Lucene search
+L

7475 matches found

ATTACKERKB
ATTACKERKB
added 2022/08/04 10:15 a.m.4 views

CVE-2022-2652

Depending on the way the format strings in the card label are crafted it's possible to leak kernel stack memory. There is also the possibility for DoS due to the v4l2loopback kernel module crashing when providing the card label on request reproduce e.g. with many %s modifiers in a row...

7.3CVSS6.8AI score0.00334EPSS
SaveExploits1References3
OSV
OSV
added 2022/08/04 10:15 a.m.1 views

DEBIAN-CVE-2022-2652

Depending on the way the format strings in the card label are crafted it's possible to leak kernel stack memory. There is also the possibility for DoS due to the v4l2loopback kernel module crashing when providing the card label on request reproduce e.g. with many %s modifiers in a row...

6CVSS6.5AI score0.00334EPSS
SaveExploits1References1
OSV
OSV
added 2022/08/04 10:15 a.m.16 views

UBUNTU-CVE-2022-2652

Depending on the way the format strings in the card label are crafted it's possible to leak kernel stack memory. There is also the possibility for DoS due to the v4l2loopback kernel module crashing when providing the card label on request reproduce e.g. with many %s modifiers in a row...

7.3CVSS5.8AI score0.00334EPSS
SaveExploits1References4
OSV
OSV
added 2022/08/04 9:35 a.m.24 views

CVE-2022-2652 Use of Externally-Controlled Format String in umlaeute/v4l2loopback

Depending on the way the format strings in the card label are crafted it's possible to leak kernel stack memory. There is also the possibility for DoS due to the v4l2loopback kernel module crashing when providing the card label on request reproduce e.g. with many %s modifiers in a row...

7.3CVSS6.4AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2022/08/04 12:0 a.m.10 views

PT-2022-17916 · Unknown +3 · V4L2Loopback +3

Name of the Vulnerable Software and Affected Versions: v4l2loopback affected versions not specified Description: The issue allows for potential kernel stack memory leakage due to improperly crafted format strings in the card label. Additionally, there is a possibility of a Denial of Service DoS...

7.3CVSS7.1AI score0.00334EPSS
SaveExploits1References21
CNNVD
CNNVD
added 2022/08/04 12:0 a.m.9 views

v4l2loopback 格式化字符串错误漏洞

v4l2loopback is a kernel module for creating V4L2 loopback devices by umläute individual developers. A formatting string error vulnerability exists in v4l2loopback, which stems from potentially leaking kernel stack memory based on the way the string is formatted in the card label, as well as...

7.3CVSS6.8AI score0.00334EPSS
SaveExploits1References4
OSV
OSV
added 2022/08/01 12:0 a.m.14 views

ASB-A-233972091

'remappfnrange' here may map out of size kernel memory for example, may map the kernel area, and because the 'vma-vmpageprot' can also be controlled by userspace, so userspace may map the kernel area to be writable, which is easy to be exploited...

9.8CVSS7AI score0.00282EPSS
SaveExploits0References1
OSV
OSV
added 2022/08/01 12:0 a.m.13 views

ASB-A-232441339

The PowerVR GPU driver allows unprivileged apps to allocated pinned memory, unpin it which makes it available to be freed, and continue using the page in GPU calls. No privileges required and this results in kernel memory corruption...

9.8CVSS6.9AI score0.00362EPSS
SaveExploits0References1
Ubuntu
Ubuntu
added 2022/07/28 11:48 p.m.137 views

USN-5541-1: Linux kernel (Azure) vulnerabilities

Eric Biederman discovered that the cgroup process migration implementation in the Linux kernel did not perform permission checks correctly in some situations. A local attacker could possibly use this to gain administrative privileges. CVE-2021-4197 Jann Horn discovered that the FUSE file system i...

