Lucene search
+L

163 matches found

OSV
OSV
added 2018/10/01 7:15 p.m.6 views

USN-3777-1 linux, linux-aws, linux-gcp, linux-kvm, linux-oem, linux-raspi2 vulnerabilities

Jann Horn discovered that the vmacache subsystem did not properly handle sequence number overflows, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or execute arbitrary code. CVE-2018-17182 It was discovered that the...

8.3CVSS7.6AI score0.08743EPSS
Exploits4References8
OSV
OSV
added 2018/10/01 6:44 p.m.4 views

USN-3775-1 linux vulnerabilities

It was discovered that the paravirtualization implementation in the Linux kernel did not properly handle some indirect calls, reducing the effectiveness of Spectre v2 mitigations for paravirtual guests. A local attacker could use this to expose sensitive information. CVE-2018-15594 It was...

8.3CVSS7.3AI score0.14806EPSS
Exploits6References7
CNVD
CNVD
added 2018/09/05 12:0 a.m.18 views

Linux kernel denial of service vulnerability (CNVD-2018-24474)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the 'irdasetsockopt' function in the net/irda/afirda.c file and the drivers/staging/irda/net/afirda.c file in versions of Linux kern...

7.8CVSS6.9AI score0.00497EPSS
Exploits0References1
OSV
OSV
added 2018/09/04 6:29 p.m.2 views

DEBIAN-CVE-2018-6555

The irdasetsockopt function in net/irda/afirda.c and later in drivers/staging/irda/net/afirda.c in the Linux kernel before 4.17 allows local users to cause a denial of service iasobject use-after-free and system crash or possibly have unspecified other impact via an AFIRDA socket...

7.8CVSS6.5AI score0.00497EPSS
Exploits0References1
OSV
OSV
added 2018/09/04 6:29 p.m.9 views

CVE-2018-6555

The irdasetsockopt function in net/irda/afirda.c and later in drivers/staging/irda/net/afirda.c in the Linux kernel before 4.17 allows local users to cause a denial of service iasobject use-after-free and system crash or possibly have unspecified other impact via an AFIRDA socket...

7.8CVSS7.7AI score
Exploits0References12
OSV
OSV
added 2018/09/04 3:0 p.m.9 views

UBUNTU-CVE-2018-6555

The irdasetsockopt function in net/irda/afirda.c and later in drivers/staging/irda/net/afirda.c in the Linux kernel before 4.17 allows local users to cause a denial of service iasobject use-after-free and system crash or possibly have unspecified other impact via an AFIRDA socket...

7.8CVSS6.7AI score0.00497EPSS
Exploits0References9
OSV
OSV
added 2018/09/04 3:0 p.m.11 views

UBUNTU-CVE-2018-6554

Memory leak in the irdabind function in net/irda/afirda.c and later in drivers/staging/irda/net/afirda.c in the Linux kernel before 4.17 allows local users to cause a denial of service memory consumption by repeatedly binding an AFIRDA socket...

5.5CVSS6.7AI score0.00506EPSS
Exploits0References9
RedhatCVE
RedhatCVE
added 2017/08/30 2:19 p.m.31 views

CVE-2017-13765

In Wireshark 2.4.0, 2.2.0 to 2.2.8, and 2.0.0 to 2.0.14, the IrCOMM dissector has a buffer over-read and application crash. This was addressed in plugins/irda/packet-ircomm.c by adding length validation...

7.5CVSS2.6AI score0.02787EPSS
Exploits0References2
OSV
OSV
added 2017/08/30 9:29 a.m.2 views

ALPINE-CVE-2017-13765

In Wireshark 2.4.0, 2.2.0 to 2.2.8, and 2.0.0 to 2.0.14, the IrCOMM dissector has a buffer over-read and application crash. This was addressed in plugins/irda/packet-ircomm.c by adding length validation...

