Lucene search
+L

4654 matches found

RedHat Linux
RedHat Linux
added 2022/12/06 10:0 a.m.46 views

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

8.8CVSS6.4AI score0.00836EPSS
SaveExploits6References3
Microsoft CVE
Microsoft CVE
added 2022/12/03 8:0 a.m.5 views

A race condition in the x86 KVM subsystem in the Linux kernel through 6.1-rc6 allows guest OS users to cause a denial of service (host OS crash or host OS memory corruption) when nested virtualisation and the TDP MMU are enabled.

...

5.5CVSS6.3AI score0.0025EPSS
SaveExploits1
OSV
OSV
added 2022/11/30 5:15 a.m.2 views

DEBIAN-CVE-2022-45869

A race condition in the x86 KVM subsystem in the Linux kernel through 6.1-rc6 allows guest OS users to cause a denial of service host OS crash or host OS memory corruption when nested virtualisation and the TDP MMU are enabled...

5.5CVSS6.5AI score0.0025EPSS
SaveExploits1References1
OSV
OSV
added 2022/11/30 5:15 a.m.12 views

AZL-11574 CVE-2022-45869 affecting package kernel for versions less than 5.15.82.1-1

A race condition in the x86 KVM subsystem in the Linux kernel through 6.1-rc6 allows guest OS users to cause a denial of service host OS crash or host OS memory corruption when nested virtualisation and the TDP MMU are enabled...

5.5CVSS6.7AI score0.0025EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2022/11/30 5:15 a.m.60 views

CVE-2022-45869

A race condition in the x86 KVM subsystem in the Linux kernel through 6.1-rc6 allows guest OS users to cause a denial of service host OS crash or host OS memory corruption when nested virtualisation and the TDP MMU are enabled...

5.5CVSS6.8AI score0.0025EPSS
SaveExploits1References11
Prion
Prion
added 2022/11/30 5:15 a.m.41 views

Race condition

A race condition in the x86 KVM subsystem in the Linux kernel through 6.1-rc6 allows guest OS users to cause a denial of service host OS crash or host OS memory corruption when nested virtualisation and the TDP MMU are enabled...

1.7CVSS5.7AI score0.0025EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2022/11/30 5:15 a.m.5 views

UBUNTU-CVE-2022-45869

A race condition in the x86 KVM subsystem in the Linux kernel through 6.1-rc6 allows guest OS users to cause a denial of service host OS crash or host OS memory corruption when nested virtualisation and the TDP MMU are enabled...

5.5CVSS6.8AI score0.0025EPSS
SaveExploits1References12
Vulnrichment
Vulnrichment
added 2022/11/30 12:0 a.m.8 views

CVE-2022-45869

A race condition in the x86 KVM subsystem in the Linux kernel through 6.1-rc6 allows guest OS users to cause a denial of service host OS crash or host OS memory corruption when nested virtualisation and the TDP MMU are enabled...

5.3AI score0.0025EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2022/11/30 12:0 a.m.38 views

CVE-2022-45869

A race condition in the x86 KVM subsystem in the Linux kernel through 6.1-rc6 allows guest OS users to cause a denial of service host OS crash or host OS memory corruption when nested virtualisation and the TDP MMU are enabled...

6.2AI score0.0025EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/11/30 12:0 a.m.4 views

Linux kernel 竞争条件问题漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel 6.1-rc6 and prior versions, which stems from a race condition in its x86 KVM subsystem that allows guest operating system users ...

5.5CVSS6.8AI score0.0025EPSS
SaveExploits1References11
RedHat Linux
RedHat Linux
added 2022/11/28 2:39 p.m.8 views

snakeyaml: Denial of Service due to missing nested depth limitation for collections

A flaw was found in the org.yaml.snakeyaml package. This flaw allows an attacker to cause a denial of service DoS due to missing nested depth limitation for collections...

