Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2019/09/25 4:50 p.m.31 views

CVE-2019-16714

In the Linux kernel before 5.2.14, rds6incinfocopy in net/rds/recv.c allows attackers to obtain sensitive information from kernel stack memory because tos and flags fields are not initialized...

7.5CVSS4.5AI score0.02701EPSS
Exploits0References3
OSV
OSV
added 2019/09/23 12:15 p.m.27 views

CVE-2019-16714

In the Linux kernel before 5.2.14, rds6incinfocopy in net/rds/recv.c allows attackers to obtain sensitive information from kernel stack memory because tos and flags fields are not initialized...

7.5CVSS6AI score
Exploits0References8
Prion
Prion
added 2019/09/23 12:15 p.m.34 views

Information disclosure

In the Linux kernel before 5.2.14, rds6incinfocopy in net/rds/recv.c allows attackers to obtain sensitive information from kernel stack memory because tos and flags fields are not initialized...

5CVSS6.8AI score0.02701EPSS
Exploits0References8Affected Software3
CVE
CVE
added 2019/09/23 11:45 a.m.149 views

CVE-2019-16714

Summary: CVE-2019-16714 affects the Linux kernel prior to 5.2.14. The vulnerability is in rds6_inc_info_copy (net/rds/recv.c), where tos and flags are not initialized, allowing a remote attacker to read sensitive data from kernel stack memory. This is an information disclosure vulnerability with ...

7.5CVSS7.7AI score0.02701EPSS
Exploits0References8Affected Software1
Veracode
Veracode
added 2019/05/02 4:41 a.m.34 views

Information Disclosure

kernel-rt is vulnerable to information disclosure. Local users are able to obtain confidential information from the kernel stack memory via recvfrom or recvmsgsystem call on an RDS socket. due to failure to initialize certain structure member in the rdsrecvmsg function in net/rds/recv.c...

2.1CVSS5.3AI score0.00952EPSS
Exploits2References26Affected Software1
CVE
CVE
added 2016/06/27 10:0 a.m.162 views

CVE-2016-5244

CVE-2016-5244 affects the Linux kernel and involves the function rds_inc_info_copy in net/rds/recv.c not initializing a structure member. This can enable a remote attacker to read sensitive information from kernel stack memory by processing an RDS message, with impact described as kernel informat...

7.5CVSS6.9AI score0.05521EPSS
Exploits0References24Affected Software1
RedhatCVE
RedhatCVE
added 2016/06/07 8:18 a.m.33 views

CVE-2016-5244

A vulnerability was found in the Linux kernel in function rdsincinfocopy of file net/rds/recv.c. The last field "flags" of object "minfo" is not initialized. This can leak data previously at the flags location to userspace...

7.5CVSS3.5AI score0.05521EPSS
Exploits0References1
Amazon
Amazon
added 2012/08/21 12:0 a.m.54 views

Medium: kernel

Issue Overview: The rdsrecvmsg function in net/rds/recv.c in the Linux kernel before 3.0.44 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a 1 recvfrom or 2 recvmsg system call on an RDS socket...

2.1CVSS6.2AI score0.00952EPSS
Exploits2
Rows per page
Query Builder