Lucene search
K

2569 matches found

Github Security Blog
Github Security Blog
added 2024/08/02 9:31 p.m.20 views

Podman vulnerable to memory-based denial of service

A flaw was found in Podman. This issue may allow an attacker to create a specially crafted container that, when configured to share the same IPC with at least one other container, can create a large number of IPC resources in /dev/shm. The malicious container will continue to exhaust resources...

7.7CVSS7AI score0.00514EPSS
Exploits0References6Affected Software5
OSV
OSV
added 2024/08/02 9:31 p.m.18 views

GHSA-RPCC-P8XM-RC6P Podman vulnerable to memory-based denial of service

A flaw was found in Podman. This issue may allow an attacker to create a specially crafted container that, when configured to share the same IPC with at least one other container, can create a large number of IPC resources in /dev/shm. The malicious container will continue to exhaust resources...

8.7CVSS7.3AI score0.00514EPSS
Exploits0References6
NVD
NVD
added 2024/08/02 9:16 p.m.13 views

CVE-2024-3056

A flaw was found in Podman. This issue may allow an attacker to create a specially crafted container that, when configured to share the same IPC with at least one other container, can create a large number of IPC resources in /dev/shm. The malicious container will continue to exhaust resources...

7.7CVSS0.00514EPSS
Exploits0References3
OSV
OSV
added 2024/08/02 9:16 p.m.2 views

AZL-49596 CVE-2024-3056 affecting package podman for versions less than 5.6.1-2

A flaw was found in Podman. This issue may allow an attacker to create a specially crafted container that, when configured to share the same IPC with at least one other container, can create a large number of IPC resources in /dev/shm. The malicious container will continue to exhaust resources...

7.7CVSS7.3AI score0.00514EPSS
Exploits0References1
OSV
OSV
added 2024/08/02 9:16 p.m.2 views

AZL-49546 CVE-2024-3056 affecting package podman 4.1.1-26

A flaw was found in Podman. This issue may allow an attacker to create a specially crafted container that, when configured to share the same IPC with at least one other container, can create a large number of IPC resources in /dev/shm. The malicious container will continue to exhaust resources...

7.7CVSS7.3AI score0.00514EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2024/08/02 9:16 p.m.12 views

CVE-2024-3056

A flaw was found in Podman. This issue may allow an attacker to create a specially crafted container that, when configured to share the same IPC with at least one other container, can create a large number of IPC resources in /dev/shm. The malicious container will continue to exhaust resources...

7.7CVSS7AI score0.00514EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/08/02 8:37 p.m.24 views

CVE-2024-3056 Podman: kernel: containers in shared ipc namespace are vulnerable to denial of service attack

A flaw was found in Podman. This issue may allow an attacker to create a specially crafted container that, when configured to share the same IPC with at least one other container, can create a large number of IPC resources in /dev/shm. The malicious container will continue to exhaust resources...

7.7CVSS5.1AI score0.00514EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/08/02 8:37 p.m.29 views

CVE-2024-3056 Podman: kernel: containers in shared ipc namespace are vulnerable to denial of service attack

A flaw was found in Podman. This issue may allow an attacker to create a specially crafted container that, when configured to share the same IPC with at least one other container, can create a large number of IPC resources in /dev/shm. The malicious container will continue to exhaust resources...

7.7CVSS0.00514EPSS
Exploits0References2
CVE
CVE
added 2024/08/02 8:37 p.m.96 views

CVE-2024-3056

CVE-2024-3056 affects Podman. A flaw allows a container that shares IPC with another to create a large number of IPC resources in /dev/shm, exhaust memory, and trigger a memory-based denial of service. The resources remain tied to the IPC namespace even after the container is removed, and a resta...

7.7CVSS5.1AI score0.00514EPSS
Exploits0References3Affected Software1
Debian CVE
Debian CVE
added 2024/08/02 8:37 p.m.13 views

CVE-2024-3056

Removed by vendor...

