Lucene search
+L

795 matches found

osv_alpine
osv_alpine
•added 2021/10/06 2:15 p.m.•23 views

ALPINE-CVE-2021-28702

PCI devices with RMRRs not deassigned correctly Certain PCI devices in a system might be assigned Reserved Memory Regions specified via Reserved Memory Region Reporting, "RMRR". These are typically used for platform tasks such as legacy USB emulation. If such a device is passed through to a guest...

7.6CVSS7AI score0.00441EPSS
SaveExploits0References1
NVD
NVD
•added 2021/10/06 2:15 p.m.•27 views

CVE-2021-28702

PCI devices with RMRRs not deassigned correctly Certain PCI devices in a system might be assigned Reserved Memory Regions specified via Reserved Memory Region Reporting, "RMRR". These are typically used for platform tasks such as legacy USB emulation. If such a device is passed through to a guest...

7.6CVSS0.00441EPSS
SaveExploits0References7
osv_ubuntu
osv_ubuntu
•added 2021/10/06 2:15 p.m.•20 views

UBUNTU-CVE-2021-28702

PCI devices with RMRRs not deassigned correctly Certain PCI devices in a system might be assigned Reserved Memory Regions specified via Reserved Memory Region Reporting, "RMRR". These are typically used for platform tasks such as legacy USB emulation. If such a device is passed through to a guest...

7.6CVSS5.8AI score0.00441EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2021/08/25 8:57 p.m.•47 views

Data races in appendix

The appendix crate implements a key-value mapping data structure called Index that is stored on disk. The crate allows for any type to inhabit the generic K and V type parameters and implements Send and Sync for them unconditionally. Using a type that is not marked as Send or Sync with Index can...

5.9CVSS5.8AI score0.00978EPSS
SaveExploits1References4Affected Software1
osv_ghsa
osv_ghsa
•added 2021/08/25 8:57 p.m.•97 views

GHSA-FVHR-7J8M-3CVC Data races in appendix

The appendix crate implements a key-value mapping data structure called Index that is stored on disk. The crate allows for any type to inhabit the generic K and V type parameters and implements Send and Sync for them unconditionally. Using a type that is not marked as Send or Sync with Index can...

5.9CVSS5.6AI score0.00978EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
•added 2021/07/13 10:15 p.m.•37 views

CVE-2020-19715

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-13110 Reason: This candidate is a duplicate of CVE-2019-13110. Notes: All CVE users should reference CVE-2019-13110 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

5.9AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2021/07/05 12:00 a.m.•18 views

PT-2024-11348 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The powerpc kernel is not prepared to handle exec faults from kernel. The function is exec fault returns 'false' when an exec fault is taken by kernel, because the check is based on...

9.8CVSS6.5AI score0.17563EPSS
SaveExploits8References975
Tenable Nessus
Tenable Nessus
•added 2021/06/15 12:00 a.m.•120 views

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2021-9306)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9306 advisory. - sctp: delay autoasconf init until binding the first addr Xin Long Orabug: 32907967 CVE-2021-23133 CVE-2021-23133 - dm ioctl: fix out of bounds...

8.1CVSS6.7AI score0.06642EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
•added 2021/06/04 12:00 a.m.•70 views

EulerOS Virtualization 2.9.0 : kernel (EulerOS-SA-2021-1971)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - There is a flaw reported in drivers/gpu/drm/nouveau/nouveausgdma.c in nouveausgdmacreatettm in Nouveau DRM subsystem. The issue...

8.8CVSS7.1AI score0.01316EPSS
SaveExploits1References17
CVE
CVE
•added 2021/05/28 8:36 p.m.•107 views

CVE-2020-18395

Consolidated details from NVD, Red Hat, CNVD, PRION, and CVE lists confirm CVE-2020-18395 affects Gama 2.04 . The vulnerability is a NULL-pointer dereference in GNU_gama::set() within ellipsoid.h, which can cause a denial of service via segmentation faults when processing crafted inputs. Public r...

