Lucene search
+L

421 matches found

Prion
Prion
added 2021/03/10 4:15 p.m.31 views

Design/Logic Flaw

A flaw was found in the way memory resources were freed in the unixstreamrecvmsg function in the Linux kernel when a signal was pending. This flaw allows an unprivileged local user to crash the system by exhausting available memory. The highest threat from this vulnerability is to system...

4.9CVSS5.6AI score0.00339EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/03/10 4:15 p.m.4 views

CVE-2021-20265

A flaw was found in the way memory resources were freed in the unixstreamrecvmsg function in the Linux kernel when a signal was pending. This flaw allows an unprivileged local user to crash the system by exhausting available memory. The highest threat from this vulnerability is to system...

5.5CVSS6.4AI score0.00339EPSS
SaveExploits0References4
OSV
OSV
added 2021/03/10 4:15 p.m.5 views

UBUNTU-CVE-2021-20265

A flaw was found in the way memory resources were freed in the unixstreamrecvmsg function in the Linux kernel when a signal was pending. This flaw allows an unprivileged local user to crash the system by exhausting available memory. The highest threat from this vulnerability is to system...

5.5CVSS6.6AI score0.00339EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/03/10 12:0 a.m.6 views

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a resource management error vulnerability that stems from a flaw in the way the unixstreamrecvmsg function frees memory resources when a signal hangs...

5.5CVSS8.2AI score0.00339EPSS
SaveExploits0References17
RedhatCVE
RedhatCVE
added 2020/04/08 10:27 p.m.29 views

CVE-2019-3837

It was found that the netdma code in tcprecvmsg in the RHEL6 kernel is thread-unsafe. So an unprivileged multi-threaded userspace application calling recvmsg for the same network socket in parallel executed on ioatdma-enabled hardware with netdma enabled can leak the memory, crash the host leadin...

6.1CVSS5.1AI score0.00237EPSS
SaveExploits0References3
Prion
Prion
added 2019/04/11 3:29 p.m.18 views

Memory corruption

It was found that the netdma code in tcprecvmsg in the 2.6.32 kernel as shipped in RHEL6 is thread-unsafe. So an unprivileged multi-threaded userspace application calling recvmsg for the same network socket in parallel executed on ioatdma-enabled hardware with netdma enabled can leak the memory,...

4.9CVSS6.1AI score0.00237EPSS
SaveExploits0References1Affected Software2
OSV
OSV
added 2019/04/11 3:29 p.m.6 views

UBUNTU-CVE-2019-3837

It was found that the netdma code in tcprecvmsg in the 2.6.32 kernel as shipped in RHEL6 is thread-unsafe. So an unprivileged multi-threaded userspace application calling recvmsg for the same network socket in parallel executed on ioatdma-enabled hardware with netdma enabled can leak the memory,...

6.1CVSS6.9AI score0.00237EPSS
SaveExploits0References3
OSV
OSV
added 2019/04/11 3:29 p.m.2 views

DEBIAN-CVE-2019-3837

It was found that the netdma code in tcprecvmsg in the 2.6.32 kernel as shipped in RHEL6 is thread-unsafe. So an unprivileged multi-threaded userspace application calling recvmsg for the same network socket in parallel executed on ioatdma-enabled hardware with netdma enabled can leak the memory,...

6.1CVSS6.7AI score0.00237EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2019/04/11 12:0 a.m.17 views

PT-2019-5303 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel version 2.6.32 Description: The issue is related to the net dma code in the tcp recvmsg function, which is thread-unsafe. This can be exploited by an unprivileged multi-threaded userspace application calling recvmsg for the same...

7.8CVSS7.3AI score0.07156EPSS
SaveExploits16References140
OSV
OSV
added 2017/09/01 4:29 p.m.2 views

DEBIAN-CVE-2017-14106

The tcpdisconnect function in net/ipv4/tcp.c in the Linux kernel before 4.12 allows local users to cause a denial of service tcpselectwindow divide-by-zero error and system crash by triggering a disconnect within a certain tcprecvmsg code path...

5.5CVSS7.5AI score0.00445EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2016/07/05 12:0 a.m.9 views

The vulnerability of the Linux operating system allows a malicious individual to gain access to confidential information from the kernel’s memory.

