Lucene search
K

1120 matches found

OSV
OSV
added 2022/03/29 3:15 p.m.1 views

DEBIAN-CVE-2022-1055

A use-after-free exists in the Linux Kernel in tcnewtfilter that could allow a local attacker to gain privilege escalation. The exploit requires unprivileged user namespaces. We recommend upgrading past commit 04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5...

7.8CVSS6.4AI score0.00504EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2022/03/29 3:15 p.m.3 views

CVE-2022-1055

A use-after-free exists in the Linux Kernel in tcnewtfilter that could allow a local attacker to gain privilege escalation. The exploit requires unprivileged user namespaces. We recommend upgrading past commit 04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5...

8.6CVSS6.6AI score0.00504EPSS
Exploits1References6
OSV
OSV
added 2022/03/29 3:15 p.m.4 views

AZL-9218 CVE-2022-1055 affecting package kernel for versions less than 5.15.32.1-3

A use-after-free exists in the Linux Kernel in tcnewtfilter that could allow a local attacker to gain privilege escalation. The exploit requires unprivileged user namespaces. We recommend upgrading past commit 04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5...

7.8CVSS6.6AI score0.00504EPSS
Exploits1References1
OSV
OSV
added 2022/03/29 3:15 p.m.9 views

CVE-2022-1055

A use-after-free exists in the Linux Kernel in tcnewtfilter that could allow a local attacker to gain privilege escalation. The exploit requires unprivileged user namespaces. We recommend upgrading past commit 04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5...

7.8CVSS7.6AI score
Exploits0References5
NVD
NVD
added 2022/03/29 3:15 p.m.21 views

CVE-2022-1055

A use-after-free exists in the Linux Kernel in tcnewtfilter that could allow a local attacker to gain privilege escalation. The exploit requires unprivileged user namespaces. We recommend upgrading past commit 04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5...

8.6CVSS0.00504EPSS
Exploits1References5
Prion
Prion
added 2022/03/29 3:15 p.m.25 views

Design/Logic Flaw

A use-after-free exists in the Linux Kernel in tcnewtfilter that could allow a local attacker to gain privilege escalation. The exploit requires unprivileged user namespaces. We recommend upgrading past commit 04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5...

4.6CVSS7.4AI score0.00504EPSS
Exploits1References5Affected Software4
UbuntuCve
UbuntuCve
added 2022/03/29 3:15 p.m.39 views

CVE-2022-1055

A use-after-free exists in the Linux Kernel in tcnewtfilter that could allow a local attacker to gain privilege escalation. The exploit requires unprivileged user namespaces. We recommend upgrading past commit 04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5...

8.6CVSS6.7AI score0.00504EPSS
Exploits1References7
OSV
OSV
added 2022/03/29 3:15 p.m.0 views

UBUNTU-CVE-2022-1055

A use-after-free exists in the Linux Kernel in tcnewtfilter that could allow a local attacker to gain privilege escalation. The exploit requires unprivileged user namespaces. We recommend upgrading past commit 04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5...

8.6CVSS6.6AI score0.00504EPSS
Exploits1References8
Cvelist
Cvelist
added 2022/03/29 3:5 p.m.23 views

CVE-2022-1055 Use after Free in tc_new_tfilter allowing for privilege escalation in Linux Kernel

A use-after-free exists in the Linux Kernel in tcnewtfilter that could allow a local attacker to gain privilege escalation. The exploit requires unprivileged user namespaces. We recommend upgrading past commit 04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5...

8.6CVSS7.9AI score0.00504EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2022/03/29 3:5 p.m.25 views

CVE-2022-1055 Use after Free in tc_new_tfilter allowing for privilege escalation in Linux Kernel

A use-after-free exists in the Linux Kernel in tcnewtfilter that could allow a local attacker to gain privilege escalation. The exploit requires unprivileged user namespaces. We recommend upgrading past commit 04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5...

8.6CVSS6.8AI score0.00504EPSS
Exploits1References5
Debian CVE
Debian CVE
added 2022/03/29 3:5 p.m.192 views

CVE-2022-1055

A use-after-free exists in the Linux Kernel in tcnewtfilter that could allow a local attacker to gain privilege escalation. The exploit requires unprivileged user namespaces. We recommend upgrading past commit 04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5...

