Lucene search
+L

9 matches found

Veracode
Veracode
added 2020/11/05 3:9 a.m.61 views

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS.Lack of validation in getrawsocket in drivers/vhost/net.c of an skfamily field allows to attacker perform ioctl2 calls on the '/dev/vhost-net' device may use this flaw to crash the kernel...

5.3CVSS3.3AI score0.00962EPSS
Exploits1References18Affected Software2
Tenable Nessus
Tenable Nessus
added 2020/03/20 12:0 a.m.18 views

FreeBSD : FreeBSD -- Insufficient oce(4) ioctl(2) privilege checking (3c10ccdf-6a09-11ea-92ab-00163e433440)

The driver-specific ioctl2 command handlers in oce4 failed to check whether the caller has sufficient privileges to perform the corresponding operation. Impact : The oce4 handler permits unprivileged users to send passthrough commands to device firmware. C Tenable Network Security, Inc. The...

5.5CVSS5.8AI score0.00259EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2020/03/20 12:0 a.m.35 views

FreeBSD : FreeBSD -- Insufficient ixl(4) ioctl(2) privilege checking (b2b83761-6a09-11ea-92ab-00163e433440)

The driver-specific ioctl2 command handlers in ixl4 failed to check whether the caller has sufficient privileges to perform the corresponding operation. Impact : The ixl4 handler permits unprivileged users to trigger updates to the device's non-volatile memory NVM. C Tenable Network Security, Inc...

5.5CVSS5.7AI score0.00246EPSS
Exploits0References2
FreeBSD
FreeBSD
added 2020/03/19 12:0 a.m.32 views

FreeBSD -- Insufficient oce(4) ioctl(2) privilege checking

Problem Description: The driver-specific ioctl2 command handlers in oce4 failed to check whether the caller has sufficient privileges to perform the corresponding operation. Impact: The oce4 handler permits unprivileged users to send passthrough commands to device firmware...

5.5CVSS3.4AI score0.00259EPSS
Exploits0
FreeBSD
FreeBSD
added 2020/03/19 12:0 a.m.27 views

FreeBSD -- Insufficient ixl(4) ioctl(2) privilege checking

Problem Description: The driver-specific ioctl2 command handlers in ixl4 failed to check whether the caller has sufficient privileges to perform the corresponding operation. Impact: The ixl4 handler permits unprivileged users to trigger updates to the device's non-volatile memory NVM...

5.5CVSS3.2AI score0.00246EPSS
Exploits0
FreeBSD Advisory
FreeBSD Advisory
added 2020/03/19 12:0 a.m.10 views

FreeBSD-SA-20:06.if_ixl_ioctl

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-20:06.ifixlioctl Security Advisory The FreeBSD Project Topic: Insufficient ixl4 ioctl2 privilege checking Category: core Module: ixl4 Announced: 2020-03-19...

5.5CVSS6.2AI score0.00246EPSS
Exploits0
Cvelist
Cvelist
added 2019/04/23 3:57 p.m.26 views

CVE-2019-7303 Snapd seccomp filter TIOCSTI ioctl bypass

A vulnerability in the seccomp filters of Canonical snapd before version 2.37.4 allows a strict mode snap to insert characters into a terminal on a 64-bit host. The seccomp rules were generated to match 64-bit ioctl2 commands on a 64-bit platform; however, the Linux kernel only uses the lower 32...

5.7CVSS7.2AI score0.037EPSS
Exploits3References2
FreeBSD
FreeBSD
added 2013/09/10 12:0 a.m.27 views

FreeBSD -- Insufficient credential checks in network ioctl(2)

Problem Description: As is commonly the case, the IPv6 and ATM network layer ioctl request handlers are written in such a way that an unrecognized request is passed on unmodified to the link layer, which will either handle it or return an error code. Network interface drivers, however, assume tha...

6.9CVSS7.2AI score0.00376EPSS
Exploits0
FreeBSD Advisory
FreeBSD Advisory
added 2006/12/06 12:0 a.m.15 views

FreeBSD-SA-06:25.kmem

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:25.kmem Security Advisory The FreeBSD Project Topic: Kernel memory disclosure in firewire4 Category: core Module: sysdev Announced: 2006-12-06 Credits: Rodrigo...

2.1CVSS6AI score0.00398EPSS
Exploits0
Rows per page
Query Builder