Lucene search
K

29 matches found

Tenable Nessus
Tenable Nessus
added 2026/01/15 12:0 a.m.1 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002346)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002346 advisory. Race condition in the L2TPv3 IP Encapsulation feature in the Linux kernel before 4.8.14 allows local users to gain privileges or cause a denial of service...

7CVSS6.5AI score0.00029EPSS
Exploits0References14
Tenable Nessus
Tenable Nessus
added 2026/01/14 12:0 a.m.1 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001033)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001033 advisory. Race condition in the L2TPv3 IP Encapsulation feature in the Linux kernel before 4.8.14 allows local users to gain privileges or cause a denial of service...

7CVSS6.5AI score0.00029EPSS
Exploits0References14
RedHat Linux
RedHat Linux
added 2025/07/07 6:10 a.m.3 views

kernel: vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp

In the Linux kernel, the following vulnerability has been resolved: vmxnet3: Fix malformed packet sizing in vmxnet3processxdp vmxnet3 driver's XDP handling is buggy for packet sizes using ring0 that is, packet sizes between 128 - 3k bytes. We noticed MTU-related connectivity issues with Cilium's...

5.5CVSS6.8AI score0.00065EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2024/05/24 3:15 p.m.2 views

CVE-2021-47515

In the Linux kernel, the following vulnerability has been resolved: seg6: fix the iif in the IPv6 socket control block When an IPv4 packet is received, the iprcvcore... sets the receiving interface index into the IPv4 socket control block v5.16-rc4, net/ipv4/ipinput.c line 510: IPCBskb-iif =...

5.5CVSS6.1AI score0.00014EPSS
Exploits0References7Affected Software1
F5 Networks
F5 Networks
added 2023/02/21 8:2 p.m.62 views

K68852819: Linux kernel vulnerability CVE-2016-10200

Security Advisory Description Race condition in the L2TPv3 IP Encapsulation feature in the Linux kernel before 4.8.14 allows local users to gain privileges or cause a denial of service use-after-free by making multiple bind system calls without properly ascertaining whether a socket has the...

7CVSS6.9AI score0.00029EPSS
Exploits0Affected Software21
F5 Networks
F5 Networks
added 2023/02/21 7:0 p.m.29 views

K44453423: IP-in-IP Packet Processing vulnerability CVE-2020-10136

Security Advisory Description Multiple products that implement the IP Encapsulation within IP standard RFC 2003, STD 1 decapsulate and route IP-in-IP traffic without any validation, which could allow an unauthenticated remote attacker to route arbitrary traffic via an exposed network interface an...

5.3CVSS5.7AI score0.15083EPSS
Exploits0
Prion
Prion
added 2020/06/02 9:15 a.m.21 views

Improper access control

Multiple products that implement the IP Encapsulation within IP standard RFC 2003, STD 1 decapsulate and route IP-in-IP traffic without any validation, which could allow an unauthenticated remote attacker to route arbitrary traffic via an exposed network interface and lead to spoofing, access...

5CVSS5.4AI score0.15083EPSS
Exploits0References4Affected Software5
Cvelist
Cvelist
added 2020/06/02 8:35 a.m.27 views

CVE-2020-10136 IP-in-IP protocol allows a remote, unauthenticated attacker to route arbitrary network traffic

IP-in-IP protocol specifies IP Encapsulation within IP standard RFC 2003, STD 1 that decapsulate and route IP-in-IP traffic is vulnerable to spoofing, access-control bypass and other unexpected behavior due to the lack of validation to verify network packets before decapsulation and routing...

5.4AI score0.15083EPSS
Exploits0References5
CVE
CVE
added 2020/06/02 8:35 a.m.161 views

CVE-2020-10136

CVE-2020-10136 concerns the IP Encapsulation within IP (IPIP) decapsulation path that decapsulates and routes IP-in-IP traffic without validation of the source network packets, enabling spoofing and potential access-control bypass and other unexpected behavior. The NVD entry assigns a MEDIUM seve...

5.3CVSS5.2AI score0.15083EPSS
Exploits0References6Affected Software1
RedhatCVE
RedhatCVE
added 2019/10/19 12:27 p.m.56 views

CVE-2016-10200

A use-after-free flaw was found in the Linux kernel which enables a race condition in the L2TPv3 IP Encapsulation feature. A local user could use this flaw to escalate their privileges or crash the system...

7CVSS1.5AI score0.00029EPSS
Exploits0References1
Veracode
Veracode
added 2019/05/02 6:36 a.m.38 views

Use-After-Free

Linux kernel is vulnerable to Use-After-Free vulnerability. A local user could exploit the flaw which enables a race condition in the L2TPv3 IP Encapsulation feature allowing elevated privileges or system hang. Affected is the component, kernel networking subsystem...

7CVSS6.7AI score0.00087EPSS
Exploits0References48Affected Software2
OpenVAS
OpenVAS
added 2017/09/19 12:0 a.m.48 views

Ubuntu: Security Advisory (USN-3422-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8CVSS7.7AI score0.0946EPSS
Exploits17References2
Ubuntu
Ubuntu
added 2017/09/18 11:25 p.m.91 views

USN-3422-2: Linux kernel (Trusty HWE) vulnerabilities

USN-3422-1 fixed vulnerabilities in the Linux kernel for Ubuntu 14.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 14.04 LTS for Ubuntu 12.04 LTS. It was discovered that a buffer overflow existed in the Bluetooth stack of the Linux...

8CVSS7.9AI score0.0946EPSS
Exploits17
Ubuntu
Ubuntu
added 2017/09/18 8:29 p.m.105 views

USN-3422-1: Linux kernel vulnerabilities

It was discovered that a buffer overflow existed in the Bluetooth stack of the Linux kernel when handling L2CAP configuration responses. A physically proximate attacker could use this to cause a denial of service system crash. CVE-2017-1000251 It was discovered that the asynchronous I/O aio...

8CVSS7.9AI score0.0946EPSS
Exploits17
RedHat Linux
RedHat Linux
added 2017/08/08 6:50 p.m.124 views

Important: Red Hat Security Advisory: kernel-rt security and bug fix update

An update for kernel-rt is now available for Red Hat Enterprise MRG 2. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

7.8CVSS6.7AI score0.00041EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2017/08/08 4:14 p.m.157 views

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 7.3 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

7.8CVSS6.5AI score0.30423EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2017/08/03 12:0 a.m.173 views

RHEL 7 : kernel (RHSA-2017:1842)

"The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:1842 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: An use-after-free flaw was found in t...

7.8CVSS6.9AI score0.57266EPSS
Exploits16References108
RedHat Linux
RedHat Linux
added 2017/08/01 2:22 p.m.230 views

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

7.8CVSS7.1AI score0.57266EPSS
Exploits16References69
RedHat Linux
RedHat Linux
added 2017/08/01 2:13 p.m.81 views

Important: Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

An update for kernel-rt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

7.8CVSS6.9AI score0.30423EPSS
Exploits8References65
Tenable Nessus
Tenable Nessus
added 2017/05/02 12:0 a.m.81 views

F5 Networks BIG-IP : Linux kernel vulnerability (K68852819)

Race condition in the L2TPv3 IP Encapsulation feature in the Linux kernel before 4.8.14 allows local users to gain privileges or cause a denial of service use-after-free by making multiple bind system calls without properly ascertaining whether a socket has the SOCKZAPPED status, related to...

7CVSS6.5AI score0.00029EPSS
Exploits0References2
Rows per page
Query Builder