Lucene search
K

37 matches found

SUSE CVE
SUSE CVE
added 2026/05/22 2:19 a.m.6 views

SUSE CVE-2026-45232

Rsync versions before 3.4.3 contain an off-by-one out-of-bounds stack write vulnerability in the establishproxyconnection function in socket.c that allows network attackers to corrupt stack memory by sending a malformed HTTP proxy response. Attackers can exploit this by positioning themselves...

4.2CVSS5.8AI score0.0035EPSS
Exploits0References10
Snyk
Snyk
added 2026/05/20 3:42 a.m.6 views

Off-by-one Error

Overview Affected versions of this package are vulnerable to Off-by-one Error via the establishproxyconnection function. An attacker can corrupt stack memory by sending a specially crafted HTTP proxy response line of 1023 or more bytes without a newline terminator, potentially leading to...

5.9CVSS5.8AI score0.0035EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/05/20 12:45 a.m.3 views

CVE-2026-45232

Rsync versions before 3.4.3 contain an off-by-one out-of-bounds stack write vulnerability in the establishproxyconnection function in socket.c that allows network attackers to corrupt stack memory by sending a malformed HTTP proxy response. Attackers can exploit this by positioning themselves...

3.1CVSS5.8AI score0.0035EPSS
Exploits0References4
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.5 views

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: A potential null-ptr-deref occurred in passestablish. If getepfromtid fails to find a non-NULL value for ep, ep will be dereferenced later, regardless of whether it is empty. This patch adds a simple sanity check to f...

5.5CVSS5.8AI score0.00191EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/03/02 12:0 a.m.2 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005574)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005574 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Added NULL check for lookupatid The lookupatid function can return NULL if the ATID i...

5.5CVSS6.7AI score0.00231EPSS
Exploits0References3
Snyk
Snyk
added 2026/02/06 2:47 a.m.3 views

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference via the establishPfcpSession function. An attacker can cause a denial of service by sending specially crafted requests that trigger a null pointer dereference in the SMF component. Remediation Upgrade...

7.5CVSS6.1AI score0.00526EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2025/10/07 12:0 a.m.7 views

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-391512)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-391512 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Added NULL check for lookupatid The lookupatid function can return NULL if the ATID i...

5.5CVSS6.3AI score0.00231EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/09/20 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2023-53335

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/cxgb4: Fix potential null-ptr-deref in passestablish If getepfromtid fails to lookup non-NULL value for ep, ep is dereferenced later regardless of whether ...

5.5CVSS6.7AI score0.00191EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2025/09/17 11:28 p.m.3 views

SUSE CVE-2023-53335

In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Fix potential null-ptr-deref in passestablish If getepfromtid fails to lookup non-NULL value for ep, ep is dereferenced later regardless of whether it is empty. This patch adds a simple sanity check to fix the issue...

5.5CVSS6.4AI score0.00191EPSS
Exploits0References8
RedhatCVE
RedhatCVE
added 2025/09/17 5:49 p.m.2 views

CVE-2023-53335

In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Fix potential null-ptr-deref in passestablish If getepfromtid fails to lookup non-NULL value for ep, ep is dereferenced later regardless of whether it is empty. This patch adds a simple sanity check to fix the issue...

5.5CVSS5.8AI score0.00191EPSS
Exploits0References4
NVD
NVD
added 2025/09/17 3:15 p.m.4 views

CVE-2023-53335

In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Fix potential null-ptr-deref in passestablish If getepfromtid fails to lookup non-NULL value for ep, ep is dereferenced later regardless of whether it is empty. This patch adds a simple sanity check to fix the issue...

5.5CVSS0.00191EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/09/17 2:56 p.m.6 views

CVE-2023-53335 RDMA/cxgb4: Fix potential null-ptr-deref in pass_establish()

In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Fix potential null-ptr-deref in passestablish If getepfromtid fails to lookup non-NULL value for ep, ep is dereferenced later regardless of whether it is empty. This patch adds a simple sanity check to fix the issue...

0.00191EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/09/17 12:0 a.m.3 views

PT-2025-38185

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw in the RDMA/cxgb4 component where a null pointer dereference could occur in the pass establish function. This happens if get ep from tid fails to locat...

6.1AI score0.00191EPSS
Exploits0References10
Vulnrichment
Vulnrichment
added 2025/08/22 8:16 p.m.4 views

CVE-2025-26498

Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux establish-connection-no-undo modules allows Absolute Path Traversal.This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19...

7.2AI score0.00254EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/08/22 8:16 p.m.6 views

CVE-2025-26498

Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux establish-connection-no-undo modules allows Absolute Path Traversal.This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19...

0.00254EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2025/06/19 12:0 a.m.2 views

Vulnerability of the __vmbus_establish_gpadl() function in the drivers/hv/channel.c module – Microsoft Hyper-V guest mode support driver for Linux operating systems. This driver allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the vmbusestablishgpadl function in the drivers/hv/channel.c module – The Microsoft Hyper-V guest mode support driver for Linux operating systems is vulnerable because it exposes confidential system information due to uncleaned debugging information. Exploitation of this...

8.1CVSS6.4AI score0.00915EPSS
Exploits0References19Affected Software5
RedhatCVE
RedhatCVE
added 2025/05/23 9:3 a.m.2 views

CVE-2024-7287

A vulnerability was found in SourceCodester Establishment Billing Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /manageuser.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The...

8.8CVSS8.1AI score0.00532EPSS
Exploits1References1
AstraLinux
AstraLinux
added 2025/02/11 7:35 a.m.2 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Added a NULL check for the lookupatid function. The lookupatid function may return NULL if the ATID is invalid or does not exist in the identifier table. This could lead to dereferencing a null pointer without any...

5.5CVSS5.8AI score0.00231EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2024/11/21 4:6 a.m.2 views

SUSE CVE-2024-24425

Magma v1.8.0 and OAI EPC Federation v1.20 were discovered to contain an out-of-bounds read in the amfasestablishreq function at /tasks/amf/amfas.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted NAS packet...

6.5CVSS7.1AI score0.00446EPSS
Exploits0References3
OSV
OSV
added 2024/11/15 7:15 p.m.2 views

CVE-2024-24425

Magma v1.8.0 and OAI EPC Federation v1.20 were discovered to contain an out-of-bounds read in the amfasestablishreq function at /tasks/amf/amfas.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted NAS packet...

6.5CVSS7.3AI score0.00446EPSS
Exploits0References3
Rows per page
Query Builder