Lucene search
+L

73 matches found

OSV
OSV
added 2018/01/14 6:29 a.m.4 views

UBUNTU-CVE-2017-15126

A use-after-free flaw was found in fs/userfaultfd.c in the Linux kernel before 4.13.6. The issue is related to the handling of fork failure when dealing with event messages. Failure to fork correctly can lead to a situation where a fork event will be removed from an already freed list of events...

8.1CVSS7AI score0.04075EPSS
SaveExploits0References3
OSV
OSV
added 2018/01/14 6:29 a.m.12 views

CVE-2017-15126

A use-after-free flaw was found in fs/userfaultfd.c in the Linux kernel before 4.13.6. The issue is related to the handling of fork failure when dealing with event messages. Failure to fork correctly can lead to a situation where a fork event will be removed from an already freed list of events...

8.1CVSS8.9AI score0.04075EPSS
SaveExploits0References8
OSV
OSV
added 2018/01/14 6:29 a.m.5 views

DEBIAN-CVE-2017-15126

A use-after-free flaw was found in fs/userfaultfd.c in the Linux kernel before 4.13.6. The issue is related to the handling of fork failure when dealing with event messages. Failure to fork correctly can lead to a situation where a fork event will be removed from an already freed list of events...

8.1CVSS7.7AI score0.04075EPSS
SaveExploits0References1
CVE
CVE
added 2018/01/14 6:0 a.m.153 views

CVE-2017-15126

CVE-2017-15126 affects the Linux kernels fs/userfaultfd.c, where an improper fork handling during event processing can cause a fork event to be removed from an already freed list, i.e., a use-after-free condition. Affected are kernels before 4.13.6 (fixed in 4.13.6), with the issue having high im...

9.3CVSS8.1AI score0.04075EPSS
SaveExploits0References8Affected Software1
Cvelist
Cvelist
added 2018/01/14 6:0 a.m.26 views

CVE-2017-15126

A use-after-free flaw was found in fs/userfaultfd.c in the Linux kernel before 4.13.6. The issue is related to the handling of fork failure when dealing with event messages. Failure to fork correctly can lead to a situation where a fork event will be removed from an already freed list of events...

8.2AI score0.04075EPSS
SaveExploits0References8
RedhatCVE
RedhatCVE
added 2017/12/15 1:49 p.m.29 views

CVE-2017-15126

A flaw was found in the Linux kernel's handling of fork failure when dealing with event messages in the userfaultfd code. Failure to fork correctly can create a fork event that will be removed from an already freed list of events...

9.3CVSS1.5AI score0.04075EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2017/10/03 12:0 a.m.7 views

PT-2017-3586 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.13.6 Description: A use-after-free flaw was found in fs/userfaultfd.c in the Linux kernel. The issue is related to the handling of fork failure when dealing with event messages. Failure to fork correctly can...

10CVSS7.4AI score0.84172EPSS
SaveExploits41References117
UbuntuCve
UbuntuCve
added 2008/03/04 11:44 p.m.32 views

CVE-2008-1111

modcgi in lighttpd 1.4.18 sends the source code of CGI scripts instead of a 500 error when a fork failure occurs, which might allow remote attackers to obtain sensitive information...

5CVSS7.2AI score0.02017EPSS
SaveExploits1References1
NVD
NVD
added 2008/03/04 11:44 p.m.22 views

CVE-2008-1111

modcgi in lighttpd 1.4.18 sends the source code of CGI scripts instead of a 500 error when a fork failure occurs, which might allow remote attackers to obtain sensitive information...

5CVSS6.4AI score0.02017EPSS
SaveExploits1References19
OSV
OSV
added 2008/03/04 11:44 p.m.5 views

DEBIAN-CVE-2008-1111

modcgi in lighttpd 1.4.18 sends the source code of CGI scripts instead of a 500 error when a fork failure occurs, which might allow remote attackers to obtain sensitive information...

5CVSS7.1AI score0.02017EPSS
SaveExploits1References1
CVE
CVE
added 2008/03/04 11:0 p.m.98 views

CVE-2008-1111

CVE-2008-1111 affects lighttpd 1.4.18 through the mod_cgi path. When a fork failure occurs, lighttpd may return the source code of the CGI script instead of a 500 error, potentially allowing remote attackers to obtain sensitive information (information disclosure). Connected documents indicate re...

5CVSS6.2AI score0.02017EPSS
SaveExploits1References19Affected Software1
Cvelist
Cvelist
added 2008/03/04 11:0 p.m.35 views

CVE-2008-1111

modcgi in lighttpd 1.4.18 sends the source code of CGI scripts instead of a 500 error when a fork failure occurs, which might allow remote attackers to obtain sensitive information...

6.2AI score0.02017EPSS
SaveExploits1References19
Debian CVE
Debian CVE
added 2008/03/04 11:0 p.m.37 views

CVE-2008-1111

modcgi in lighttpd 1.4.18 sends the source code of CGI scripts instead of a 500 error when a fork failure occurs, which might allow remote attackers to obtain sensitive information...

5CVSS6.3AI score0.02017EPSS
SaveExploits1
Rows per page
Query Builder