Lucene search
K

4005 matches found

RedHat Linux
RedHat Linux
added 2022/11/15 10:31 a.m.1 views

golang: go/parser: stack exhaustion in all Parse* functions

A flaw was found in the golang standard library, go/parser. When calling any Parse functions on the Go source code, which contains deeply nested types or declarations, a panic can occur due to stack exhaustion. This issue allows an attacker to impact system availability...

5.5CVSS6.6AI score0.00005EPSS
Exploits1References6
CNVD
CNVD
added 2022/11/14 12:0 a.m.57 views

Linux kernel has unspecified vulnerabilities (CNVD-2022-77501)

Linux kernel is the kernel used by the Linux Foundation's open source operating system, Linux. Linux kernel has a security vulnerability that stems from a flaw discovered in the AMD nested virtualization SVM of KVM. A malicious L1 guest may intentionally not intercept the shutdown of a...

5.5CVSS0.9AI score0.00106EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2022/11/08 9:43 a.m.3 views

golang: go/parser: stack exhaustion in all Parse* functions

A flaw was found in the golang standard library, go/parser. When calling any Parse functions on the Go source code, which contains deeply nested types or declarations, a panic can occur due to stack exhaustion. This issue allows an attacker to impact system availability...

5.5CVSS6.6AI score0.00005EPSS
Exploits1References6
RedHat Linux
RedHat Linux
added 2022/11/08 9:43 a.m.2 views

golang: encoding/xml: stack exhaustion in Decoder.Skip

A flaw was found in golang encoding/xml. When calling Decoder, Skip while parsing a deeply nested XML document, a panic can occur due to stack exhaustion and allows an attacker to impact system availability...

7.5CVSS6.6AI score0.00026EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2022/11/08 9:43 a.m.4 views

golang: encoding/xml: stack exhaustion in Unmarshal

A flaw was found in golang. Calling Unmarshal on an XML document into a Go struct, which has a nested field that uses the "any" field tag, can cause a panic due to stack exhaustion...

7.5CVSS6.6AI score0.0013EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2022/11/08 9:34 a.m.1 views

golang: go/parser: stack exhaustion in all Parse* functions

A flaw was found in the golang standard library, go/parser. When calling any Parse functions on the Go source code, which contains deeply nested types or declarations, a panic can occur due to stack exhaustion. This issue allows an attacker to impact system availability...

5.5CVSS6.6AI score0.00005EPSS
Exploits1References6
RedHat Linux
RedHat Linux
added 2022/11/08 9:34 a.m.4 views

golang: encoding/gob: stack exhaustion in Decoder.Decode

A flaw was found in golang. When calling Decoder, Decode on a message that contains deeply nested structures, a panic can occur due to stack exhaustion and allows an attacker to impact system availability...

7.5CVSS6.6AI score0.00155EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2022/11/08 9:32 a.m.3 views

kernel: KVM: x86: Drop WARNs that assert a triple fault never "escapes" from L2

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Drop WARNs that assert a triple fault never "escapes" from L2 Remove WARNs that sanity check that KVM never lets a triple fault for L2 escape and incorrectly end up in L1. In normal operation, the sanity check is...

5.5CVSS6.2AI score0.00048EPSS
Exploits0References5
OSV
OSV
added 2022/11/03 10:9 p.m.2 views

CLSA-2022-1667513366 sqlite: Fix of CVE-2020-35527

CVE-2020-35527: fix a problem with ALTER TABLE for views that have a nested FROM clause...

9.8CVSS6.8AI score0.00253EPSS
Exploits0References1
OSV
OSV
added 2022/11/03 10:7 p.m.3 views

CLSA-2022-1667513276 sqlite: Fix of CVE-2020-35527

CVE-2020-35527: fix a problem with ALTER TABLE for views that have a nested FROM clause...

9.8CVSS6.8AI score0.00253EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2022/11/03 3:14 p.m.2 views

jackson-databind: denial of service via a large depth of nested objects

A flaw was found in the Jackson Databind package. This cause of the issue is due to a Java StackOverflow exception and a denial of service via a significant depth of nested objects...

7.5CVSS6.7AI score0.00474EPSS
Exploits1References5
RedHat Linux
RedHat Linux
added 2022/11/03 2:54 p.m.2 views

jackson-databind: denial of service via a large depth of nested objects

A flaw was found in the Jackson Databind package. This cause of the issue is due to a Java StackOverflow exception and a denial of service via a significant depth of nested objects...

7.5CVSS6.7AI score0.00474EPSS
Exploits1References5
RedHat Linux
RedHat Linux
added 2022/11/03 2:54 p.m.3 views

jackson-databind: denial of service via a large depth of nested objects

A flaw was found in the Jackson Databind package. This cause of the issue is due to a Java StackOverflow exception and a denial of service via a significant depth of nested objects...

7.5CVSS6.7AI score0.00474EPSS
Exploits1References5
Microsoft CVE
Microsoft CVE
added 2022/10/29 7:0 a.m.2 views

A flaw was found in the KVM's AMD nested virtualization (SVM). A malicious L1 guest could purposely fail to intercept the shutdown of a cooperative nested guest (L2) possibly leading to a page fault and kernel panic in the host (L0).

...

5.5CVSS7.3AI score0.00106EPSS
Exploits0
OSV
OSV
added 2022/10/25 5:15 p.m.3 views

AZL-11352 CVE-2022-3344 affecting package kernel for versions less than 5.15.82.1-1

A flaw was found in the KVM's AMD nested virtualization SVM. A malicious L1 guest could purposely fail to intercept the shutdown of a cooperative nested guest L2, possibly leading to a page fault and kernel panic in the host L0...

5.5CVSS6.7AI score0.00106EPSS
Exploits0References1
OSV
OSV
added 2022/10/25 5:15 p.m.4 views

CVE-2022-3344

A flaw was found in the KVM's AMD nested virtualization SVM. A malicious L1 guest could purposely fail to intercept the shutdown of a cooperative nested guest L2, possibly leading to a page fault and kernel panic in the host L0...

5.5CVSS7.2AI score
Exploits0References2
OSV
OSV
added 2022/10/25 5:15 p.m.3 views

DEBIAN-CVE-2022-3344

A flaw was found in the KVM's AMD nested virtualization SVM. A malicious L1 guest could purposely fail to intercept the shutdown of a cooperative nested guest L2, possibly leading to a page fault and kernel panic in the host L0...

5.5CVSS6.6AI score0.00106EPSS
Exploits0References1
NVD
NVD
added 2022/10/25 5:15 p.m.17 views

CVE-2022-3344

A flaw was found in the KVM's AMD nested virtualization SVM. A malicious L1 guest could purposely fail to intercept the shutdown of a cooperative nested guest L2, possibly leading to a page fault and kernel panic in the host L0...

5.5CVSS0.00106EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2022/10/25 5:15 p.m.37 views

CVE-2022-3344

A flaw was found in the KVM's AMD nested virtualization SVM. A malicious L1 guest could purposely fail to intercept the shutdown of a cooperative nested guest L2, possibly leading to a page fault and kernel panic in the host L0...

5.5CVSS6.8AI score0.00106EPSS
Exploits0References10
Prion
Prion
added 2022/10/25 5:15 p.m.26 views

Design/Logic Flaw

A flaw was found in the KVM's AMD nested virtualization SVM. A malicious L1 guest could purposely fail to intercept the shutdown of a cooperative nested guest L2, possibly leading to a page fault and kernel panic in the host L0...

1.7CVSS6AI score0.00106EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder