Lucene search
K

764 matches found

ATTACKERKB
ATTACKERKB
added 2022/07/27 2:0 p.m.0 views

CVE-2022-2402

The vulnerability in the driver dlpfde.sys enables a user logged into the system to perform system calls leading to kernel stack overflow, resulting in a system crash, for instance, a BSOD...

6.5CVSS5.9AI score0.00057EPSS
Exploits0References2Affected Software2
RedHat Linux
RedHat Linux
added 2022/05/10 1:58 p.m.1 views

kernel: stack information leak in infiniband RDMA

A flaw was found in the Linux kernel's implementation of RDMA over infiniband. An attacker with a privileged local account can leak kernel stack information when issuing commands to the /dev/infiniband/rdmacm device node. While this access is unlikely to leak sensitive user information, it can be...

2.3CVSS6.7AI score0.00016EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2022/05/10 1:43 p.m.0 views

kernel: stack information leak in infiniband RDMA

A flaw was found in the Linux kernel's implementation of RDMA over infiniband. An attacker with a privileged local account can leak kernel stack information when issuing commands to the /dev/infiniband/rdmacm device node. While this access is unlikely to leak sensitive user information, it can be...

2.3CVSS6.7AI score0.00016EPSS
Exploits0References4
NVD
NVD
added 2022/03/10 5:47 p.m.11 views

CVE-2022-25819

OOB read vulnerability in hdcp2 device node prior to SMR Mar-2022 Release 1 allow an attacker to view Kernel stack memory...

5.5CVSS0.00018EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/03/10 5:47 p.m.1 views

CVE-2022-25819

OOB read vulnerability in hdcp2 device node prior to SMR Mar-2022 Release 1 allow an attacker to view Kernel stack memory...

5.5CVSS6.1AI score0.00018EPSS
Exploits0References2
Prion
Prion
added 2022/03/10 5:47 p.m.9 views

Stack overflow

OOB read vulnerability in hdcp2 device node prior to SMR Mar-2022 Release 1 allow an attacker to view Kernel stack memory...

2.1CVSS5.3AI score0.00018EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2022/03/10 12:0 a.m.1 views

Samsung hdcp2缓冲区错误漏洞

Samsung hdcp2 is a system from Samsung South Korea that protects output DVD content from copying via HDMI. A security vulnerability exists in Samsung hdcp2 that allows an attacker to view kernel stack memory...

5.5CVSS5.8AI score0.00018EPSS
Exploits0References2
Cvelist
Cvelist
added 2022/03/08 1:47 p.m.11 views

CVE-2022-25819

OOB read vulnerability in hdcp2 device node prior to SMR Mar-2022 Release 1 allow an attacker to view Kernel stack memory...

5.3CVSS5.6AI score0.00018EPSS
Exploits0References1
CVE
CVE
added 2022/03/08 1:47 p.m.91 views

CVE-2022-25819

CVE-2022-25819 is an OOB read vulnerability in the hdcp2 device node prior to Samsung SMR Mar-2022 Release 1, allowing an attacker to view kernel stack memory. Affected component: hdcp2 device node; root cause: out-of-bounds read. Impact: potential kernel memory exposure. Remediation: Samsung pro...

5.5CVSS5.3AI score0.00018EPSS
Exploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/09/13 12:0 a.m.55 views

OracleVM 3.4 : kernel-uek (OVMSA-2021-0030)

The remote OracleVM system is missing necessary patches to address security updates: - In the Android kernel in Pixel C USB monitor driver there is a possible OOB write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User...

9.8CVSS6.5AI score0.00337EPSS
Exploits3References17
Veracode
Veracode
added 2021/08/18 5:54 p.m.6 views

Information Disclosure

Linux is vulnerability information disclosure. The vulnerability exists due to uninitialized data structure from the kernel stack memory...