7.7CVSS8.6AI score0.00514EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2024/07/31 10:36 a.m.15 views

CVE-2024-3056

A flaw was found in Podman. This issue may allow an attacker to create a specially crafted container that, when configured to share the same IPC with at least one other container, can create a large number of IPC resources in /dev/shm. The malicious container will continue to exhaust resources...

7.7CVSS4.7AI score0.00514EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2024/07/29 12:0 a.m.8 views

Dahua Security Cameras Buffer Copy without Checking Size of Input (CVE-2019-9677)

The specific fields of CGI interface of some Dahua products are not strictly verified, an attacker can cause a buffer overflow by constructing malicious packets. Affected products include: IPC- HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC- HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X...

9.8CVSS7.7AI score0.01144EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/07/29 12:0 a.m.11 views

Dahua Security Cameras Improper Authentication (CVE-2017-9316)

Firmware upgrade authentication bypass vulnerability was found in Dahua IPC-HDW4300S and some IP products. The vulnerability was caused by internal Debug function. This particular function was used for problem analysis and performance tuning during product development phase. It allowed the device...

6.5CVSS6.6AI score0.01893EPSS
Exploits0References2
OSV
OSV
added 2024/07/15 12:17 p.m.84 views

RLSA-2024:4211 Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Bluetooth BR/EDR PIN Pairing procedure is vulnerable to an impersonation attack CVE-2020-26555 kernel: TCP-spoofed ghost ACKs and leak leak initial sequence number...

7CVSS7.8AI score0.01401EPSS
Exploits1References62
Tenable Nessus
Tenable Nessus
added 2024/07/15 12:0 a.m.104 views

Rocky Linux 8 : kernel (RLSA-2024:4211)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:4211 advisory. kernel: Bluetooth BR/EDR PIN Pairing procedure is vulnerable to an impersonation attack CVE-2020-26555 kernel: TCP-spoofed ghost ACKs and leak leak...

9.1CVSS7.6AI score0.01401EPSS
Exploits1References123
Citrix
Citrix
added 2024/07/13 12:0 a.m.6 views

IPC Error when Exporting the vDisk on Provisioning Services

IPC Error when exporting vDisk on Provisioning Services PVS. PVS Console log includes thefollowing errors: ERROR EnterpriseAccess.HandlerBase - PvsStatusExceptionHandlerERROR EnterpriseAccess.HandlerBase - return code: 184ERROR EnterpriseAccess.HandlerBase - exception type: PvsStatusExceptionERRO...

7AI score
Exploits0
Citrix
Citrix
added 2024/07/13 12:0 a.m.7 views

IPC Error While Validating Provisioning Services Store

Multiple Provisioning Services Servers in the farm come with an IPC error when trying to validate the store path except on the server you are running Provisioning Services Server console: When validating the store, following error appears in the console Log:...

7AI score
Exploits0
NVD
NVD
added 2024/07/12 1:15 p.m.23 views

CVE-2024-40939

In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: Fix tainted pointer delete is case of region creation fail In case of region creation fail in ipcdevlinkcreateregion, previously created regions delete process starts from tainted pointer which actually holds err...

7.8CVSS0.00261EPSS
Exploits0References5
OSV
OSV
added 2024/07/12 1:15 p.m.0 views

UBUNTU-CVE-2024-40939

In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: Fix tainted pointer delete is case of region creation fail In case of region creation fail in ipcdevlinkcreateregion, previously created regions delete process starts from tainted pointer which actually holds err...

7.8CVSS6.2AI score0.00261EPSS
Exploits0References14
Cvelist
Cvelist
added 2024/07/12 12:25 p.m.29 views

CVE-2024-40939 net: wwan: iosm: Fix tainted pointer delete is case of region creation fail

In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: Fix tainted pointer delete is case of region creation fail In case of region creation fail in ipcdevlinkcreateregion, previously created regions delete process starts from tainted pointer which actually holds err...

0.00261EPSS
Exploits0References4
Rows per page
Query Builder