Lucene search
K

49 matches found

Positive Technologies
Positive Technologies
added 3 days ago12 views

PT-2026-45564

Dräger Infinity Delta, Delta XL, and Kappa patient monitors contain a denial-of-service vulnerability that allows remote attackers to cause the monitor to reboot by sending a malformed network packet. Attackers can repeatedly send malformed network packets to disrupt patient monitoring until the...

7.1CVSS5.8AI score0.00046EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/05/22 3:21 a.m.30 views

CVE-2026-9054 Invalid IP packets cause a kernel panic

An attacker sending tcp, il, rudp, rudp, or gre packets with a length less than the header size would trigger a kernel panic...

9.2CVSS0.00052EPSS
Exploits0References3
CVE
CVE
added 2026/05/22 3:21 a.m.5 views

CVE-2026-9054

The provided documents describe CVE-2026-9054 as a network-facing kernel panic triggered when an attacker sends packets (TCP, IL, RUDP, RUDP, or GRE) whose length is shorter than the header size. The description is consistent across NVD entries and related sources, but there are no explicit detai...

9.2CVSS5.8AI score0.00052EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/05/22 3:21 a.m.3 views

CVE-2026-9054 Invalid IP packets cause a kernel panic

An attacker sending tcp, il, rudp, rudp, or gre packets with a length less than the header size would trigger a kernel panic...

9.2CVSS5.8AI score0.00052EPSS
Exploits0References3
RedHat Linux
RedHat Linux
added 2026/03/02 8:5 a.m.0 views

valkey: Valkey: Denial of Service via invalid clusterbus packet

A flaw was found in Valkey, a distributed key-value database. A malicious actor with access to the Valkey clusterbus port can exploit an input validation vulnerability by sending a specially crafted invalid clusterbus packet. This lack of validation for clusterbus ping extension packets can lead ...

7.5CVSS5.7AI score0.0002EPSS
Exploits0References5
AlpineLinux
AlpineLinux
added 2026/02/23 7:41 p.m.1 views

CVE-2026-21863

Valkey is a distributed key-value database. Prior to versions 9.0.2, 8.1.6, 8.0.7, and 7.2.12, a malicious actor with access to the Valkey clusterbus port can send an invalid packet that may cause an out bound read, which might result in the system crashing. The Valkey clusterbus packet processin...

7.5CVSS5.8AI score0.0002EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/12/31 12:0 a.m.2 views

Unity Linux 20.1060a Security Update: kernel (UTSA-2025-993301)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993301 advisory. In the Linux kernel, the following vulnerability has been resolved: nfc: nci: Fix uninit-value in ncirxwork syzbot reported the following uninit-value access issue 1...

7.1CVSS6AI score0.00017EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/12/30 12:0 a.m.3 views

Unity Linux 20.1060e Security Update: kernel (UTSA-2025-992684)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992684 advisory. In the Linux kernel, the following vulnerability has been resolved: nfc: nci: Fix uninit-value in ncirxwork syzbot reported the following uninit-value access issue 1...

7.1CVSS6AI score0.00017EPSS
Exploits0References3
NVD
NVD
added 2025/10/28 12:15 p.m.1 views

CVE-2025-40043

In the Linux kernel, the following vulnerability has been resolved: net: nfc: nci: Add parameter validation for packet data Syzbot reported an uninitialized value bug in nciinitreq, which was introduced by commit 5aca7966d2a7 "Merge tag 'perf-tools-fixes-for-v6.17-2025-09-16' of...

0.00063EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2015-1737

Malware in sbrugna...

5.5CVSS5.8AI score0.00474EPSS
Exploits0References12
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2004-2463

Malware in sbrugna...

5CVSS6.4AI score0.01271EPSS
Exploits0References7
Tenable Nessus
Tenable Nessus
added 2025/10/07 12:0 a.m.2 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986342)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986342 advisory. In the Linux kernel, the following vulnerability has been resolved: nfc: nci: Fix uninit-value in ncirxwork syzbot reported the following uninit-value access issue 1...

7.1CVSS6AI score0.00017EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/01/14 12:0 a.m.23 views

EulerOS 2.0 SP9 : python-dns (EulerOS-SA-2025-1060)

According to the versions of the python-dns package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an...

7CVSS7.1AI score0.08388EPSS
Exploits1References2
CNNVD
CNNVD
added 2024/07/29 12:0 a.m.1 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates in the pppasyncencode function that assumes LCP packets are valid without checking the actual contents of th...

5.5CVSS6.6AI score0.0001EPSS
Exploits0References9
OSV
OSV
added 2024/06/21 11:15 a.m.0 views

AZL-48965 CVE-2024-38381 affecting package kernel for versions less than 6.6.51.1-1

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: Fix uninit-value in ncirxwork syzbot reported the following uninit-value access issue 1 ncirxwork parses received packet from ndev-rxq. It should be validated header size, payload size and total packet size before...

7.1CVSS6.6AI score0.00017EPSS
Exploits0References1
OSV
OSV
added 2024/06/21 11:15 a.m.1 views

DEBIAN-CVE-2024-38381

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: Fix uninit-value in ncirxwork syzbot reported the following uninit-value access issue 1 ncirxwork parses received packet from ndev-rxq. It should be validated header size, payload size and total packet size before...

7.1CVSS6.1AI score0.00017EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2024/04/12 2:14 a.m.1 views

SUSE CVE-2023-29483

eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a "TuDoor" attack. In other words, dnspython does not have the preferred behavior in whic...

5.9CVSS9.3AI score0.08388EPSS
Exploits1References10
CNNVD
CNNVD
added 2024/04/11 12:0 a.m.1 views

Eventlet 安全漏洞

Eventlet is a concurrent networking library for Python. A security vulnerability exists in Eventlet versions prior to 0.35.2 that originated from allowing remote attackers to interfere with DNS name resolution by rapidly sending invalid packets from the expected IP address and source port...

7CVSS7.2AI score0.08388EPSS
Exploits1References12
SUSE CVE
SUSE CVE
added 2023/02/15 5:52 a.m.1 views

SUSE CVE-2011-2698

Off-by-one error in the elemcellidaux function in epan/dissectors/packet-ansia.c in the ANSI MAP dissector in Wireshark 1.4.x before 1.4.8 and 1.6.x before 1.6.1 allows remote attackers to cause a denial of service infinite loop via an invalid packet...

4.3CVSS7.4AI score0.0309EPSS
Exploits1References3
SUSE CVE
SUSE CVE
added 2023/02/15 5:21 a.m.1 views

SUSE CVE-2015-1606

The keyring DB in GnuPG before 2.1.2 does not properly handle invalid packets, which allows remote attackers to cause a denial of service invalid read and use-after-free via a crafted keyring file...

5.5CVSS8.7AI score0.00474EPSS
Exploits0References22
Rows per page
Query Builder