5.5CVSS6.2AI score0.00052EPSS
Exploits1References9Affected Software3
NVD
NVD
added 2021/08/16 10:15 p.m.12 views

CVE-2021-36282

Dell EMC PowerScale OneFS versions 8.2.x - 9.1.0.x contain a use of uninitialized resource vulnerability. This can potentially allow an authenticated user with ISIPRIVLOGINCONSOLE or ISIPRIVLOGINSSH privileges to gain access up to 24 bytes of data within the /ifs kernel stack under certain...

3.3CVSS0.00054EPSS
Exploits0References1
OSV
OSV
added 2021/08/16 10:15 p.m.0 views

CVE-2021-36282

Dell EMC PowerScale OneFS versions 8.2.x - 9.1.0.x contain a use of uninitialized resource vulnerability. This can potentially allow an authenticated user with ISIPRIVLOGINCONSOLE or ISIPRIVLOGINSSH privileges to gain access up to 24 bytes of data within the /ifs kernel stack under certain...

3.3CVSS5.7AI score
Exploits0References1
Prion
Prion
added 2021/08/16 10:15 p.m.11 views

Design/Logic Flaw

Dell EMC PowerScale OneFS versions 8.2.x - 9.1.0.x contain a use of uninitialized resource vulnerability. This can potentially allow an authenticated user with ISIPRIVLOGINCONSOLE or ISIPRIVLOGINSSH privileges to gain access up to 24 bytes of data within the /ifs kernel stack under certain...

2.1CVSS4.2AI score0.00054EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/08/16 10:0 p.m.13 views

CVE-2021-36282

Dell EMC PowerScale OneFS versions 8.2.x - 9.1.0.x contain a use of uninitialized resource vulnerability. This can potentially allow an authenticated user with ISIPRIVLOGINCONSOLE or ISIPRIVLOGINSSH privileges to gain access up to 24 bytes of data within the /ifs kernel stack under certain...

2.5CVSS4.4AI score0.00054EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2021/07/15 12:0 a.m.390 views

SUSE SLES12 Security Update : kernel (SUSE-SU-2021:2321-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2321-1 advisory. - An issue was discovered in the Linux kernel before 5.0.19. The XFRM subsystem has a use-after-free, related to an xfrmstatefini...

7.8CVSS7.8AI score0.00473EPSS
Exploits8References104
OSV
OSV
added 2021/07/14 3:5 p.m.11 views

SUSE-SU-2021:2324-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-33624: Fixed a bug which allows unprivileged BPF program to leak the contents of arbitrary kernel memory and therefore, of all physical memory via a...

7.8CVSS7.3AI score0.00473EPSS
Exploits8References96
OSV
OSV
added 2021/06/28 9:16 p.m.7 views

MGASA-2021-0295 Updated kernel-linus packages fix security vulnerabilities

This kernel-linus update is based on upstream 5.10.46 and fixes at least the following security issues: In kernel/bpf/verifier.c in the Linux kernel before 5.12.13, a branch can be mispredicted e.g., because of type confusion and consequently an unprivileged BPF program can read arbitrary memory...

5.5CVSS5.7AI score0.00473EPSS
Exploits4References3
Mageia
Mageia
added 2021/06/28 9:16 p.m.70 views

Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 5.10.46 and fixes at least the following security issues: In kernel/bpf/verifier.c in the Linux kernel before 5.12.13, a branch can be mispredicted e.g., because of type confusion and consequently an unprivileged BPF program can read arbitrary memory...

5.5CVSS6.1AI score0.00473EPSS
Exploits4References2
OSV
OSV
added 2021/06/28 9:16 p.m.7 views

MGASA-2021-0296 Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 5.10.46 and fixes at least the following security issues: In kernel/bpf/verifier.c in the Linux kernel before 5.12.13, a branch can be mispredicted e.g., because of type confusion and consequently an unprivileged BPF program can read arbitrary memory...

5.5CVSS5.7AI score0.00473EPSS
Exploits4References3
Rows per page
Query Builder