexes or thread...

5.9CVSS6.8AI score0.01856EPSS
SaveExploits1References1
OSV
OSV
•added 2023/03/30 8:15 p.m.•25 views

AZL-25852 CVE-2023-27537 affecting package mysql for versions less than 8.0.33-1

A double free vulnerability exists in libcurl 8.0.0 when sharing HSTS data between separate "handles". This sharing was introduced without considerations for do this sharing across separate threads but there was no indication of this fact in the documentation. Due to missing mutexes or thread...

5.9CVSS6.5AI score0.01856EPSS
SaveExploits1References1
Prion
Prion
•added 2023/03/30 8:15 p.m.•30 views

Double free

A double free vulnerability exists in libcurl 8.0.0 when sharing HSTS data between separate "handles". This sharing was introduced without considerations for do this sharing across separate threads but there was no indication of this fact in the documentation. Due to missing mutexes or thread...

2.6CVSS6.7AI score0.01856EPSS
SaveExploits1References3Affected Software2
OSV
OSV
•added 2023/03/30 12:00 a.m.•34 views

CVE-2023-27537

A double free vulnerability exists in libcurl 8.0.0 when sharing HSTS data between separate "handles". This sharing was introduced without considerations for do this sharing across separate threads but there was no indication of this fact in the documentation. Due to missing mutexes or thread...

5.9CVSS6.7AI score0.01856EPSS
SaveExploits1References5
Debian CVE
Debian CVE
•added 2023/03/30 12:00 a.m.•78 views

CVE-2023-27537

A double free vulnerability exists in libcurl 8.0.0 when sharing HSTS data between separate "handles". This sharing was introduced without considerations for do this sharing across separate threads but there was no indication of this fact in the documentation. Due to missing mutexes or thread...

5.9CVSS5.7AI score0.01856EPSS
SaveExploits1
Cvelist
Cvelist
•added 2023/03/30 12:00 a.m.•36 views

CVE-2022-4744

A double-free flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user registers the device when the registernetdevice function fails NETDEVREGISTER notifier. This flaw allows a local user to crash or potentially escalate their privileges on the system...

7.7AI score0.00459EPSS
SaveExploits0References4
Rows per page
Query Builder