7.5CVSS7AI score0.02787EPSS
Exploits0References1
OSV
OSV
added 2017/08/30 9:29 a.m.4 views

DEBIAN-CVE-2017-13765

In Wireshark 2.4.0, 2.2.0 to 2.2.8, and 2.0.0 to 2.0.14, the IrCOMM dissector has a buffer over-read and application crash. This was addressed in plugins/irda/packet-ircomm.c by adding length validation...

7.5CVSS7.8AI score0.02787EPSS
Exploits0References1
Cloud Foundry
Cloud Foundry
added 2017/05/01 12:0 a.m.104 views

USN-3265-2: Linux kernel (Xenial HWE) vulnerabilities | Cloud Foundry

Severity High Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 Description USN-3265-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 16.04 LTS for Ubuntu 14.04...

9.8CVSS8.1AI score0.04953EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2017/05/01 12:0 a.m.61 views

EulerOS 2.0 SP2 : kernel (EulerOS-SA-2017-1056)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A use-after-free flaw was found in the way the Linux kernel's Datagram Congestion Control Protocol DCCP implementation freed SKB socket buffer...

7.8CVSS6.6AI score0.0596EPSS
Exploits13References6
Ubuntu
Ubuntu
added 2017/04/25 1:47 a.m.98 views

USN-3265-2: Linux kernel (Xenial HWE) vulnerabilities

USN-3265-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 16.04 LTS for Ubuntu 14.04 LTS. It was discovered that a use-after-free flaw existed in the filesystem encryption...

9.8CVSS7AI score0.04953EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2017/04/25 12:0 a.m.295 views

Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-3265-1)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3265-1 advisory. It was discovered that a use-after-free flaw existed in the filesystem encryption subsystem in the Linux kernel. A local attacker could use this to cause...

9.8CVSS7.3AI score0.04953EPSS
Exploits0References11
Tenable Nessus
Tenable Nessus
added 2017/04/25 12:0 a.m.47 views

Ubuntu 14.04 LTS : Linux kernel (Xenial HWE) vulnerabilities (USN-3265-2)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3265-2 advisory. USN-3265-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enableme...

9.8CVSS7.3AI score0.04953EPSS
Exploits0References11
RedhatCVE
RedhatCVE
added 2017/03/02 5:20 p.m.33 views

CVE-2017-6348

The hashbindelete function in net/irda/irqueue.c in the Linux kernel improperly manages lock dropping, which allows local users to cause a denial of service deadlock via crafted operations on IrDA devices...

6.2CVSS4.6AI score0.00381EPSS
Exploits0References1
CNVD
CNVD
added 2017/03/02 12:0 a.m.7 views

Linux kernel local denial of service vulnerability (CNVD-2017-02605)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A security vulnerability exists in the hashbindelete function in the net/irda/irqueue.c file in versions of Linux kernel prior to 4.9.13. A local attacker can exploit this...

5.5CVSS7.4AI score0.00381EPSS
Exploits0References1
NVD
NVD
added 2017/03/01 8:59 p.m.18 views

CVE-2017-6348

The hashbindelete function in net/irda/irqueue.c in the Linux kernel before 4.9.13 improperly manages lock dropping, which allows local users to cause a denial of service deadlock via crafted operations on IrDA devices...

5.5CVSS5.7AI score0.00381EPSS
Exploits0References7
Prion
Prion
added 2017/03/01 8:59 p.m.23 views

Design/Logic Flaw

The hashbindelete function in net/irda/irqueue.c in the Linux kernel before 4.9.13 improperly manages lock dropping, which allows local users to cause a denial of service deadlock via crafted operations on IrDA devices...

4.9CVSS5.5AI score0.00381EPSS
Exploits0References7Affected Software1
OSV
OSV
added 2017/03/01 8:59 p.m.6 views

CVE-2017-6348

The hashbindelete function in net/irda/irqueue.c in the Linux kernel before 4.9.13 improperly manages lock dropping, which allows local users to cause a denial of service deadlock via crafted operations on IrDA devices...

5.5CVSS6.9AI score
Exploits0References7
Rows per page
Query Builder