Lucene search
+L

7724 matches found

osv_ubuntu
osv_ubuntu
•added 2023/07/20 1:15 a.m.•17 views

UBUNTU-CVE-2022-28733

Integer underflow in grubnetrecvip4packets; A malicious crafted IP packet can lead to an integer underflow in grubnetrecvip4packets function on rsm-totallen value. Under certain circumstances the totallen value may end up wrapping around to a small integer number which will be used in memory...

8.1CVSS7.1AI score0.01273EPSS
SaveExploits0References4
Mend
Mend
•added 2023/07/20 12:20 a.m.•7 views

CVE-2022-28733

Integer underflow in grubnetrecvip4packets; A malicious crafted IP packet can lead to an integer underflow in grubnetrecvip4packets function on rsm-totallen value. Under certain circumstances the totallen value may end up wrapping around to a small integer number which will be used in memory...

9.2CVSS0.01273EPSS
SaveExploits0References6
Debian CVE
Debian CVE
•added 2023/07/20 12:20 a.m.•91 views

CVE-2022-28733

Integer underflow in grubnetrecvip4packets; A malicious crafted IP packet can lead to an integer underflow in grubnetrecvip4packets function on rsm-totallen value. Under certain circumstances the totallen value may end up wrapping around to a small integer number which will be used in memory...

8.1CVSS7.9AI score0.01273EPSS
SaveExploits0
Cvelist
Cvelist
•added 2023/07/20 12:20 a.m.•41 views

CVE-2022-28733 Integer underflow in grub_net_recv_ip4_packets

Integer underflow in grubnetrecvip4packets; A malicious crafted IP packet can lead to an integer underflow in grubnetrecvip4packets function on rsm-totallen value. Under certain circumstances the totallen value may end up wrapping around to a small integer number which will be used in memory...

8.1CVSS7.6AI score0.01273EPSS
SaveExploits0References3
CVE
CVE
•added 2023/07/20 12:20 a.m.•1575 views

CVE-2022-28733

CVE-2022-28733 is a real grub2 vulnerability: an integer underflow in grub_net_recv_ip4_packets when processing IPv4 packets can cause a small rsm->total_len to wrap, potentially triggering a write past the end of a memory buffer. Public advisories (Debian DSA, Red Hat/NVD references) and vend...

8.1CVSS7.5AI score0.01273EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
•added 2023/07/20 12:20 a.m.•31 views

CVE-2022-28733 Integer underflow in grub_net_recv_ip4_packets

Integer underflow in grubnetrecvip4packets; A malicious crafted IP packet can lead to an integer underflow in grubnetrecvip4packets function on rsm-totallen value. Under certain circumstances the totallen value may end up wrapping around to a small integer number which will be used in memory...

8.1CVSS6.8AI score0.01273EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2023/07/20 12:00 a.m.•124 views

Amazon Linux 2 : grub2 (ALAS-2023-2146)

The version of grub2 installed on the remote host is prior to 2.06-14. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2146 advisory. A flaw was found in grub 2, where a crafted 16-bit grayscale PNG image may lead to an out-of-bounds write. This flaw allows ...

8.6CVSS7.4AI score0.01273EPSS
SaveExploits0References20
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/20 12:00 a.m.•6 views

CVE-2022-28733: Integer Underflow (Wrap or Wraparound)

Integer underflow in grubnetrecvip4packets; A malicious crafted IP packet can lead to an integer underflow in grubnetrecvip4packets function on rsm-totallen value. Under certain circumstances the totallen value may end up wrapping around to a small integer number which will be used in memory...

8.1CVSS7.3AI score0.01273EPSS
SaveExploits0References3
NVD
NVD
•added 2023/07/18 12:15 a.m.•30 views

CVE-2023-38427

An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/smb2pdu.c in ksmbd has an integer underflow and out-of-bounds read in deassemblenegcontexts...

9.8CVSS0.01243EPSS
SaveExploits0References3
osv_debian
osv_debian
•added 2023/07/18 12:15 a.m.•8 views

DEBIAN-CVE-2023-38427

An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/smb2pdu.c in ksmbd has an integer underflow and out-of-bounds read in deassemblenegcontexts...

9.8CVSS6.8AI score0.01243EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/07/18 12:15 a.m.•17 views

CVE-2023-38427

An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/smb2pdu.c in ksmbd has an integer underflow and out-of-bounds read in deassemblenegcontexts...

9.8CVSS6.5AI score0.01243EPSS
SaveExploits0References3
osv_azl
osv_azl
•added 2023/07/18 12:15 a.m.•16 views

AZL-27533 CVE-2023-38427 affecting package kernel for versions less than 5.15.122.1-2

An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/smb2pdu.c in ksmbd has an integer underflow and out-of-bounds read in deassemblenegcontexts...

9.8CVSS6.8AI score0.01243EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2023/07/18 12:15 a.m.•50 views

CVE-2023-38427

An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/smb2pdu.c in ksmbd has an integer underflow and out-of-bounds read in deassemblenegcontexts...

9.8CVSS6.8AI score0.01243EPSS
SaveExploits0References8
osv_ubuntu
osv_ubuntu
•added 2023/07/18 12:15 a.m.•31 views

UBUNTU-CVE-2023-38427

An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/smb2pdu.c in ksmbd has an integer underflow and out-of-bounds read in deassemblenegcontexts...

9.8CVSS6.8AI score0.01243EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
•added 2023/07/18 12:00 a.m.•29 views

openSUSE 15: libopenvswitch-2_14-0 / libovn-20_06-0 / openvswitch / etc (SUSE-SU-2023:2250-2)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2250-2 advisory. - CVE-2022-4338: Fixed Integer Underflow in Organization Specific TLV bsc1206580. - CVE-2022-4337: Fixed Out-of-Bounds Read in Organization Specific...

9.8CVSS7.4AI score0.01385EPSS
SaveExploits0References7
osv_suse
osv_suse
•added 2023/07/17 12:27 p.m.•23 views

SUSE-SU-2023:2250-2 Security update for openvswitch

This update for openvswitch fixes the following issues: - CVE-2022-4338: Fixed Integer Underflow in Organization Specific TLV bsc1206580. - CVE-2022-4337: Fixed Out-of-Bounds Read in Organization Specific TLV bsc1206581...

9.8CVSS9.4AI score0.01385EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2023/07/17 12:00 a.m.•140 views

CVE-2023-38427

An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/smb2pdu.c in ksmbd has an integer underflow and out-of-bounds read in deassemblenegcontexts...

9.8CVSS7.2AI score0.01243EPSS
SaveExploits0
Cvelist
Cvelist
•added 2023/07/17 12:00 a.m.•75 views

CVE-2023-38427

An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/smb2pdu.c in ksmbd has an integer underflow and out-of-bounds read in deassemblenegcontexts...

9.2AI score0.01243EPSS
SaveExploits0References3
CVE
CVE
•added 2023/07/17 12:00 a.m.•202 views

CVE-2023-38427

The connected documents confirm CVE-2023-38427 affects the Linux kernel (ksmbd) via an integer underflow and an out-of-bounds read in fs/smb/server/smb2pdu.c (deassemble_neg_contexts) and that a fix was released in Linux kernel 6.3.8. Practical impact is high due to potential data exposure and co...

9.8CVSS8.8AI score0.01243EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/17 12:00 a.m.•5 views

CVE-2023-38427: Out-of-bounds Read

An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/smb2pdu.c in ksmbd has an integer underflow and out-of-bounds read in deassemblenegcontexts...

9.8CVSS7.9AI score0.01243EPSS
SaveExploits0References5
Rows per page
Query Builder