8.6CVSS6.4AI score0.00504EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2022/03/29 3:50 a.m.139 views

CVE-2022-1016

A flaw was found in the Linux kernel in net/netfilter/nftablescore.c:nftdochain, which can cause a use-after-free. This issue needs to handle 'return' with proper preconditions, as it can lead to a kernel information leak problem caused by a local, unprivileged attacker. Mitigation On...

6.6CVSS6.2AI score0.0145EPSS
Exploits11References5
RedhatCVE
RedhatCVE
added 2022/03/29 3:37 a.m.93 views

CVE-2022-1015

A flaw was found in the Linux kernel in linux/net/netfilter/nftablesapi.c of the netfilter subsystem. This flaw allows a local user to cause an out-of-bounds write issue. Mitigation In order to trigger the issue, it requires the ability to create user/net namespaces. On non-containerized...

6.6CVSS6.4AI score0.0145EPSS
Exploits10References5
OSV
OSV
added 2022/03/28 7:33 p.m.32 views

GHSA-8V99-48M9-C8PM Incorrect Authorization in imgcrypt

Imgcrypt implements a function CheckAuthorization that is supposed to check whether a user is authorized to access an encrypted image given the keys that the user has provided on the command line that would enable decryption of the image. The check is to prevent that a user can start a container...

7.5CVSS7.4AI score0.02676EPSS
Exploits1References10
NVD
NVD
added 2022/03/25 6:15 p.m.25 views

CVE-2022-24778

The imgcrypt library provides API exensions for containerd to support encrypted container images and implements the ctd-decoder command line tool for use by containerd to decrypt encrypted container images. The imgcrypt function CheckAuthorization is supposed to check whether the current used is...

7.5CVSS0.02676EPSS
Exploits1References7
UbuntuCve
UbuntuCve
added 2022/03/25 6:15 p.m.31 views

CVE-2022-24778

The imgcrypt library provides API exensions for containerd to support encrypted container images and implements the ctd-decoder command line tool for use by containerd to decrypt encrypted container images. The imgcrypt function CheckAuthorization is supposed to check whether the current used is...

7.5CVSS6.7AI score0.02676EPSS
Exploits1References4
Prion
Prion
added 2022/03/25 6:15 p.m.25 views

Design/Logic Flaw

The imgcrypt library provides API exensions for containerd to support encrypted container images and implements the ctd-decoder command line tool for use by containerd to decrypt encrypted container images. The imgcrypt function CheckAuthorization is supposed to check whether the current used is...

5CVSS7.4AI score0.02676EPSS
Exploits1References7Affected Software2
OSV
OSV
added 2022/03/25 6:15 p.m.3 views

UBUNTU-CVE-2022-24778

The imgcrypt library provides API exensions for containerd to support encrypted container images and implements the ctd-decoder command line tool for use by containerd to decrypt encrypted container images. The imgcrypt function CheckAuthorization is supposed to check whether the current used is...

7.5CVSS6.8AI score0.02676EPSS
Exploits1References5
OSV
OSV
added 2022/03/25 5:20 p.m.36 views

CVE-2022-24778 Incorrect Authorization in imgcrypt

The imgcrypt library provides API exensions for containerd to support encrypted container images and implements the ctd-decoder command line tool for use by containerd to decrypt encrypted container images. The imgcrypt function CheckAuthorization is supposed to check whether the current used is...

7.5CVSS6.7AI score0.02676EPSS
Exploits1References9
OSV
OSV
added 2022/03/23 8:15 p.m.1 views

DEBIAN-CVE-2021-4197

An unprivileged write to the file handler flaw in the Linux kernel's control groups and namespaces subsystem was found in the way users have access to some less privileged process that are controlled by cgroups and have higher privileged parent process. It is actually both for cgroup2 and cgroup1...

7.8CVSS6.4AI score0.00541EPSS
Exploits0References1
Rows per page
Query Builder