7.8CVSS6.7AI score0.01581EPSS
SaveExploits3
Tenable Nessus
Tenable Nessus
added 2022/07/21 12:0 a.m.60 views

Amazon Linux 2 : kernel (ALASKERNEL-5.10-2022-016)

The version of kernel installed on the remote host is prior to 5.10.126-117.518. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2022-016 advisory. Due to the small table perturb size, a memory leak flaw was found in the Linux kernel's TCP source port...

8.2CVSS6.9AI score0.03865EPSS
SaveExploits11References19
Tenable Nessus
Tenable Nessus
added 2022/07/21 12:0 a.m.45 views

AlmaLinux 8 : kernel (5316) (ALSA-2022:5316)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:5316 advisory. - A buffer over-read at the framebuffer layer in the fbcon code in the Linux kernel before 5.8.15 could be used by local attackers to read kernel memory,...

7.8CVSS7AI score0.05524EPSS
SaveExploits2References3
CNNVD
CNNVD
added 2022/07/20 12:0 a.m.8 views

多款Apple产品 缓冲区错误漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A buffer error vulnerability exists in Apple iOS version 15.6 and iPadOS version 15.6, which stems from an application tha...

5.5CVSS6.7AI score0.00248EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2022/07/20 12:0 a.m.9 views

PT-2022-21503 · Apple · Ios +4

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 15.6 iPadOS versions prior to 15.6 tvOS versions prior to 15.6 macOS Monterey versions prior to 12.5 Description: The issue allows an app to potentially disclose kernel memory due to inadequate memory handling...

5.5CVSS4.9AI score0.00577EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2022/07/20 12:0 a.m.10 views

多款Apple产品 缓冲区错误漏洞

Apple iOS and Apple iPadOS are products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets. A buffer error vulnerability exists in Apple iOS prior to 15.6 and iPadOS prior to 15.6, which stems from a boundary condition i...

5.5CVSS7AI score0.00752EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
added 2022/07/20 12:0 a.m.4 views

PT-2022-21493 · Apple · Macos Monterey +5

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 8.7 tvOS versions prior to 15.6 iOS versions prior to 15.6 iPadOS versions prior to 15.6 macOS Monterey versions prior to 12.5 Description: An out-of-bounds read issue was addressed with improved bounds checking, whi...

5.5CVSS5.3AI score0.00752EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2022/07/20 12:0 a.m.8 views

Apple iOS 和 iPadOS 缓冲区错误漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A buffer error vulnerability exists in Apple iOS and iPadOS that originates from an application that could cause the syste...

7.8CVSS7.5AI score0.00755EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2022/07/20 12:0 a.m.7 views

PT-2022-21511 · Apple · Ios +3

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.5 tvOS versions prior to 15.6 iOS versions prior to 15.6 iPadOS versions prior to 15.6 Description: The issue allows an app to potentially cause unexpected system termination or write kernel memory due to inadequate...

7.8CVSS6.6AI score0.00755EPSS
SaveExploits0References11
CNNVD
CNNVD
added 2022/07/20 12:0 a.m.4 views

多款Apple产品 缓冲区错误漏洞

Apple iOS and Apple iPadOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A buffer error vulnerability exists in Apple iOS and iPadOS, which can be exploited by remote attackers to cause...

9.1CVSS7.3AI score0.027EPSS
SaveExploits0References11
CNNVD
CNNVD
added 2022/07/20 12:0 a.m.7 views

Apple iOS 和 iPadOS 信息泄露漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. Apple iOS version 15.6 and iPadOS version 15.6 contain an information disclosure vulnerability that originates from an...

5.5CVSS5.7AI score0.00225EPSS
SaveExploits0References8
OSV
OSV
added 2022/07/18 3:15 p.m.10 views

DEBIAN-CVE-2021-33655

When sending malicous data to kernel by ioctl cmd FBIOPUTVSCREENINFO,kernel will write memory out of bounds...

6.7CVSS6.5AI score0.00312EPSS
SaveExploits0References1
Rows per page
Query Builder