Lucene search
+L

977 matches found

osv_azl
osv_azl
•added 2022/03/25 7:15 p.m.•26 views

AZL-9240 CVE-2022-0494 affecting package kernel for versions less than 5.15.37.1-2

A kernel information leak flaw was identified in the scsiioctl function in drivers/scsi/scsiioctl.c in the Linux kernel. This flaw allows a local attacker with a special user privilege CAPSYSADMIN or CAPSYSRAWIO to create issues with confidentiality...

4.4CVSS6.7AI score0.00416EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/03/25 7:15 p.m.•18 views

CVE-2022-0494

A kernel information leak flaw was identified in the scsiioctl function in drivers/scsi/scsiioctl.c in the Linux kernel. This flaw allows a local attacker with a special user privilege CAPSYSADMIN or CAPSYSRAWIO to create issues with confidentiality...

4.9CVSS6.6AI score0.00416EPSS
SaveExploits0References7
NVD
NVD
•added 2022/03/25 7:15 p.m.•48 views

CVE-2021-4203

A use-after-free read flaw was found in sockgetsockopt in net/core/sock.c due to SOPEERCRED and SOPEERGROUPS race with listen and connect in the Linux kernel. In this flaw, an attacker with a user privileges may crash the system or leak internal kernel information...

6.8CVSS0.01747EPSS
SaveExploits1References6
Prion
Prion
•added 2022/03/25 7:15 p.m.•48 views

Design/Logic Flaw

A use-after-free read flaw was found in sockgetsockopt in net/core/sock.c due to SOPEERCRED and SOPEERGROUPS race with listen and connect in the Linux kernel. In this flaw, an attacker with a user privileges may crash the system or leak internal kernel information...

4.9CVSS6.7AI score0.01747EPSS
SaveExploits1References6Affected Software5
osv_ubuntu
osv_ubuntu
•added 2022/03/25 7:15 p.m.•14 views

UBUNTU-CVE-2021-4203

A use-after-free read flaw was found in sockgetsockopt in net/core/sock.c due to SOPEERCRED and SOPEERGROUPS race with listen and connect in the Linux kernel. In this flaw, an attacker with a user privileges may crash the system or leak internal kernel information...

7.3CVSS6.6AI score0.01747EPSS
SaveExploits1References7
attackerkb
attackerkb
•added 2022/03/25 7:15 p.m.•15 views

CVE-2021-4203

A use-after-free read flaw was found in sockgetsockopt in net/core/sock.c due to SOPEERCRED and SOPEERGROUPS race with listen and connect in the Linux kernel. In this flaw, an attacker with a user privileges may crash the system or leak internal kernel information...

6.8CVSS6.5AI score0.01747EPSS
SaveExploits1References8
Cvelist
Cvelist
•added 2022/03/25 12:00 a.m.•46 views

CVE-2021-4203

A use-after-free read flaw was found in sockgetsockopt in net/core/sock.c due to SOPEERCRED and SOPEERGROUPS race with listen and connect in the Linux kernel. In this flaw, an attacker with a user privileges may crash the system or leak internal kernel information...

7.1AI score0.01747EPSS
SaveExploits1References6
Debian CVE
Debian CVE
•added 2022/03/25 12:00 a.m.•71 views

CVE-2021-4203

A use-after-free read flaw was found in sockgetsockopt in net/core/sock.c due to SOPEERCRED and SOPEERGROUPS race with listen and connect in the Linux kernel. In this flaw, an attacker with a user privileges may crash the system or leak internal kernel information...

6.8CVSS6.2AI score0.01747EPSS
SaveExploits1
CNVD
CNVD
•added 2022/03/14 12:00 a.m.•72 views

Linux kernel denial of service vulnerability (CNVD-2022-69201)

Linux kernel is the kernel used by the Linux Foundation's open source operating system, Linux. Linux kernel is vulnerable to a denial-of-service vulnerability caused by a "use before read" flaw in the sockgetsockopt function in net/core/sock.c. " flaw in the sockgetsockopt function in...

6.8CVSS2.5AI score0.01747EPSS
SaveExploits1References1
Microsoft CVE
Microsoft CVE
•added 2022/03/12 8:00 a.m.•13 views

An out-of-bounds (OOB) memory read flaw was found in the Qualcomm IPC router protocol in the Linux kernel. A missing sanity check allows a local attacker to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability.

...

