Lucene search
+L

6080 matches found

OSV
OSV
•added 2014/11/30 1:59 a.m.•8 views

DEBIAN-CVE-2014-7841

The sctpprocessparam function in net/sctp/smmakechunk.c in the SCTP implementation in the Linux kernel before 3.17.4, when ASCONF is used, allows remote attackers to cause a denial of service NULL pointer dereference and system crash via a malformed INIT chunk...

5CVSS5.7AI score0.0523EPSS
SaveExploits1References1
Prion
Prion
•added 2014/11/30 1:59 a.m.•31 views

Null pointer dereference

The sctpprocessparam function in net/sctp/smmakechunk.c in the SCTP implementation in the Linux kernel before 3.17.4, when ASCONF is used, allows remote attackers to cause a denial of service NULL pointer dereference and system crash via a malformed INIT chunk...

5CVSS6.8AI score0.0523EPSS
SaveExploits1References22Affected Software1
Cvelist
Cvelist
•added 2014/11/30 1:00 a.m.•34 views

CVE-2014-7841

The sctpprocessparam function in net/sctp/smmakechunk.c in the SCTP implementation in the Linux kernel before 3.17.4, when ASCONF is used, allows remote attackers to cause a denial of service NULL pointer dereference and system crash via a malformed INIT chunk...

6.2AI score0.0523EPSS
SaveExploits1References22
Debian CVE
Debian CVE
•added 2014/11/30 1:00 a.m.•75 views

CVE-2014-7841

The sctpprocessparam function in net/sctp/smmakechunk.c in the SCTP implementation in the Linux kernel before 3.17.4, when ASCONF is used, allows remote attackers to cause a denial of service NULL pointer dereference and system crash via a malformed INIT chunk...

5CVSS6.5AI score0.0523EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/11/30 12:00 a.m.•5 views

CVE-2014-7841: Undefined Security Weakness

The sctpprocessparam function in net/sctp/smmakechunk.c in the SCTP implementation in the Linux kernel before 3.17.4, when ASCONF is used, allows remote attackers to cause a denial of service NULL pointer dereference and system crash via a malformed INIT chunk...

5CVSS5.7AI score0.0523EPSS
SaveExploits1References2
Packet Storm
Packet Storm
•added 2014/11/29 12:00 a.m.•65 views

WordPress 4.0 Denial Of Service

$argv2, 'pwd' = strrepeat"A",1000000, 'redirectto' = $argv1 . "/wp-admin/", 'reauth' = 1, 'testcookie' = '1', 'wp-submit' = "Log%20In"; $cookieFiles = "cookie.txt"; curlsetoptarray$ch, array CURLOPTHEADER = 1, CURLOPTUSERAGENT = "Mozilla/5.0 Windows; U; Windows NT 5.1; en-US; rv:1.8.1.6...

5CVSS0.2AI score0.82702EPSS
SaveExploits8
UbuntuCve
UbuntuCve
•added 2014/11/29 12:00 a.m.•41 views

CVE-2014-7841

The sctpprocessparam function in net/sctp/smmakechunk.c in the SCTP implementation in the Linux kernel before 3.17.4, when ASCONF is used, allows remote attackers to cause a denial of service NULL pointer dereference and system crash via a malformed INIT chunk...

5CVSS6.8AI score0.0523EPSS
SaveExploits1References9
Tenable Nessus
Tenable Nessus
•added 2014/11/26 12:00 a.m.•75 views

OracleVM 2.1 : ntp (OVMSA-2009-0011)

The remote OracleVM system is missing necessary patches to address critical security updates : CVE-2009-0159 Stack-based buffer overflow in the cookedprint function in ntpq/ntpq.c in ntpq in NTP before 4.2.4p7-RC2 allows remote NTP servers to execute arbitrary code via a crafted response...

6.8CVSS7.9AI score0.21286EPSS
SaveExploits3References5
Positive Technologies
Positive Technologies
•added 2014/11/24 12:00 a.m.•25 views

PT-2014-1822 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.17.4 kernel-debuginfo-2.6.32 versions 2.6.32 kernel-debug-devel-2.6.32 versions 2.6.32 kernel-doc-2.6.32 versions 2.6.32 kernel-debuginfo-common-i686 versions 2.6.32 kernel-headers-2.6.32 versions 2.6.32...

