Lucene search
+L

2750 matches found

Veracode
Veracode
added 2025/02/10 10:37 a.m.15 views

Duplicate Operations On Resource

libcurl is vulnerable to Duplicate Operations on Resource. The vulnerability is due to improper handling of eventfd file descriptors due to closing the same descriptor twice after completing a threaded name resolution, which may lead to unexpected behavior or resource leaks...

9.8CVSS9.3AI score0.013EPSS
SaveExploits1References9Affected Software2
NVD
NVD
added 2025/02/05 10:15 a.m.26 views

CVE-2025-0665

libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having completed a threaded name resolve...

7CVSS0.013EPSS
SaveExploits1References6
OSV
OSV
added 2025/02/05 9:16 a.m.18 views

CVE-2025-0665 eventfd double close

libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having completed a threaded name resolve...

7CVSS7.1AI score0.013EPSS
SaveExploits1References8
CVE
CVE
added 2025/02/05 9:16 a.m.452 views

CVE-2025-0665

CVE-2025-0665 affects libcurl/curl. The issue is double-closing the same eventfd file descriptor when bringing down a connection channel after a threaded name resolve, leading to potential instability and misbehavior. Several sources note that this can allow a remote attacker to execute arbitrary...

7CVSS7AI score0.013EPSS
SaveExploits1References6Affected Software1
curl security advisories
curl security advisories
added 2025/02/05 8:00 a.m.18 views

eventfd double close

libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having completed a threaded name resolve...

7CVSS8AI score0.013EPSS
SaveExploits1References1Affected Software2
IBM Security Bulletins
IBM Security Bulletins
added 2025/02/03 10:53 p.m.64 views

Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from kerberos 5, libxml2, go-jose, runc

Summary IBM MQ Operator and Queue manager container images are vulnerable to kerberos 5, libxml2, go-jose, runc. This bulletin identifies the steps required to address these vulnerabilities Vulnerability Details CVEID:CVE-2024-26461 DESCRIPTION: Kerberos 5 is vulnerable to a denial of service,...

8.6CVSS7.6AI score0.18087EPSS
SaveExploits22Affected Software1
OSV
OSV
added 2025/02/01 12:00 a.m.32 views

ASB-A-359179312

In multiple functions of Parcel.cpp, there is a possible way to manipulate file descriptors and escalate privileges due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.6AI score
SaveExploits1References3
Microsoft CVE
Microsoft CVE
added 2025/01/29 8:00 a.m.8 views

bpf: Check validity of link->type in bpf_link_show_fdinfo()

...

7.1CVSS7.1AI score0.00232EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/01/23 12:00 a.m.8 views

PT-2025-5689 · Libcurl +2 · Libcurl +2

Name of the Vulnerable Software and Affected Versions: libcurl affected versions not specified Description: The issue arises when libcurl wrongly closes the same eventfd file descriptor twice after completing a threaded name resolve and taking down a connection channel. This problem occurs due to...

10CVSS5.7AI score0.013EPSS
SaveExploits3References59
NVD
NVD
added 2025/01/21 10:15 p.m.14 views

CVE-2024-24444

Improper file descriptor handling for closed connections in OpenAirInterface CN5G AMF oai-cn5g-amf up to v2.0.0 allows attackers to cause a Denial of Service DoS by repeatedly establishing SCTP connections with the N2 interface...

7.5CVSS0.00425EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/21 12:00 a.m.77 views

CVE-2024-24444

OpenAirInterface CN5G AMF (oai-cn5g-amf) up to v2.0.0 is affected by CVE-2024-24444 due to improper file descriptor handling for closed connections. An attacker can cause a Denial of Service by repeatedly establishing SCTP connections with the N2 interface. Impact: high availability risk; attack ...

7.5CVSS6.5AI score0.00425EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/21 12:00 a.m.8 views

OpenAirInterface CN5G AMF 安全漏洞

OpenAirInterface CN5G AMF is an OpenAirInterface open source application. A security vulnerability exists in OpenAirInterface CN5G AMF v2.0.0 and earlier versions, which stems from mishandling of file descriptors of closed connections, allowing an attacker to cause a denial of service DoS by...

7.5CVSS6.5AI score0.00425EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2025/01/16 3:49 a.m.8 views

SUSE CVE-2024-57844

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix fault on fd close after unbind If userspace holds an fd open, unbinds the device and then closes it, the driver shouldn't try to access the hardware. Protect it by using drmdeventer/drmdevexit. This fixes the followin...

5.5CVSS6.3AI score0.00186EPSS
SaveExploits0References3
NVD
NVD
added 2025/01/15 1:15 p.m.20 views

CVE-2024-57844

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix fault on fd close after unbind If userspace holds an fd open, unbinds the device and then closes it, the driver shouldn't try to access the hardware. Protect it by using drmdeventer/drmdevexit. This fixes the followin...

5.5CVSS0.00186EPSS
SaveExploits0References2
OSV
OSV
added 2025/01/15 1:15 p.m.2 views

DEBIAN-CVE-2024-57844

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix fault on fd close after unbind If userspace holds an fd open, unbinds the device and then closes it, the driver shouldn't try to access the hardware. Protect it by using drmdeventer/drmdevexit. This fixes the followin...

5.5CVSS5.7AI score0.00186EPSS
SaveExploits0References1
OSV
OSV
added 2025/01/15 1:15 p.m.9 views

UBUNTU-CVE-2024-57844

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix fault on fd close after unbind If userspace holds an fd open, unbinds the device and then closes it, the driver shouldn't try to access the hardware. Protect it by using drmdeventer/drmdevexit. This fixes the followin...

5.5CVSS6.2AI score0.00186EPSS
SaveExploits0References5
OSV
OSV
added 2025/01/15 1:10 p.m.5 views

CVE-2024-57844 drm/xe: Fix fault on fd close after unbind

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix fault on fd close after unbind If userspace holds an fd open, unbinds the device and then closes it, the driver shouldn't try to access the hardware. Protect it by using drmdeventer/drmdevexit. This fixes the followin...

5.6AI score
SaveExploits0References5
CNNVD
CNNVD
added 2025/01/15 12:00 a.m.27 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from fd being closed and then left unbound...

5.5CVSS5.9AI score0.00186EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.17 views

PT-2025-30809

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak was identified in the drm/msm subsystem of the Linux kernel, specifically within the error handling path for submitting operations. The put unused fd function fails to...

5.5CVSS6.4AI score0.0016EPSS
SaveExploits0
OSV
OSV
added 2024/12/29 9:15 a.m.11 views

AZL-54768 CVE-2024-56712 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: udmabuf: fix memory leak on last exportudmabuf error path In exportudmabuf, if dmabuffd fails because the FD table is full, a dmabuf owning the udmabuf has already been created; but the error handling in udmabufcreate will tear...

5.5CVSS6.7AI score0.00188EPSS
SaveExploits0References1
Rows per page
Query Builder