7.5CVSS6.8AI score0.02202EPSS
SaveExploits2References5
Debian
Debian
added 2022/11/27 6:53 p.m.50 views

[SECURITY] [DLA 3207-1] jackson-databind security update

Debian LTS Advisory DLA-3207-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany November 27, 2022 https://wiki.debian.org/LTS Package : jackson-databind Version : 2.9.8-3+deb10u4 CVE ID : CVE-2020-36518 CVE-2022-42003 CVE-2022-42004 Debian Bug : 1007109 Several fla...

7.5CVSS6.7AI score0.0486EPSS
SaveExploits4
CNNVD
CNNVD
added 2022/11/26 12:0 a.m.8 views

qs 安全漏洞

ljharb qs is a query string parser with nesting support by the individual developer Jordan Harband in the United States. A security vulnerability exists in versions prior to qs 6.10.3, which stems from parse ignoring the proto key, and can be exploited by an attacker to place an attack payload in...

7.5CVSS7.9AI score0.14663EPSS
SaveExploits2References14
NVD
NVD
added 2022/11/23 11:15 p.m.28 views

CVE-2022-45873

systemd 250 and 251 allows local users to achieve a systemd-coredump deadlock by triggering a crash that has a long backtrace. This occurs in parseelfobject in shared/elf-util.c. The exploitation methodology is to crash a binary calling the same function recursively, and put it in a deeply nested...

5.5CVSS0.00254EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2022/11/23 11:15 p.m.41 views

CVE-2022-45873

systemd 250 and 251 allows local users to achieve a systemd-coredump deadlock by triggering a crash that has a long backtrace. This occurs in parseelfobject in shared/elf-util.c. The exploitation methodology is to crash a binary calling the same function recursively, and put it in a deeply nested...

5.5CVSS6.4AI score0.00254EPSS
SaveExploits0References4
Prion
Prion
added 2022/11/23 11:15 p.m.35 views

Design/Logic Flaw

systemd 250 and 251 allows local users to achieve a systemd-coredump deadlock by triggering a crash that has a long backtrace. This occurs in parseelfobject in shared/elf-util.c. The exploitation methodology is to crash a binary calling the same function recursively, and put it in a deeply nested...

1.7CVSS5.3AI score0.00254EPSS
SaveExploits0References4Affected Software2
OSV
OSV
added 2022/11/23 10:7 p.m.10 views

CLSA-2022-1669241224 Fix CVE(s): CVE-2022-42012, CVE-2022-42011, CVE-2022-42010, CVE-2020-35512

SECURITY UPDATE: Use-after-free in access control-related hash tables - debian/patches/CVE-2020-35512.patch: use reference counting for DBusUserInfo and DBusGroupInfo structures. - CVE-2020-35512 SECURITY UPDATE: Crash or incorrect parsing a signature with wrongly nested '' and '' -...

7.8CVSS7.3AI score0.01398EPSS
SaveExploits3References1
Debian CVE
Debian CVE
added 2022/11/23 12:0 a.m.57 views

CVE-2022-45873

systemd 250 and 251 allows local users to achieve a systemd-coredump deadlock by triggering a crash that has a long backtrace. This occurs in parseelfobject in shared/elf-util.c. The exploitation methodology is to crash a binary calling the same function recursively, and put it in a deeply nested...

5.5CVSS5.6AI score0.00254EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2022/11/23 12:0 a.m.18 views

PT-2022-6256 · Linux +9 · Linux Kernel +9

Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 6.1-rc6 Description: A race condition in the x86 KVM subsystem allows guest OS users to cause a denial of service, resulting in a host OS crash or host OS memory corruption when nested virtualisation and the TDP...

9.8CVSS6.7AI score0.67994EPSS
SaveExploits220References1876
GithubExploit
GithubExploit
added 2022/11/20 6:1 p.m.994 views

Exploit for Uncontrolled Recursion in Owasp Modsecurity

Detection-and-Mitigation-script-for-CVE-2021-42717 Detection a...

7.5CVSS7.8AI score0.0312EPSS
SaveExploits2
Rows per page
Query Builder