Lucene search
+L

272 matches found

BDU FSTEC
BDU FSTEC
•added 2017/07/14 12:00 a.m.•15 views

The vulnerability of the sock_setsockopt function in the kernel of the Linux operating system’s net/core/sock.c file allows a hacker to cause a service failure or exert other effects.

The vulnerability of the socksetsockopt function in the kernel’s net/core/sock.c file in the Linux operating system arises from the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability allows a local attacker to cause a service failure or other adverse...

7.2CVSS7.2AI score0.00412EPSS
SaveExploits0References6Affected Software1
RedHat Linux
RedHat Linux
•added 2017/04/12 1:29 p.m.•16 views

kernel: Signed overflow for SO_{SND|RCV}BUFFORCE

A flaw was found in the Linux kernel's implementation of setsockopt for the SOSND|RCVBUFFORCE setsockopt system call. Users with non-namespace CAPNETADMIN are able to trigger this call and create a situation in which the sockets sendbuff data size could be negative. This could adversely affect...

7.8CVSS6.3AI score0.01566EPSS
SaveExploits8References4
RedHat Linux
RedHat Linux
•added 2017/04/12 10:51 a.m.•11 views

kernel: Signed overflow for SO_{SND|RCV}BUFFORCE

A flaw was found in the Linux kernel's implementation of setsockopt for the SOSND|RCVBUFFORCE setsockopt system call. Users with non-namespace CAPNETADMIN are able to trigger this call and create a situation in which the sockets sendbuff data size could be negative. This could adversely affect...

7.8CVSS6.3AI score0.01566EPSS
SaveExploits8References4
CNVD
CNVD
•added 2016/12/29 12:00 a.m.•16 views

Linux kernel local denial of service vulnerability (CNVD-2016-13294)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A security vulnerability in the 'socksetsockopt' function of the net/core/sock.c file in Linux kernel 3.4.99 and earlier stems from the program's failure to properly handle...

7.8CVSS8.7AI score0.00412EPSS
SaveExploits0References1
OSV
OSV
•added 2016/12/28 7:59 a.m.•11 views

DEBIAN-CVE-2016-9793

The socksetsockopt function in net/core/sock.c in the Linux kernel before 4.8.14 mishandles negative values of sksndbuf and skrcvbuf, which allows local users to cause a denial of service memory corruption and system crash or possibly have unspecified other impact by leveraging the CAPNETADMIN...

7.8CVSS6.6AI score0.01566EPSS
SaveExploits8References1
OSV
OSV
•added 2016/12/28 7:59 a.m.•15 views

DEBIAN-CVE-2012-6704

The socksetsockopt function in net/core/sock.c in the Linux kernel before 3.5 mishandles negative values of sksndbuf and skrcvbuf, which allows local users to cause a denial of service memory corruption and system crash or possibly have unspecified other impact by leveraging the CAPNETADMIN...

7.8CVSS7.8AI score0.00412EPSS
SaveExploits0References1
Metasploit
Metasploit
•added 2012/04/06 11:45 a.m.•93 views

ICMP Exfiltration Service

This module is designed to provide a server-side component to receive and store files exfiltrated over ICMP echo request packets. To use this module you will need to send an initial ICMP echo request containing the specific start trigger defaults to '^BOF' this can be followed by the filename bei...

7.4AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2011/12/13 12:00 a.m.•28 views

SuSE 10 Security Update : Postfix (ZYPP Patch Number 7403)

The following bug has been fixed : - Postfix did not clear the receive buffer after the STARTTLS command. A man-in-the middle could therefore inject commands in the unencrypted stream that get interpreted in the encrypted phase after STARTTLS. CVE-2011-0411 %NASLMINLEVEL 70300 C Tenable Network...

6.8CVSS7.9AI score0.16334EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2011/05/11 12:00 a.m.•44 views

SuSE9 Security Update : Postfix (YOU Patch Number 12707)

The following bugs have been fixed : - Remote attackers could potentially exploit a memory corruption issue in postfix' SASL implementation to execute arbitrary code. CVE-2011-1720 - Also Postfix did not clear the receive buffer after the STARTTLS command. A man-in-the middle could therefore inje...

6.8CVSS9AI score0.21481EPSS
SaveExploits2References4
Cvelist
Cvelist
•added 2006/05/09 8:00 p.m.•46 views

CVE-2006-2275

Linux SCTP lksctp before 2.6.17 allows remote attackers to cause a denial of service deadlock via a large number of small messages to a receiver application that cannot process the messages quickly enough, which leads to "spillover of the receive buffer."...

7.2AI score0.03602EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/05/09 12:00 a.m.•5 views

CVE-2006-2275: Improper Locking

Linux SCTP lksctp before 2.6.17 allows remote attackers to cause a denial of service deadlock via a large number of small messages to a receiver application that cannot process the messages quickly enough, which leads to "spillover of the receive buffer."...

7.5CVSS5.8AI score0.03602EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2006/05/09 12:00 a.m.•9 views

PT-2006-3242 · Linux +1 · Linux Sctp +1

Name of the Vulnerable Software and Affected Versions: Linux SCTP lksctp versions prior to 2.6.17 Description: The issue allows remote attackers to cause a denial of service deadlock by sending a large number of small messages to a receiver application that cannot process them quickly enough. Thi...

9CVSS7.1AI score0.06927EPSS
SaveExploits0References257
Rows per page
Query Builder