Lucene search
+L

2982 matches found

Cvelist
Cvelist
added 2016/05/23 10:0 a.m.28 views

CVE-2016-4486

The rtnlfilllinkifmap function in net/core/rtnetlink.c in the Linux kernel before 4.5.5 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory by reading a Netlink message...

6AI score0.0171EPSS
SaveExploits4References29
Debian CVE
Debian CVE
added 2016/05/23 10:0 a.m.62 views

CVE-2016-4486

The rtnlfilllinkifmap function in net/core/rtnetlink.c in the Linux kernel before 4.5.5 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory by reading a Netlink message...

3.3CVSS5.9AI score0.0171EPSS
SaveExploits4
CVE
CVE
added 2016/05/23 10:0 a.m.179 views

CVE-2016-4486

CVE-2016-4486 affects the Linux kernel prior to 4.5.5, where the function rtnetlink.c: rtnl_fill_link_ifmap does not initialize a certain data structure. This allows a local attacker to read kernel stack memory via a crafted Netlink message, leading to information disclosure. Public references (i...

3.3CVSS5.6AI score0.0171EPSS
SaveExploits4References29Affected Software8
UbuntuCve
UbuntuCve
added 2016/05/23 12:0 a.m.47 views

CVE-2016-4486

The rtnlfilllinkifmap function in net/core/rtnetlink.c in the Linux kernel before 4.5.5 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory by reading a Netlink message...

3.3CVSS6.8AI score0.0171EPSS
SaveExploits4References15
OSV
OSV
added 2016/05/23 12:0 a.m.4 views

UBUNTU-CVE-2016-4486

The rtnlfilllinkifmap function in net/core/rtnetlink.c in the Linux kernel before 4.5.5 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory by reading a Netlink message...

3.3CVSS6.7AI score0.0171EPSS
SaveExploits4References16
Kitploit
Kitploit
added 2016/05/05 10:30 p.m.43 views

Skydive - An Open Source Real-Time Network Topology and Protocols Analyzer

Skydive is an open source real-time network topology and protocols analyzer. It aims to provide a comprehensive way of understanding what is happening in the network infrastructure. Skydive agents collect topology informations and flows and forward them to a central agent for further analysis. Al...

7.5AI score
SaveExploits0References2
NVD
NVD
added 2016/05/02 10:59 a.m.13 views

CVE-2012-6689

The netlinksendmsg function in net/netlink/afnetlink.c in the Linux kernel before 3.5.5 does not validate the dstpid field, which allows local users to have an unspecified impact by spoofing Netlink messages...

7.8CVSS7.3AI score0.0031EPSS
SaveExploits0References8
OSV
OSV
added 2016/05/02 10:59 a.m.3 views

DEBIAN-CVE-2012-6689

The netlinksendmsg function in net/netlink/afnetlink.c in the Linux kernel before 3.5.5 does not validate the dstpid field, which allows local users to have an unspecified impact by spoofing Netlink messages...

7.8CVSS6.3AI score0.0031EPSS
SaveExploits0References1
Prion
Prion
added 2016/05/02 10:59 a.m.23 views

Code injection

The netlinksendmsg function in net/netlink/afnetlink.c in the Linux kernel before 3.5.5 does not validate the dstpid field, which allows local users to have an unspecified impact by spoofing Netlink messages...

7.2CVSS6.6AI score0.0031EPSS
SaveExploits0References8Affected Software1
Cvelist
Cvelist
added 2016/05/02 10:0 a.m.27 views

CVE-2012-6689

The netlinksendmsg function in net/netlink/afnetlink.c in the Linux kernel before 3.5.5 does not validate the dstpid field, which allows local users to have an unspecified impact by spoofing Netlink messages...

7.2AI score0.0031EPSS
SaveExploits0References8
Debian CVE
Debian CVE
added 2016/05/02 10:0 a.m.43 views

CVE-2012-6689

The netlinksendmsg function in net/netlink/afnetlink.c in the Linux kernel before 3.5.5 does not validate the dstpid field, which allows local users to have an unspecified impact by spoofing Netlink messages...

7.8CVSS5.4AI score0.0031EPSS
SaveExploits0
n0where
n0where
added 2016/04/17 11:49 p.m.46 views

Open Source Real Time Network Analyzer: skydive

Open Source Real Time Network Topology and Protocols Analyzer Skydive is an open source real-time network topology and protocols analyzer. It aims to provide a comprehensive way of understanding what is happening in the network infrastructure. Skydive agents collect topology informations and flow...

7.5AI score
SaveExploits0References2
seebug.org
seebug.org
added 2016/01/11 12:0 a.m.29 views

Helmholz Systeme NETLink PRO HW 1-1a-1 and FW 1. 54 and higher 弱口令

No description provided by source...

7.1AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2015/11/19 7:56 p.m.11 views

kernel: nfnetlink race in NETLINK_NFLOG socket creation

A race-condition flaw was discovered in the kernel's netlink module creation, which can trigger a kernel panic in netlinkrelease-moduleput for local users creating netlink sockets. The flaw is specific to Red Hat Enterprise Linux and does not affect upstream kernels. The nfnetlinklog module must ...

4.7CVSS6.8AI score0.00212EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2015/11/19 12:0 a.m.5 views

PT-2017-7224 · Red Hat +1 · Red Hat Enterprise Mrg 2 +4

Name of the Vulnerable Software and Affected Versions: Red Hat Enterprise Linux 7 kernel-rt Red Hat Enterprise MRG 2 Description: A race condition exists in the kernel when the nfnetlink log module is loaded, allowing local users to cause a denial of service by creating netlink sockets...

7.8CVSS6.1AI score0.03693EPSS
SaveExploits4References56
RedhatCVE
RedhatCVE
added 2015/10/30 10:31 a.m.23 views

CVE-2003-0857

The 1 ipqread and 2 ipulogread functions in iptables allow local users to cause a denial of service by sending spoofed messages as other users to the kernel netlink interface...

4.6CVSS6.8AI score0.00289EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2015/10/30 9:45 a.m.29 views

CVE-2010-0747

drbd8 allows local users to bypass intended restrictions for certain actions via netlink packets, similar to CVE-2009-3725...

7.8CVSS7AI score0.00611EPSS
SaveExploits4References2
OpenVAS
OpenVAS
added 2015/10/08 12:0 a.m.60 views

Oracle: Security Advisory (ELSA-2007-0347)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.4AI score0.05035EPSS
SaveExploits17References2
OpenVAS
OpenVAS
added 2015/10/06 12:0 a.m.41 views

Oracle: Security Advisory (ELSA-2014-3070)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.9CVSS7.4AI score0.10209EPSS
SaveExploits18References2
OpenVAS
OpenVAS
added 2015/10/06 12:0 a.m.44 views

Oracle: Security Advisory (ELSA-2012-0481)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.4AI score0.00775EPSS
SaveExploits4References2
Rows per page
Query Builder