Lucene search
K

37 matches found

AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.3 views

Astra Linux - уязвимость в linux-5.10, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: NFSD: Fixed a use-after-free issue on the source server during inter-server copying. The use-after-free occurred when the laundromat attempted to free an expired cpntfstate entry from the s2scpstateids list after inter-server...

7.8CVSS5.8AI score0.00032EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/12/31 12:0 a.m.2 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993255)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993255 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSD: fix use-after-free on source server when doing inter-server copy Use-after-free occurred wh...

7.8CVSS6.5AI score0.00032EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/12/30 12:0 a.m.3 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992600)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992600 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSD: fix use-after-free on source server when doing inter-server copy Use-after-free occurred wh...

7.8CVSS6.5AI score0.00032EPSS
Exploits0References4
Veracode
Veracode
added 2025/10/15 11:24 a.m.2 views

Remote Code Execution

python-socketio is vulnerable to Remote Code Execution. The vulnerability is due to insecure deserialization using pickle library, due to servers trusting and calling pickle.loads on inter-server message-queue payloads, This allowing an attacker with access to the message queue to send a crafted...

6.4CVSS7AI score0.00837EPSS
Exploits0References5Affected Software1
Snyk
Snyk
added 2025/10/06 4:51 p.m.1 views

Deserialization of Untrusted Data

Overview python-socketio is a Socket.IO server and client for Python Affected versions of this package are vulnerable to Deserialization of Untrusted Data via payloads that are passed between Socket.IO processes in multi-server deployments. An attacker can execute arbitrary code by sending a...

7.5CVSS7.8AI score0.00837EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/10/06 12:0 a.m.2 views

PT-2025-40909

Name of the Vulnerable Software and Affected Versions python-socketio versions prior to 5.14.0 Description python-socketio is a Python implementation of the Socket.IO realtime client and server. A remote code execution issue in python-socketio allows attackers to execute arbitrary Python code...

6.4CVSS8.2AI score0.00837EPSS
Exploits0References22
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-55511

Malicious code in bioql PyPI...

7.4AI score0.00032EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-37462

Malicious code in bioql PyPI...

9.8CVSS9.1AI score0.10908EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-37463

Malicious code in bioql PyPI...

5.3CVSS6.7AI score0.03998EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2025/09/16 11:35 p.m.2 views

SUSE CVE-2022-50241

In the Linux kernel, the following vulnerability has been resolved: NFSD: fix use-after-free on source server when doing inter-server copy Use-after-free occurred when the laundromat tried to free expired cpntfstate entry on the s2scpstateids list after inter-server copy completed. The sccplist...

5.5CVSS6.4AI score0.00032EPSS
Exploits0References7
Tenable Nessus
Tenable Nessus
added 2025/09/16 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2022-50241

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NFSD: fix use-after-free on source server when doing inter-server copy Use-after-free occurred when the laundromat tried to free expired cpntfstate entry on the...

7.8CVSS6.1AI score0.00032EPSS
Exploits0References3
OSV
OSV
added 2025/09/15 2:15 p.m.1 views

DEBIAN-CVE-2022-50241

In the Linux kernel, the following vulnerability has been resolved: NFSD: fix use-after-free on source server when doing inter-server copy Use-after-free occurred when the laundromat tried to free expired cpntfstate entry on the s2scpstateids list after inter-server copy completed. The sccplist...

7.8CVSS5.7AI score0.00032EPSS
Exploits0References1
NVD
NVD
added 2025/09/15 2:15 p.m.3 views

CVE-2022-50241

In the Linux kernel, the following vulnerability has been resolved: NFSD: fix use-after-free on source server when doing inter-server copy Use-after-free occurred when the laundromat tried to free expired cpntfstate entry on the s2scpstateids list after inter-server copy completed. The sccplist...

7.8CVSS0.00032EPSS
Exploits0References5
OSV
OSV
added 2025/09/15 2:15 p.m.0 views

UBUNTU-CVE-2022-50241

In the Linux kernel, the following vulnerability has been resolved: NFSD: fix use-after-free on source server when doing inter-server copy Use-after-free occurred when the laundromat tried to free expired cpntfstate entry on the s2scpstateids list after inter-server copy completed. The sccplist...

7.8CVSS5.8AI score0.00032EPSS
Exploits0References8
OSV
OSV
added 2025/09/15 2:1 p.m.2 views

CVE-2022-50241 NFSD: fix use-after-free on source server when doing inter-server copy

In the Linux kernel, the following vulnerability has been resolved: NFSD: fix use-after-free on source server when doing inter-server copy Use-after-free occurred when the laundromat tried to free expired cpntfstate entry on the s2scpstateids list after inter-server copy completed. The sccplist...

7.8CVSS6.6AI score0.00032EPSS
Exploits0References8
Cvelist
Cvelist
added 2025/09/15 2:1 p.m.5 views

CVE-2022-50241 NFSD: fix use-after-free on source server when doing inter-server copy

In the Linux kernel, the following vulnerability has been resolved: NFSD: fix use-after-free on source server when doing inter-server copy Use-after-free occurred when the laundromat tried to free expired cpntfstate entry on the s2scpstateids list after inter-server copy completed. The sccplist...

0.00032EPSS
Exploits0References5
CVE
CVE
added 2025/09/15 2:1 p.m.16 views

CVE-2022-50241

CVE-2022-50241 is a Linux kernel local-use-after-free in NFSD during inter-server copy. The race occurs when a CLOSE may be sent before FREE_STATEID, leaving a freed lock/state entry on the s2s_cp_stateids/sc_cp_list and triggering a BAD_STATEID on subsequent FREE_STATEID. The referenced patches ...

7.8CVSS6.1AI score0.00032EPSS
Exploits0References5Affected Software1
Positive Technologies
Positive Technologies
added 2025/09/15 12:0 a.m.2 views

PT-2025-37495

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A use-after-free issue existed in the Linux kernel's Network File System Daemon NFSD when handling inter-server copies. Specifically, the vulnerability occurred when the nfsd4 close op...

5.9AI score0.00032EPSS
Exploits0References7
RedhatCVE
RedhatCVE
added 2025/05/23 3:52 a.m.3 views

CVE-2023-33299

A deserialization of untrusted data in Fortinet FortiNAC below 7.2.1, below 9.4.3, below 9.2.8 and all earlier versions of 8.x allows attacker to execute unauthorized code or commands via specifically crafted request on inter-server communication port. Note FortiNAC versions 8.x will not be fixed...

9.8CVSS7.5AI score0.10908EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/03/16 4:30 p.m.14 views

CVE-2023-33300

A improper neutralization of special elements used in a command 'command injection' in Fortinet FortiNAC 7.2.1 and earlier, 9.4.3 and earlier allows attacker a limited, unauthorized file access via specifically crafted request in inter-server communication port...

5.3CVSS7.2AI score0.03998EPSS
Exploits0References1
Rows per page
Query Builder