7.1CVSS7.1AI score0.0072EPSS
SaveExploits1
osv_debian
osv_debian
•added 2022/03/10 5:43 p.m.•15 views

DEBIAN-CVE-2021-3739

A NULL pointer dereference flaw was found in the btrfsrmdevice function in fs/btrfs/volumes.c in the Linux Kernel, where triggering the bug requires ‘CAPSYSADMIN’. This flaw allows a local attacker to crash the system or leak kernel internal information. The highest threat from this vulnerability...

7.1CVSS6.2AI score0.00621EPSS
SaveExploits1References1
Prion
Prion
•added 2022/03/10 5:43 p.m.•34 views

Null pointer dereference

A NULL pointer dereference flaw was found in the btrfsrmdevice function in fs/btrfs/volumes.c in the Linux Kernel, where triggering the bug requires ‘CAPSYSADMIN’. This flaw allows a local attacker to crash the system or leak kernel internal information. The highest threat from this vulnerability...

3.6CVSS6.2AI score0.00621EPSS
SaveExploits1References6Affected Software2
Prion
Prion
•added 2022/03/10 5:41 p.m.•28 views

Design/Logic Flaw

A flaw was found in the permissions of a log file created by kexec-tools. This flaw allows a local unprivileged user to read this file and leak kernel internal information from a previous panic. The highest threat from this vulnerability is to confidentiality. This flaw affects kexec-tools shippe...

2.1CVSS5AI score0.00252EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2022/03/10 12:00 a.m.•13 views

Linux Kernel Resource Management Vulnerability

Linux kernel is the kernel used by the Linux Foundation's open source operating system, Linux. Linux kernel is vulnerable to a denial-of-service vulnerability caused by a "use before read" flaw in the sockgetsockopt function in net/core/sock.c. " flaw in the sockgetsockopt function in...

6.8CVSS7.3AI score0.01747EPSS
SaveExploits1References27
Debian CVE
Debian CVE
•added 2022/03/09 4:29 p.m.•58 views

CVE-2021-20269

A flaw was found in the permissions of a log file created by kexec-tools. This flaw allows a local unprivileged user to read this file and leak kernel internal information from a previous panic. The highest threat from this vulnerability is to confidentiality. This flaw affects kexec-tools shippe...

5.5CVSS4.4AI score0.00252EPSS
SaveExploits0
CVE
CVE
•added 2022/03/07 3:19 p.m.•235 views

CVE-2021-3739

CVE-2021-3739 is a local NULL pointer dereference in the Linux kernel’s btrfs_rm_device() (fs/btrfs/volumes.c) that requires CAP_SYS_ADMIN to trigger. The issue can crash the system or leak kernel information, with impact to availability and, to a lesser extent, confidentiality. Multiple connecte...

7.1CVSS6.4AI score0.00621EPSS
SaveExploits1References6Affected Software1
Cvelist
Cvelist
•added 2022/03/07 3:19 p.m.•37 views

CVE-2021-3739

A NULL pointer dereference flaw was found in the btrfsrmdevice function in fs/btrfs/volumes.c in the Linux Kernel, where triggering the bug requires ‘CAPSYSADMIN’. This flaw allows a local attacker to crash the system or leak kernel internal information. The highest threat from this vulnerability...

6.9AI score0.00621EPSS
SaveExploits1References6
osv_cve
osv_cve
•added 2022/03/04 4:15 p.m.•41 views

CVE-2021-3743

An out-of-bounds OOB memory read flaw was found in the Qualcomm IPC router protocol in the Linux kernel. A missing sanity check allows a local attacker to gain access to out-of-bounds memory, leading to a system crash or a leak of internal kernel information. The highest threat from this...

7.1CVSS6.3AI score0.0072EPSS
SaveExploits1References8
attackerkb
attackerkb
•added 2022/03/04 4:15 p.m.•19 views

CVE-2021-3743

An out-of-bounds OOB memory read flaw was found in the Qualcomm IPC router protocol in the Linux kernel. A missing sanity check allows a local attacker to gain access to out-of-bounds memory, leading to a system crash or a leak of internal kernel information. The highest threat from this...

7.1CVSS6.7AI score0.0072EPSS
SaveExploits1References12
Prion
Prion
•added 2022/03/04 4:15 p.m.•41 views

Design/Logic Flaw

An out-of-bounds OOB memory read flaw was found in the Qualcomm IPC router protocol in the Linux kernel. A missing sanity check allows a local attacker to gain access to out-of-bounds memory, leading to a system crash or a leak of internal kernel information. The highest threat from this...

3.6CVSS6.6AI score0.0072EPSS
SaveExploits1References8Affected Software5
Rows per page
Query Builder