7.5CVSS7.3AI score0.01277EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2021/05/28 12:00 a.m.•7 views

PT-2021-10168

Name of the Vulnerable Software and Affected Versions: Gama version 2.04 Description: A NULL-pointer deference issue was discovered in the GNU gama::set function in ellipsoid.h, which can lead to a denial of service DOS via segment faults caused by crafted inputs. Recommendations: For Gama versio...

7.5CVSS0.01277EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2021/05/14 8:15 p.m.•28 views

CVE-2021-29581

TensorFlow is an end-to-end open source platform for machine learning. Due to lack of validation in tf.rawops.CTCBeamSearchDecoder, an attacker can trigger denial of service via segmentation faults. The...

5.5CVSS5.3AI score0.00189EPSS
SaveExploits1References2
Prion
Prion
•added 2021/05/14 8:15 p.m.•38 views

Null pointer dereference

TensorFlow is an end-to-end open source platform for machine learning. Due to lack of validation in tf.rawops.CTCBeamSearchDecoder, an attacker can trigger denial of service via segmentation faults. The...

2.1CVSS5.3AI score0.00189EPSS
SaveExploits1References2Affected Software1
osv_pysec
osv_pysec
•added 2021/05/14 8:15 p.m.•27 views

PYSEC-2021-509

TensorFlow is an end-to-end open source platform for machine learning. Due to lack of validation in tf.rawops.CTCBeamSearchDecoder, an attacker can trigger denial of service via segmentation faults. The...

5.5CVSS1.7AI score0.00189EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2021/05/14 7:15 p.m.•48 views

CVE-2021-29581 Segfault in `CTCBeamSearchDecoder`

TensorFlow is an end-to-end open source platform for machine learning. Due to lack of validation in tf.rawops.CTCBeamSearchDecoder, an attacker can trigger denial of service via segmentation faults. The...

2.5CVSS5.6AI score0.00189EPSS
SaveExploits1References2
CVE
CVE
•added 2021/05/14 7:15 p.m.•137 views

CVE-2021-29581

CVE-2021-29581 describes a denial-of-service vulnerability in TensorFlow’s tf.raw_ops.CTCBeamSearchDecoder, where lack of input validation on empty tensors allows a local attacker to trigger a segfault by reading from a null buffer. The issue affects TensorFlow versions in scope (2.x) and is addr...

5.5CVSS4.7AI score0.00189EPSS
SaveExploits1References2Affected Software1
OpenVAS
OpenVAS
•added 2021/04/19 12:00 a.m.•24 views

SUSE: Security Advisory (SUSE-SU-2019:1354-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS7.6AI score0.04148EPSS
SaveExploits1References5
CVE
CVE
•added 2021/04/17 4:20 a.m.•321 views

CVE-2021-3492

Shiftfs is affected in the Ubuntu Linux kernel; a fault in copy_from_user() handling can cause a double-free or leaked memory, enabling local denial of service (kernel memory exhaustion) or privilege escalation. The vulnerability is documented as CVE-2021-3492, with Ubuntu/security advisories (e....

8.8CVSS7.7AI score0.01535EPSS
SaveExploits1References6Affected Software1
Ubuntu
Ubuntu
•added 2021/04/15 10:22 p.m.•146 views

USN-4915-1: Linux kernel (OEM) vulnerabilities

It was discovered that the overlayfs implementation in the Linux kernel did not properly validate the application of file system capabilities with respect to user namespaces. A local attacker could use this to gain elevated privileges. CVE-2021-3493 Vincent Dehors discovered that the shiftfs file...

8.8CVSS7.6AI score0.49166EPSS
SaveExploits31
RedhatCVE
RedhatCVE
•added 2021/04/09 5:16 p.m.•62 views

CVE-2020-36310

A flaw was found in the Linux kernel. A nested page fault is created when an address does not have a memslot associated to it. The highest threat from this vulnerability is to system availability. This flaw can be triggered using a malformed Virtual Machine. When triggered this bug will lead to t...

2.1CVSS6.4AI score0.00329EPSS
SaveExploits0References4
Rows per page
Query Builder