10CVSS6.5AI score0.08579EPSS
SaveExploits82References762
RedHat Linux
RedHat Linux
•added 2014/11/18 6:29 p.m.•21 views

Kernel: net: SCTP: fix a NULL pointer dereference during INIT collisions

A NULL pointer dereference flaw was found in the way the Linux kernel's Stream Control Transmission Protocol SCTP implementation handled simultaneous connections between the same hosts. A remote attacker could use this flaw to crash the system...

7.1CVSS6.4AI score0.05794EPSS
SaveExploits0References4
NVD
NVD
•added 2014/11/16 11:59 a.m.•31 views

CVE-2013-0347

The Gentoo init script for webfs uses world-readable permissions for /var/log/webfsd.log, which allows local users to have unspecified impact by reading the file...

7.2CVSS6.6AI score0.00483EPSS
SaveExploits1References6
OSV
OSV
•added 2014/11/16 11:59 a.m.•15 views

CVE-2013-0347

The Gentoo init script for webfs uses world-readable permissions for /var/log/webfsd.log, which allows local users to have unspecified impact by reading the file...

6.5AI score
SaveExploits0References6
UbuntuCve
UbuntuCve
•added 2014/11/16 11:59 a.m.•52 views

CVE-2013-0347

The Gentoo init script for webfs uses world-readable permissions for /var/log/webfsd.log, which allows local users to have unspecified impact by reading the file...

7.2CVSS5.9AI score0.00483EPSS
SaveExploits1References1
Prion
Prion
•added 2014/11/16 11:59 a.m.•27 views

Design/Logic Flaw

The Gentoo init script for webfs uses world-readable permissions for /var/log/webfsd.log, which allows local users to have unspecified impact by reading the file...

7.2CVSS7.1AI score0.00483EPSS
SaveExploits1References6
CVE
CVE
•added 2014/11/16 11:00 a.m.•61 views

CVE-2013-0347

The CVE-2013-0347 entry concerns the Gentoo init script for webfs, where /var/log/webfsd.log is world-readable. This permission setting allows local users to read the log file, with unspecified impact described in the public description. Connected sources (NVD, OSV, OSV UBUNTU/DEBIAN/UBUNTU entri...

7.2CVSS6.8AI score0.00483EPSS
SaveExploits1References6Affected Software1
Cvelist
Cvelist
•added 2014/11/16 11:00 a.m.•38 views

CVE-2013-0347

The Gentoo init script for webfs uses world-readable permissions for /var/log/webfsd.log, which allows local users to have unspecified impact by reading the file...

6.5AI score0.00483EPSS
SaveExploits1References6
Debian CVE
Debian CVE
•added 2014/11/16 11:00 a.m.•52 views

CVE-2013-0347

The Gentoo init script for webfs uses world-readable permissions for /var/log/webfsd.log, which allows local users to have unspecified impact by reading the file...

7.2CVSS3.5AI score0.00483EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/11/16 12:00 a.m.•5 views

CVE-2013-0347: Exposure of Sensitive Information to an Unauthorized Actor

The Gentoo init script for webfs uses world-readable permissions for /var/log/webfsd.log, which allows local users to have unspecified impact by reading the file...

7.2CVSS5.8AI score0.00483EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2014/11/14 12:00 a.m.•12 views

PT-2014-8307 · Qemu +5 · Qemu +5

Name of the Vulnerable Software and Affected Versions: QEMU affected versions not specified Description: The issue allows remote attackers to execute arbitrary code via a crafted offset or length value in savevm data, specifically in the host from stream offset function in arch init.c when loadin...

7.8CVSS7.7AI score0.04115EPSS
SaveExploits0References57
Oracle linux
Oracle linux
•added 2014/11/11 12:00 a.m.•75 views

kernel security and bug fix update

2.6.32-504.1.3 - Revert: net revert 'bridge: Set vlanfeatures to allow offloads on vlans' Vlad Yasevich 1144442 1121991 2.6.32-504.1.2 - x86 kvm: fix PIT timer race condition mguzik 1149592 1149593 CVE-2014-3611 - x86 kvm: vmx: handle invept and invvpid vm exits gracefull mguzik 1144826 1144837...

6.9CVSS0.9AI score0.00596EPSS
SaveExploits0
Rows per page
Query Builder