Lucene search
K

11 matches found

Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.2 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000800)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000800 advisory. The keyrejectandlink function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure that a certain data structure is initialized, which allows loc...

5.5CVSS6.4AI score0.00055EPSS
Exploits0References51
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:0 a.m.1 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003307)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003307 advisory. The keyrejectandlink function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure that a certain data structure is initialized, which allows loc...

5.5CVSS6.4AI score0.00055EPSS
Exploits0References51
F5 Networks
F5 Networks
added 2023/02/21 6:53 p.m.55 views

K55672042: Linux kernel vulnerability CVE-2016-4470

Security Advisory Description The keyrejectandlink function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure that a certain data structure is initialized, which allows local users to cause a denial of service system crash via vectors involving a crafted keyctl request2...

5.5CVSS6AI score0.00055EPSS
Exploits0Affected Software24
RedHat Linux
RedHat Linux
added 2016/11/01 10:58 a.m.1 views

kernel: Uninitialized variable in request_key handling causes kernel crash in error handling path

A flaw was found in the Linux kernel's keyring handling code: the keyrejectandlink function could be forced to free an arbitrary memory block. An attacker could use this flaw to trigger a use-after-free condition on the system, potentially allowing for privilege escalation...

5.5CVSS6.7AI score0.00055EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2016/09/08 12:0 a.m.55 views

SUSE SLES11 Security Update : kernel (SUSE-SU-2016:2245-1)

The SUSE Linux Enterprise 11 SP3 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2016-3955: The usbiprecvxbuff function in drivers/usb/usbip/usbipcommon.c in the Linux kernel allowed remote attackers to cause a denial of service...

10CVSS7.2AI score0.51991EPSS
Exploits26References98
Tenable Nessus
Tenable Nessus
added 2016/09/02 12:0 a.m.50 views

SUSE SLES11 Security Update : kernel (SUSE-SU-2016:2018-1)

The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2016-5829: Multiple heap-based buffer overflows in the hiddevioctlusage function in drivers/hid/usbhid/hiddev.c in the Linux kernel allowed local users to...

7.8CVSS6.9AI score0.05493EPSS
Exploits10References18
Mageia
Mageia
added 2016/08/31 3:32 p.m.81 views

Updated kernel-tmb packages fix security vulnerabilities

This update is based on the upstream 4.4.16 kernel and fixes at least theese security issues: nfsd in the Linux kernel through 4.6.3 allows local users to bypass intended file-permission restrictions by setting a POSIX ACL, related to nfs2acl.c, nfs3acl.c, and nfs4acl.c. CVE-2016-1237. The...

7.8CVSS4AI score0.51991EPSS
Exploits16References4
RedHat Linux
RedHat Linux
added 2016/08/02 6:21 p.m.3 views

kernel: Uninitialized variable in request_key handling causes kernel crash in error handling path

A flaw was found in the Linux kernel's keyring handling code: the keyrejectandlink function could be forced to free an arbitrary memory block. An attacker could use this flaw to trigger a use-after-free condition on the system, potentially allowing for privilege escalation...

5.5CVSS6.7AI score0.00055EPSS
Exploits0References4
OSV
OSV
added 2016/06/27 10:59 a.m.0 views

DEBIAN-CVE-2016-4470

The keyrejectandlink function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure that a certain data structure is initialized, which allows local users to cause a denial of service system crash via vectors involving a crafted keyctl request2 command...

5.5CVSS5.8AI score0.00055EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2016/06/27 10:0 a.m.52 views

CVE-2016-4470

The keyrejectandlink function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure that a certain data structure is initialized, which allows local users to cause a denial of service system crash via vectors involving a crafted keyctl request2 command...

5.5CVSS6.1AI score0.00055EPSS
Exploits0
CNVD
CNVD
added 2016/06/19 12:0 a.m.1 views

Linux kernel 'key_reject_and_link()' denial of service vulnerability

Linux kernel is an open source operating system. The 'keyrejectandlink' function in the Linux kernel fails to properly initialize variables, allowing a local attacker to exploit the vulnerability with a use-after-release attack to crash the system...

5.5CVSS6.2AI score0.00055EPSS
Exploits0References1
Rows per page
Query Builder