A local user can access the kernel memory due to information leakage during the execution of system calls recvmmsg and recvmsg...

4.9CVSS6.8AI score0.00461EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
added 2016/05/02 10:59 a.m.28 views

CVE-2015-8019

The skbcopyandcsumdatagramiovec function in net/core/datagram.c in the Linux kernel 3.14.54 and 3.18.22 does not accept a length argument, which allows local users to cause a denial of service memory corruption or possibly have unspecified other impact via a write system call followed by a recvms...

7.8CVSS7.1AI score0.00378EPSS
SaveExploits0References2
Prion
Prion
added 2016/05/02 10:59 a.m.16 views

Memory corruption

The skbcopyandcsumdatagramiovec function in net/core/datagram.c in the Linux kernel 3.14.54 and 3.18.22 does not accept a length argument, which allows local users to cause a denial of service memory corruption or possibly have unspecified other impact via a write system call followed by a recvms...

7.2CVSS7.4AI score0.00378EPSS
SaveExploits0References9Affected Software1
Debian CVE
Debian CVE
added 2016/05/02 10:0 a.m.39 views

CVE-2015-8019

The skbcopyandcsumdatagramiovec function in net/core/datagram.c in the Linux kernel 3.14.54 and 3.18.22 does not accept a length argument, which allows local users to cause a denial of service memory corruption or possibly have unspecified other impact via a write system call followed by a recvms...

7.8CVSS7.9AI score0.00378EPSS
SaveExploits0
Cvelist
Cvelist
added 2016/05/02 10:0 a.m.29 views

CVE-2015-8019

The skbcopyandcsumdatagramiovec function in net/core/datagram.c in the Linux kernel 3.14.54 and 3.18.22 does not accept a length argument, which allows local users to cause a denial of service memory corruption or possibly have unspecified other impact via a write system call followed by a recvms...

7.6AI score0.00378EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2016/01/24 12:0 a.m.11 views

PT-2016-3340 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw was found in the way memory resources were freed in the unix stream recvmsg function in the Linux kernel when a signal was pending. This flaw allows an unprivileged local user t...

8.8CVSS7AI score0.92621EPSS
SaveExploits39References254
Positive Technologies
Positive Technologies
added 2015/02/10 12:0 a.m.4 views

PT-2015-3447 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw was found in the subsequent get user pages fast in the Linux kernel’s interface for symmetric key cipher algorithms in the skcipher recvmsg of crypto/algif skcipher.c function...

6.2CVSS4.9AI score0.0019EPSS
SaveExploits0References16
Oracle linux
Oracle linux
added 2014/09/09 12:0 a.m.59 views

kernel security and bug fix update

2.6.32-431.29.2 - kernel futex: Fix errors in nested key ref-counting Denys Vlasenko 1094457 1094458 CVE-2014-0205 - net vxlan: fix NULL pointer dereference Jiri Benc 1114549 1096351 CVE-2014-3535 2.6.32-431.29.1 - mm hugetlb: ensure hugepage access is denied if hugepages are not supported Gustav...

7.8CVSS7.4AI score0.05926EPSS
SaveExploits14
RedHat Linux
RedHat Linux
added 2014/03/25 2:29 p.m.5 views

Kernel: net: information leak in recvmsg handler msg_name & msg_namelen logic

The mISDNsockrecvmsg function in drivers/isdn/mISDN/socket.c in the Linux kernel before 3.12.4 does not ensure that a certain length value is consistent with the size of an associated data structure, which allows local users to obtain sensitive information from kernel memory via a 1 recvfrom, 2...

4.9CVSS6.7AI score0.00434EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2014/03/12 6:28 p.m.15 views

Kernel: net: leakage of uninitialized memory to user-space via recv syscalls

The Linux kernel before 3.12.4 updates certain length values before ensuring that associated data structures have been initialized, which allows local users to obtain sensitive information from kernel stack memory via a 1 recvfrom, 2 recvmmsg, or 3 recvmsg system call, related to net/ipv4/ping.c,...

4.9CVSS6.7AI score0.0048EPSS
SaveExploits0References4
Rows per page
Query Builder