Lucene search
K

16 matches found

Tenable Nessus
Tenable Nessus
added 2026/01/14 12:0 a.m.2 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001762)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001762 advisory. A denial of service vulnerability due to a deadlock was found in sctpautoasconfinit in net/sctp/socket.c in the Linux kernels SCTP subsystem. This flaw allows guests...

5.5CVSS6.8AI score0.00161EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2008-3512

Malware in sbrugna...

7.8CVSS6AI score0.03494EPSS
Exploits2References16
Cvelist
Cvelist
added 2025/04/16 2:12 p.m.9 views

CVE-2025-22062 sctp: add mutual exclusion in proc_sctp_do_udp_port()

In the Linux kernel, the following vulnerability has been resolved: sctp: add mutual exclusion in procsctpdoudpport We must serialize calls to sctpudpsockstop and sctpudpsockstart or risk a crash as syzbot reported: Oops: general protection fault, probably for non-canonical address...

0.00217EPSS
Exploits0References7
Tenable Nessus
Tenable Nessus
added 2025/03/06 12:0 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2024-53139

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: sctp: fix possible UAF in sctpv6available A lockdep report 1 with CONFIGPROVERCULIST=y hints...

7.8CVSS6.4AI score0.00211EPSS
Exploits0References2
OSV
OSV
added 2025/01/19 10:17 a.m.5 views

CVE-2025-21637 sctp: sysctl: udp_port: avoid using current->nsproxy

In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: udpport: avoid using current-nsproxy As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons: - Inconsistency: getting info from the...

5.5CVSS6AI score0.00207EPSS
Exploits0References9
SUSE CVE
SUSE CVE
added 2024/06/04 12:25 p.m.2 views

SUSE CVE-2024-0639

A denial of service vulnerability due to a deadlock was found in sctpautoasconfinit in net/sctp/socket.c in the Linux kernel's SCTP subsystem. This flaw allows guests with local user privileges to trigger a deadlock and potentially crash the system...

4.7CVSS6.4AI score0.00161EPSS
Exploits0References21
CVE
CVE
added 2024/05/21 3:3 p.m.87 views

CVE-2021-47397

CVE-2021-47397 : In the Linux kernel, a null-pointer dereference could occur in SCTP processing (sctp_rcv_ootb) if skb_header_pointer is NULL and not checked before use. The issue stems from missing NULL checks in net/sctp/input.c:705, with call traces through sctp6_rcv and IPv6 delivery paths. M...

5.5CVSS6.7AI score0.00251EPSS
Exploits0References6Affected Software1
OSV
OSV
added 2024/02/28 9:15 a.m.3 views

CVE-2021-46999

In the Linux kernel, the following vulnerability has been resolved: sctp: do asoc update earlier in sctpsfdodupcooka There's a panic that occurs in a few of envs, the call trace is as below: general protection fault, ... 0x29acd70f1000a: 0000 1 SMP PTI RIP:...

7.8CVSS6.8AI score
Exploits0References6
OSV
OSV
added 2024/01/17 4:15 p.m.1 views

DEBIAN-CVE-2024-0639

A denial of service vulnerability due to a deadlock was found in sctpautoasconfinit in net/sctp/socket.c in the Linux kernel’s SCTP subsystem. This flaw allows guests with local user privileges to trigger a deadlock and potentially crash the system...

5.5CVSS6.2AI score0.00161EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/01/17 3:14 p.m.2 views

CVE-2024-0639 Kernel: potential deadlock on &net->sctp.addr_wq_lock leading to dos

A denial of service vulnerability due to a deadlock was found in sctpautoasconfinit in net/sctp/socket.c in the Linux kernel’s SCTP subsystem. This flaw allows guests with local user privileges to trigger a deadlock and potentially crash the system...

5.5CVSS7.4AI score0.00161EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2021/06/23 12:0 a.m.232 views

Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-4999-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4999-1 advisory. Norbert Slusarek discovered a race condition in the CAN BCM networking protocol of the Linux kernel leading to multiple use-after-free vulnerabilities. A...

8.8CVSS7.7AI score0.07604EPSS
Exploits10References18
Tenable Nessus
Tenable Nessus
added 2017/02/28 12:0 a.m.95 views

F5 Networks BIG-IP : Linux kernel SCTP vulnerability (K37510383)

The sctpinit function in net/sctp/protocol.c in the Linux kernel before 4.2.3 has an incorrect sequence of protocol-initialization steps, which allows local users to cause a denial of service panic or memory corruption by creating SCTP sockets before all of the steps have finished. CVE-2015-5283 ...

4.7CVSS6.5AI score0.00549EPSS
Exploits1References2
OSV
OSV
added 2016/11/28 3:59 a.m.5 views

CVE-2016-9555

The sctpsfootb function in net/sctp/smstatefuns.c in the Linux kernel before 4.8.8 lacks chunk-length checking for the first chunk, which allows remote attackers to cause a denial of service out-of-bounds slab access or possibly have unspecified other impact via crafted SCTP data...

9.8CVSS9.5AI score
Exploits0References23
OpenVAS
OpenVAS
added 2015/09/18 12:0 a.m.43 views

F5 BIG-IP - Linux kernel SCTP vulnerability CVE-2015-1421

The remote host is missing a security patch. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/h:f5:big-ip"; if description...

10CVSS6.5AI score0.09897EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2015/09/10 12:0 a.m.89 views

F5 Networks BIG-IP : Linux kernel SCTP vulnerability (K17242)

Use-after-free vulnerability in the sctpassocupdate function in net/sctp/associola.c in the Linux kernel before 3.18.8 allows remote attackers to cause a denial of service slab corruption and panic or possibly have unspecified other impact by triggering an INIT collision that leads to improper...

10CVSS7AI score0.09897EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2015/01/09 12:0 a.m.39 views

F5 BIG-IP - Linux kernel SCTP vulnerabilities CVE-2014-3673 and CVE-2014-3687

F5 BIG-IP is prone to a remote denial-of-service vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/h:f5:big-ip"; if...

7.8CVSS6.6AI score0.08579EPSS
Exploits2References3
Rows per page
Query Builder