Lucene search
+L

3067 matches found

osv_azl
osv_azl
•added 2024/01/17 4:15 p.m.•27 views

AZL-34873 CVE-2024-0646 affecting package kernel for versions less than 6.6.35.1-4

An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the destination. This flaw allows a local user to crash or potentially escalate their privileges on the system...

7.8CVSS6.7AI score0.00308EPSS
SaveExploits0References1
Prion
Prion
•added 2024/01/17 4:15 p.m.•41 views

Design/Logic Flaw

An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the destination. This flaw allows a local user to crash or potentially escalate their privileges on the system...

4.3CVSS7.1AI score0.00308EPSS
SaveExploits0References19Affected Software2
RedhatCVE
RedhatCVE
•added 2024/01/17 3:18 p.m.•277 views

CVE-2024-0646

An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the destination. This flaw allows a local user to crash or potentially escalate their privileges on the system. Mitigation To...

7CVSS7.1AI score0.00308EPSS
SaveExploits0References4
CVE
CVE
•added 2024/01/17 3:16 p.m.•397 views

CVE-2024-0646

CVE-2024-0646 describes an out-of-bounds memory write in the Linux kernel’s Transport Layer Security path, occurring when a user calls a splice function with a ktls socket as the destination. The issue could allow a local user to crash the system or potentially escalate privileges. Connected advi...

7.8CVSS7.5AI score0.00308EPSS
SaveExploits0References26Affected Software1
osv_cve
osv_cve
•added 2024/01/17 3:16 p.m.•11 views

CVE-2024-0646 Kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination

An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the destination. This flaw allows a local user to crash or potentially escalate their privileges on the system...

7CVSS6.8AI score
SaveExploits0References31
Debian CVE
Debian CVE
•added 2024/01/17 3:16 p.m.•71 views

CVE-2024-0646

An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the destination. This flaw allows a local user to crash or potentially escalate their privileges on the system...

7.8CVSS6.7AI score0.00308EPSS
SaveExploits0
Mend
Mend
•added 2024/01/17 3:16 p.m.•6 views

CVE-2024-0646

An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the destination. This flaw allows a local user to crash or potentially escalate their privileges on the system...

7.8CVSS0.00308EPSS
SaveExploits0References31
Cvelist
Cvelist
•added 2024/01/17 3:16 p.m.•54 views

CVE-2024-0646 Kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination

An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the destination. This flaw allows a local user to crash or potentially escalate their privileges on the system...

7CVSS7.8AI score0.00308EPSS
SaveExploits0References25
SUSE CVE
SUSE CVE
•added 2024/01/16 2:36 a.m.•11 views

SUSE CVE-2023-51257

An invalid memory write issue in Jasper-Software Jasper v.4.1.1 and before allows a local attacker to execute arbitrary code...

4.8CVSS7.4AI score0.00256EPSS
SaveExploits0References6
osv_azl
osv_azl
•added 2024/01/16 2:15 a.m.•18 views

AZL-33325 CVE-2023-51257 affecting package jasper for versions less than 2.0.32-4

An invalid memory write issue in Jasper-Software Jasper v.4.1.1 and before allows a local attacker to execute arbitrary code...

7.8CVSS7AI score0.00256EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2024/01/16 2:15 a.m.•17 views

AZL-34807 CVE-2023-51257 affecting package jasper for versions less than 4.2.1-1

An invalid memory write issue in Jasper-Software Jasper v.4.1.1 and before allows a local attacker to execute arbitrary code...

7.8CVSS7AI score0.00256EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
•added 2024/01/16 2:15 a.m.•52 views

CVE-2023-51257

An invalid memory write issue in Jasper-Software Jasper v.4.1.1 and before allows a local attacker to execute arbitrary code...

4.3CVSS7.5AI score0.00256EPSS
SaveExploits0
Prion
Prion
•added 2024/01/16 2:15 a.m.•38 views

Input validation

An invalid memory write issue in Jasper-Software Jasper v.4.1.1 and before allows a local attacker to execute arbitrary code...

4.3CVSS7.4AI score0.00256EPSS
SaveExploits0References3Affected Software1
osv_ubuntu
osv_ubuntu
•added 2024/01/16 2:15 a.m.•21 views

UBUNTU-CVE-2023-51257

An invalid memory write issue in Jasper-Software Jasper v.4.1.1 and before allows a local attacker to execute arbitrary code...

7.8CVSS7.3AI score0.00256EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2024/01/16 12:00 a.m.•21 views

EulerOS Virtualization 2.10.1 : libwebp (EulerOS-SA-2023-3505)

According to the versions of the libwebp package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform a...

8.8CVSS7.2AI score0.99979EPSS
SaveExploits9References2
Tenable Nessus
Tenable Nessus
•added 2024/01/16 12:00 a.m.•20 views

EulerOS 2.0 SP9 : libwebp (EulerOS-SA-2023-3341)

According to the versions of the libwebp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds...

8.8CVSS7.2AI score0.99979EPSS
SaveExploits9References2
Tenable Nessus
Tenable Nessus
•added 2024/01/16 12:00 a.m.•29 views

EulerOS 2.0 SP10 : libwebp (EulerOS-SA-2023-3221)

According to the versions of the libwebp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds...

8.8CVSS7.2AI score0.99979EPSS
SaveExploits9References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/16 12:00 a.m.•4 views

CVE-2023-51257: Improper Restriction of Operations within the Bounds of a Memory Buffer

An invalid memory write issue in Jasper-Software Jasper v.4.1.1 and before allows a local attacker to execute arbitrary code...

7.8CVSS7.3AI score0.00256EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2024/01/16 12:00 a.m.•29 views

EulerOS Virtualization 2.10.0 : libwebp (EulerOS-SA-2023-3477)

According to the versions of the libwebp package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform a...

8.8CVSS7.2AI score0.99979EPSS
SaveExploits9References2
Tenable Nessus
Tenable Nessus
•added 2024/01/16 12:00 a.m.•21 views

EulerOS Virtualization 2.9.0 : libwebp (EulerOS-SA-2024-1014)

According to the versions of the libwebp package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform a...

8.8CVSS7.2AI score0.99979EPSS
SaveExploits9References2
Rows per page
Query Builder