Lucene search
K

137 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-48057

Malicious code in bioql PyPI...

7.5CVSS6.8AI score0.00088EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.3 views

EulerOS 2.0 SP12 : grub2 (EulerOS-SA-2025-2040)

According to the versions of the grub2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU GRUB aka GRUB2 through 2.12 does not use a constant-time algorithm for grubcryptomemcmp and thus allows side-channel attacks.CVE-2024-56738...

5.3CVSS7AI score0.00038EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.2 views

EulerOS 2.0 SP10 : grub2 (EulerOS-SA-2025-2070)

According to the versions of the grub2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU GRUB aka GRUB2 through 2.12 does not use a constant-time algorithm for grubcryptomemcmp and thus allows side-channel attacks.CVE-2024-56738...

5.3CVSS7AI score0.00038EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.3 views

EulerOS 2.0 SP12 : grub2 (EulerOS-SA-2025-2009)

According to the versions of the grub2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU GRUB aka GRUB2 through 2.12 does not use a constant-time algorithm for grubcryptomemcmp and thus allows side-channel attacks.CVE-2024-56738...

5.3CVSS7AI score0.00038EPSS
Exploits0References2
OSV
OSV
added 2025/09/05 12:57 p.m.0 views

SUSE-SU-2025:20654-1 Security update for grub2

This update for grub2 fixes the following issues: - CVE-2024-56738: Side-channel attack due to not constant-timealgorithm in grubcryptomemcmp bsc1234959...

5.3CVSS7.3AI score0.00038EPSS
Exploits0References3
SUSE Linux
SUSE Linux
added 2025/09/05 12:55 p.m.2 views

Security update for grub2

This update for grub2 fixes the following issues: CVE-2024-56738: Side-channel attack due to not constant-timealgorithm in grubcryptomemcmp bsc1234959. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

5.7CVSS6.9AI score0.00038EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/08/16 12:0 a.m.2 views

SUSE SLED15 / SLES15 : Recommended update for grub2 (SUSE-SU-2025:02813-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:02813-1 advisory. - CVE-2024-56738: Fixed side-channel attack due to not constant-time algorithm in grubcryptomemcmp bsc1234959 Other...

5.3CVSS7AI score0.00038EPSS
Exploits0References7
SUSE Linux
SUSE Linux
added 2025/08/15 12:53 p.m.2 views

Recommended update for grub2

This update for grub2 fixes the following issues: CVE-2024-56738: Fixed side-channel attack due to not constant-time algorithm in grubcryptomemcmp bsc1234959 Other fixes: - Fix test -f and -s do not work properly over the network files served via tftp and http bsc1246157, bsc1246237 - Skip mount...

5.7CVSS7.3AI score0.00038EPSS
Exploits0References10
OSV
OSV
added 2025/08/15 12:53 p.m.0 views

SUSE-SU-2025:02813-1 Recommended update for grub2

This update for grub2 fixes the following issues: - CVE-2024-56738: Fixed side-channel attack due to not constant-time algorithm in grubcryptomemcmp bsc1234959 Other fixes: - Fix test -f and -s do not work properly over the network files served via tftp and http bsc1246157, bsc1246237 - Skip moun...

5.3CVSS5.8AI score0.00038EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2025/08/12 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2019-7309

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the GNU C Library aka glibc or libc6 through 2.29, the memcmp function for the x32 architecture can incorrectly return zero indicating that the inputs are...

5.5CVSS6.5AI score0.00217EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2025/08/11 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2021-47394

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: unlink table before deleting it syzbot reports following UAF: BUG: KASA...

7.8CVSS5.8AI score0.00015EPSS
Exploits0References2
SUSE Linux
SUSE Linux
added 2025/08/07 9:2 a.m.3 views

Security update for grub2

This update for grub2 fixes the following issues: CVE-2024-56738: Fixed side-channel attack due to not constant-time algorithm in grubcryptomemcmp bsc1234959 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

5.7CVSS7.3AI score0.00038EPSS
Exploits0References4
SUSE Linux
SUSE Linux
added 2025/08/05 10:8 a.m.2 views

Security update for grub2

This update for grub2 fixes the following issues: CVE-2024-56738: Fixed side-channel attack due to not constant-time algorithm in grubcryptomemcmp bsc1234959 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

5.7CVSS7.3AI score0.00038EPSS
Exploits0References4
SUSE Linux
SUSE Linux
added 2025/08/05 10:8 a.m.2 views

Security update for grub2

This update for grub2 fixes the following issues: CVE-2024-56738: Fixed side-channel attack due to not constant-time algorithm in grubcryptomemcmp bsc1234959 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

5.7CVSS7.3AI score0.00038EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/05/23 9:46 a.m.3 views

CVE-2024-25190

l8w8jwt 2.2.1 uses memcmp which is not constant time to verify authentication, which makes it easier to bypass authentication via a timing side channel...

9.8CVSS7AI score0.00044EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 8:7 p.m.6 views

CVE-2021-37847

crypto/digest.c in Pengutronix barebox through 2021.07.0 leaks timing information because memcmp is used during digest verification...

7.5CVSS6.7AI score0.00316EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 1:19 p.m.4 views

CVE-2018-5913

A non-time constant function memcmp is used which creates a side channel that could leak information in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile...

7.8CVSS7AI score0.00094EPSS
Exploits0References1
OSV
OSV
added 2024/12/29 7:15 a.m.0 views

UBUNTU-CVE-2024-56738

GNU GRUB aka GRUB2 through 2.12 does not use a constant-time algorithm for grubcryptomemcmp and thus allows side-channel attacks...

5.3CVSS7.3AI score0.00038EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/12/29 12:0 a.m.2 views

GNU GRUB 安全漏洞

GNU GRUB is a Linux system boot program from the GNU community. A security vulnerability exists in GNU GRUB that stems from grubcryptomemcmp not using a constant time algorithm, no details of the vulnerability are provided at this time...

5.3CVSS6.8AI score0.00038EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2024/07/31 9:12 a.m.15 views

CVE-2024-41016

A flaw was found in the ocfs2xattrfindentry function in the Linux kernel's Oracle Cluster File System version 2 OCFS2. This issue arose due to inadequate bounds checking before a memcmp operation, particularly when handling "non-indexed" extended attributes xattrs that might request additional...

5.5CVSS7.6AI score0.00017EPSS
Exploits0References4
Rows per page
Query Builder