Lucene search
K

18 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.2 views

Astra Linux - уязвимость в linux, linux-5.10

A issue was discovered in the Linux kernel before version 5.14.15. There is a flaw where the array index exceeds the bounds in the detachcapictr function located in drivers/isdn/capi/kcapi.c...

5.5CVSS6.7AI score0.00012EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2026/03/26 3:16 p.m.3 views

CVE-2026-4395

Heap-based buffer overflow in the KCAPI ECC code path of wceccimportx963ex in wolfSSL wolfcrypt allows a remote attacker to write attacker-controlled data past the bounds of the pubkeyraw buffer via a crafted oversized EC public key point. The WOLFSSLKCAPIECC code path copies the input to...

9.8CVSS6.1AI score0.00144EPSS
Exploits0References1
Snyk
Snyk
added 2026/03/19 10:45 p.m.1 views

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the wceccimportx963ex function when handling EC public key points in the KCAPI ECC code path. An attacker can cause memory corruption and potentially execute arbitrary code by sending a crafted oversized EC...

9.8CVSS6.2AI score0.00144EPSS
Exploits0References2
OSV
OSV
added 2026/03/19 9:17 p.m.2 views

DEBIAN-CVE-2026-4395

Heap-based buffer overflow in the KCAPI ECC code path of wceccimportx963ex in wolfSSL wolfcrypt allows a remote attacker to write attacker-controlled data past the bounds of the pubkeyraw buffer via a crafted oversized EC public key point. The WOLFSSLKCAPIECC code path copies the input to...

9.8CVSS5.8AI score0.00144EPSS
Exploits0References1
OSV
OSV
added 2026/03/19 9:17 p.m.1 views

UBUNTU-CVE-2026-4395

Heap-based buffer overflow in the KCAPI ECC code path of wceccimportx963ex in wolfSSL wolfcrypt allows a remote attacker to write attacker-controlled data past the bounds of the pubkeyraw buffer via a crafted oversized EC public key point. The WOLFSSLKCAPIECC code path copies the input to...

9.8CVSS6.1AI score0.00144EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2026/03/19 8:41 p.m.3 views

CVE-2026-4395

Heap-based buffer overflow in the KCAPI ECC code path of wceccimportx963ex in wolfSSL wolfcrypt allows a remote attacker to write attacker-controlled data past the bounds of the pubkeyraw buffer via a crafted oversized EC public key point. The WOLFSSLKCAPIECC code path copies the input to...

9.8CVSS5.8AI score0.00144EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.1 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001469)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001469 advisory. An issue was discovered in the Linux kernel before 5.14.15. There is an array-index-out-of-bounds flaw in the detachcapictr function in drivers/isdn/capi/kcapi.c...

5.5CVSS6.6AI score0.00012EPSS
Exploits1References4
OSV
OSV
added 2025/07/03 1:49 p.m.2 views

CLSA-2025-1751550583 Update of libkcapi

Backport fixes for kcapi-hasher target option Related: RHEL-15298 - Fix kcapi tests in FIPS mode Resolves: RHEL-2405...

5.8AI score
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2024/09/16 12:0 a.m.1 views

The vulnerability of the cmtp_add_connection function in the driver /isdn/capi/kcapi.c of the isdn component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the cmtpaddconnection function in the /isdn/capi/kcapi.c driver of the Linux operating system’s ISDN component is related to an index out of range. Exploiting this vulnerability could allow an attacker to cause service failures...

7.8CVSS6.4AI score0.00018EPSS
Exploits0References21Affected Software2
Prion
Prion
added 2024/03/05 12:15 p.m.23 views

Spoofing

In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - fix infinite loop on requests not multiple of WORDSZ The commit referenced in the Fixes tag removed the 'break' from the else branch in qcomrngread, causing an infinite loop whenever 'max' is not a multiple of...

7.3AI score0.00012EPSS
Exploits0References6
Cvelist
Cvelist
added 2024/03/05 11:18 a.m.21 views

CVE-2022-48630 crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ

In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - fix infinite loop on requests not multiple of WORDSZ The commit referenced in the Fixes tag removed the 'break' from the else branch in qcomrngread, causing an infinite loop whenever 'max' is not a multiple of...

7.5AI score0.00012EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2023/03/20 12:0 a.m.39 views

CBL Mariner 2.0 Security Update: kernel (CVE-2021-43389)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-43389 advisory. - An issue was discovered in the Linux kernel before 5.14.15. There is an array-index-out-of-bounds flaw in th...

5.5CVSS6.7AI score0.00012EPSS
Exploits1References2
SUSE CVE
SUSE CVE
added 2023/02/15 3:36 a.m.1 views

SUSE CVE-2021-43389

An issue was discovered in the Linux kernel before 5.14.15. There is an array-index-out-of-bounds flaw in the detachcapictr function in drivers/isdn/capi/kcapi.c...

4.7CVSS6.7AI score0.00012EPSS
Exploits1References36
RedHat Linux
RedHat Linux
added 2022/05/10 1:58 p.m.1 views

kernel: an array-index-out-bounds in detach_capi_ctr in drivers/isdn/capi/kcapi.c

An improper validation of an array index and out of bounds memory read in the Linux kernel's Integrated Services Digital Network ISDN functionality was found in the way users call ioctl CMTPCONNADD. A local user could use this flaw to crash the system or starve the resources causing denial of...

5.5CVSS6.6AI score0.00012EPSS
Exploits1References6
RedHat Linux
RedHat Linux
added 2022/05/10 1:43 p.m.2 views

kernel: an array-index-out-bounds in detach_capi_ctr in drivers/isdn/capi/kcapi.c

An improper validation of an array index and out of bounds memory read in the Linux kernel's Integrated Services Digital Network ISDN functionality was found in the way users call ioctl CMTPCONNADD. A local user could use this flaw to crash the system or starve the resources causing denial of...

5.5CVSS6.6AI score0.00012EPSS
Exploits1References6
OSV
OSV
added 2021/11/04 7:15 p.m.3 views

AZL-6604 CVE-2021-43389 affecting package kernel for versions less than 5.10.78.1-1

An issue was discovered in the Linux kernel before 5.14.15. There is an array-index-out-of-bounds flaw in the detachcapictr function in drivers/isdn/capi/kcapi.c...

5.5CVSS6.7AI score0.00012EPSS
Exploits1References1
OSV
OSV
added 2021/11/04 7:15 p.m.1 views

DEBIAN-CVE-2021-43389

An issue was discovered in the Linux kernel before 5.14.15. There is an array-index-out-of-bounds flaw in the detachcapictr function in drivers/isdn/capi/kcapi.c...

5.5CVSS6.4AI score0.00012EPSS
Exploits1References1
Debian CVE
Debian CVE
added 2021/11/04 6:39 p.m.68 views

CVE-2021-43389

An issue was discovered in the Linux kernel before 5.14.15. There is an array-index-out-of-bounds flaw in the detachcapictr function in drivers/isdn/capi/kcapi.c...

5.5CVSS6.5AI score0.00012EPSS
Exploits1
Rows per page
Query Builder