Lucene search
+L

81 matches found

BDU FSTEC
BDU FSTEC
•added 2021/01/13 12:00 a.m.•14 views

The vulnerability in the kernel/trace/ring_buffer.c component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the kernel/trace/ringbuffer.c component of the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.7CVSS6.3AI score0.00279EPSS
SaveExploits0References21Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/11 12:00 a.m.•7 views

CVE-2020-27825: Concurrent Execution using Shared Resource with Improper Synchronization

A use-after-free flaw was found in kernel/trace/ringbuffer.c in Linux kernel before 5.10-rc1. There was a race problem in traceopen and resize of cpu buffer running parallely on different cpus, may cause a denial of service problem DOS. This flaw could even allow a local attacker with special use...

5.7CVSS5.9AI score0.00279EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2020/05/26 8:40 p.m.•22 views

kernel: double free may be caused by the function allocate_trace_buffer in the file kernel/trace/trace.c

A flaw was found in the allocatetracebuffer in kernel/trace/trace.c in the debug subsystem, when failure to allocate a dynamic percpu area, a resource cleanup is called. The pointer buf-buffer still holds the address and is not set to NULL, which can cause a use-after-free problem, leading to a...

7.8CVSS7.1AI score0.00363EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2020/05/15 12:00 a.m.•114 views

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:1255-1)

The SUSE Linux Enterprise 12 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-11494: An issue was discovered in slcbump in drivers/net/can/slcan.c, which allowed attackers to read uninitialized canframe data, potentially containing...

10CVSS7.1AI score0.16473EPSS
SaveExploits15References192
RedHat Linux
RedHat Linux
•added 2020/05/12 3:16 p.m.•10 views

kernel: double free may be caused by the function allocate_trace_buffer in the file kernel/trace/trace.c

A flaw was found in the allocatetracebuffer in kernel/trace/trace.c in the debug subsystem, when failure to allocate a dynamic percpu area, a resource cleanup is called. The pointer buf-buffer still holds the address and is not set to NULL, which can cause a use-after-free problem, leading to a...

7.8CVSS7.1AI score0.00363EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2020/01/23 12:00 a.m.•53 views

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1671)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.3AI score0.00708EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/12 12:00 a.m.•2 views

CVE-2019-19768: Use After Free

In the Linux kernel 5.4.0-rc2, there is a use-after-free read in the blkaddtrace function in kernel/trace/blktrace.c which is used to fill out a blkiotrace structure and place it in a per-cpu sub-buffer...

7.5CVSS7.2AI score0.0415EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/11/18 12:00 a.m.•1 views

CVE-2019-19072: Missing Release of Memory after Effective Lifetime

A memory leak in the predicateparse function in kernel/trace/traceeventsfilter.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service memory consumption, aka CID-96c5c6e6a5b6...

4.9CVSS6.2AI score0.00422EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/09/04 12:00 a.m.•4 views

CVE-2017-18595: Double Free

An issue was discovered in the Linux kernel before 4.14.11. A double free may be caused by the function allocatetracebuffer in the file kernel/trace/trace.c...

7.8CVSS6.2AI score0.00363EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/06/24 12:00 a.m.•2 views

CVE-2018-12714: Out-of-bounds Write

An issue was discovered in the Linux kernel through 4.17.2. The filter parsing in kernel/trace/traceeventsfilter.c could be called with no filter, which is an N=0 case when it expected at least one line to have been read, thus making the N-1 index invalid. This allows attackers to cause a denial ...

10CVSS7.5AI score0.05073EPSS
SaveExploits1References2
OSV
OSV
•added 2018/03/26 3:28 p.m.•15 views

SUSE-RU-2018:0821-1 Recommended update for drbd, drbd-utils

This update for drbd and drbd-utils provides the following fixes: Changes in drbd-utils: - Make sure the full bitmap gets properly propagated in drbdmeta. Also make sure the ID is kept when downgrading from v9 to v8. bsc1037109 - Support passing '--force' to drbdadm dump-md. bsc1077176 - Fix a...

5.6CVSS6.7AI score0.74041EPSS
SaveExploits10References9
OSV
OSV
•added 2018/03/22 1:45 p.m.•15 views

SUSE-RU-2018:0779-1 Recommended update for drbd and drbd-utils

This update for drbd and drbd-utils provides the following fixes: Changes in drbd: - Fix a possible kernel trace while starting the initial syncing of a stacked drbd. bsc1058770 - Fix auto promotion after split-brain. bsc1074228 - Support passing '--force' to drbdadm dump-md. bsc1077176 - Many...

5.6CVSS6.7AI score0.74041EPSS
SaveExploits10References12
Positive Technologies
Positive Technologies
•added 2018/01/09 12:00 a.m.•18 views

PT-2019-8526 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.14.11 Description: An issue was discovered in the Linux kernel. A double free may be caused by the function allocate trace buffer in the file kernel/trace/trace.c. Recommendations: For Linux kernel versions...

10CVSS6.7AI score0.98745EPSS
SaveExploits135References1205
OSV
OSV
•added 2017/05/12 3:29 p.m.•21 views

CVE-2017-0630

An information disclosure vulnerability in the kernel trace subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10,...

4.7CVSS5.2AI score
SaveExploits0References2
OSV
OSV
•added 2017/05/12 3:29 p.m.•68 views

DEBIAN-CVE-2017-0630

An information disclosure vulnerability in the kernel trace subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10,...

4.7CVSS8.2AI score0.01543EPSS
SaveExploits0References1
NVD
NVD
•added 2017/05/12 3:29 p.m.•30 views

CVE-2017-0630

An information disclosure vulnerability in the kernel trace subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10,...

4.7CVSS4.5AI score0.01543EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2017/05/12 3:29 p.m.•33 views

CVE-2017-0630

An information disclosure vulnerability in the kernel trace subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10,...

4.7CVSS6.3AI score0.01543EPSS
SaveExploits0References2
Prion
Prion
•added 2017/05/12 3:29 p.m.•25 views

Information disclosure

An information disclosure vulnerability in the kernel trace subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10,...

2.6CVSS3.8AI score0.01543EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2017/05/12 3:29 p.m.•11 views

UBUNTU-CVE-2017-0630

An information disclosure vulnerability in the kernel trace subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10,...

4.7CVSS6.1AI score0.01543EPSS
SaveExploits0References3
CVE
CVE
•added 2017/05/12 3:00 p.m.•133 views

CVE-2017-0630

CVE-2017-0630 : Information disclosure in Android’s kernel trace subsystem. An attacker must first compromise a privileged process to access data beyond its permissions. Affected products include Android kernel versions 3.10 and 3.18 (Android ID A-34277115). The description notes an information d...

4.7CVSS3.6AI score0.01543EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder