Lucene search
K

18 matches found

Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.2 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001306)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001306 advisory. net/sctp/socket.c in the Linux kernel through 4.10.1 does not properly restrict association peel-off operations during certain wait states, which allows local users ...

7.1CVSS6.5AI score0.01162EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.2 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001455)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001455 advisory. An issue was discovered in the Linux kernel before 4.14.16. There is a use-after-free in net/sctp/socket.c for a held lock after a peel off, aka CID-a0ff660058b8...

7.8CVSS7.9AI score0.00569EPSS
Exploits1References8
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:0 a.m.1 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003208)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003208 advisory. net/sctp/socket.c in the Linux kernel through 4.10.1 does not properly restrict association peel-off operations during certain wait states, which allows local users ...

7.1CVSS6.5AI score0.01162EPSS
Exploits0References8
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:0 a.m.2 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003070)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003070 advisory. net/sctp/socket.c in the Linux kernel through 4.10.1 does not properly restrict association peel-off operations during certain wait states, which allows local users ...

7.1CVSS6.5AI score0.01162EPSS
Exploits0References8
SUSE CVE
SUSE CVE
added 2023/02/15 4:49 a.m.3 views

SUSE CVE-2017-6353

net/sctp/socket.c in the Linux kernel through 4.10.1 does not properly restrict association peel-off operations during certain wait states, which allows local users to cause a denial of service invalid unlock and double free via a multithreaded application. NOTE: this vulnerability exists because...

5.5CVSS6AI score0.00374EPSS
Exploits0References13
SUSE CVE
SUSE CVE
added 2023/02/15 4:20 a.m.1 views

SUSE CVE-2018-25015

An issue was discovered in the Linux kernel before 4.14.16. There is a use-after-free in net/sctp/socket.c for a held lock after a peel off, aka CID-a0ff660058b8...

7.8CVSS7.7AI score0.00569EPSS
Exploits1References3
RedHat Linux
RedHat Linux
added 2022/03/10 4:11 p.m.249 views

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

9CVSS7AI score0.89063EPSS
Exploits119References10
OSV
OSV
added 2021/06/07 8:15 p.m.1 views

DEBIAN-CVE-2018-25015

An issue was discovered in the Linux kernel before 4.14.16. There is a use-after-free in net/sctp/socket.c for a held lock after a peel off, aka CID-a0ff660058b8...

7.8CVSS7.5AI score0.00569EPSS
Exploits1References1
OSV
OSV
added 2021/06/07 8:15 p.m.0 views

UBUNTU-CVE-2018-25015

An issue was discovered in the Linux kernel before 4.14.16. There is a use-after-free in net/sctp/socket.c for a held lock after a peel off, aka CID-a0ff660058b8...

7.8CVSS7AI score0.00569EPSS
Exploits1References7
CVE
CVE
added 2021/06/07 7:20 p.m.115 views

CVE-2018-25015

CVE-2018-25015 affects the Linux kernel up to version 4.14.15, with a use-after-free in net/sctp/socket.c when a lock is held after a peel-off (CID-a0ff660058b8). Exploitation details are not provided in the supplied documents, but CVSS v3 indicates a high impact. The ChangeLog entry for 4.14.16 ...

7.8CVSS7.4AI score0.00569EPSS
Exploits1References5Affected Software1
Debian CVE
Debian CVE
added 2021/06/07 7:20 p.m.26 views

CVE-2018-25015

An issue was discovered in the Linux kernel before 4.14.16. There is a use-after-free in net/sctp/socket.c for a held lock after a peel off, aka CID-a0ff660058b8...

7.8CVSS7.4AI score0.00569EPSS
Exploits1
OSV
OSV
added 2017/11/15 9:29 p.m.1 views

DEBIAN-CVE-2017-15115

The sctpdopeeloff function in net/sctp/socket.c in the Linux kernel before 4.14 does not check whether the intended netns is used in a peel-off action, which allows local users to cause a denial of service use-after-free and system crash or possibly have unspecified other impact via crafted syste...

7.8CVSS8.5AI score0.0047EPSS
Exploits0References1
OSV
OSV
added 2017/11/15 12:0 a.m.1 views

UBUNTU-CVE-2017-15115

The sctpdopeeloff function in net/sctp/socket.c in the Linux kernel before 4.14 does not check whether the intended netns is used in a peel-off action, which allows local users to cause a denial of service use-after-free and system crash or possibly have unspecified other impact via crafted syste...

7.8CVSS6.7AI score0.0047EPSS
Exploits0References11
UbuntuCve
UbuntuCve
added 2017/03/01 8:59 p.m.48 views

CVE-2017-6353

net/sctp/socket.c in the Linux kernel through 4.10.1 does not properly restrict association peel-off operations during certain wait states, which allows local users to cause a denial of service invalid unlock and double free via a multithreaded application. NOTE: this vulnerability exists because...

5.5CVSS6.8AI score0.00374EPSS
Exploits0References2
Prion
Prion
added 2017/03/01 8:59 p.m.26 views

Double free

net/sctp/socket.c in the Linux kernel through 4.10.1 does not properly restrict association peel-off operations during certain wait states, which allows local users to cause a denial of service invalid unlock and double free via a multithreaded application. NOTE: this vulnerability exists because...

4.9CVSS5.6AI score0.01162EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2017/03/01 8:59 p.m.8 views

CVE-2017-6353

net/sctp/socket.c in the Linux kernel through 4.10.1 does not properly restrict association peel-off operations during certain wait states, which allows local users to cause a denial of service invalid unlock and double free via a multithreaded application. NOTE: this vulnerability exists because...

5.5CVSS6.5AI score
Exploits0References5
OSV
OSV
added 2017/03/01 8:59 p.m.3 views

UBUNTU-CVE-2017-6353

net/sctp/socket.c in the Linux kernel through 4.10.1 does not properly restrict association peel-off operations during certain wait states, which allows local users to cause a denial of service invalid unlock and double free via a multithreaded application. NOTE: this vulnerability exists because...

5.5CVSS6.7AI score0.00374EPSS
Exploits0References3
OSV
OSV
added 2017/03/01 8:59 p.m.1 views

DEBIAN-CVE-2017-6353

net/sctp/socket.c in the Linux kernel through 4.10.1 does not properly restrict association peel-off operations during certain wait states, which allows local users to cause a denial of service invalid unlock and double free via a multithreaded application. NOTE: this vulnerability exists because...

5.5CVSS5.7AI score0.00374EPSS
Exploits0References1
Rows per page
Query Builder