Lucene search
+L

74 matches found

SUSE CVE
SUSE CVE
•added 2023/02/15 3:26 a.m.•18 views

SUSE CVE-2022-28893

The SUNRPC subsystem in the Linux kernel through 5.17.2 can call xsxprtfree before ensuring that sockets are in the intended state...

6.2CVSS6.6AI score0.0041EPSS
SaveExploits0References13
attackerkb
attackerkb
•added 2022/04/11 5:15 a.m.•24 views

CVE-2022-28893

The SUNRPC subsystem in the Linux kernel through 5.17.2 can call xsxprtfree before ensuring that sockets are in the intended state...

7.8CVSS6.8AI score0.0041EPSS
SaveExploits0References7
OSV
OSV
•added 2022/04/11 5:15 a.m.•14 views

UBUNTU-CVE-2022-28893

The SUNRPC subsystem in the Linux kernel through 5.17.2 can call xsxprtfree before ensuring that sockets are in the intended state...

7.8CVSS6.7AI score0.0041EPSS
SaveExploits0References10
CNNVD
CNNVD
•added 2022/04/11 12:00 a.m.•9 views

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel version 5.17.2 and earlier, which stems from the fact that the SUNRPC subsystem can call xsxprtfree before ensuring that a socke...

7.8CVSS6.7AI score0.0041EPSS
SaveExploits0References22
attackerkb
attackerkb
•added 2022/01/03 8:15 a.m.•8 views

CVE-2021-30262

Improper validation of a socket state when socket events are being sent to clients can lead to invalid access of memory in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon...

8.4CVSS7AI score0.00146EPSS
SaveExploits0References2
Prion
Prion
•added 2022/01/03 8:15 a.m.•29 views

Input validation

Improper validation of a socket state when socket events are being sent to clients can lead to invalid access of memory in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon...

4.6CVSS7.6AI score0.00146EPSS
SaveExploits0References1
CVE
CVE
•added 2022/01/03 7:25 a.m.•123 views

CVE-2021-30262

CVE-2021-30262 describes improper validation of a socket state when socket events are sent to clients, causing invalid memory access in Qualcomm Snapdragon devices. Affected families include Snapdragon Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, Voice & Music, and Wearables...

8.4CVSS7.6AI score0.00146EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/03 12:00 a.m.•1 views

CVE-2021-30262: Use After Free

Improper validation of a socket state when socket events are being sent to clients can lead to invalid access of memory in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon...

8.4CVSS5.7AI score0.00146EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/12/06 12:00 a.m.•16 views

Qualcomm Chipsets 资源管理错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A resource management error vulnerability exists in multiple Qualcomm products, which stems from an incorrect validation of the socket state when sending socket events to a client could result in invalid memory access. The...

8.4CVSS7.3AI score0.00146EPSS
SaveExploits0References6
Virtuozzo
Virtuozzo
•added 2017/12/15 12:00 a.m.•56 views

Important kernel security update: CVE-2017-8824 and other; new kernel 2.6.32-042stab126.2, Virtuozzo 6.0 Update 12 Hotfix 19 (6.0.12-3689)

This update provides a new Virtuozzo 6.0 kernel 2.6.32-042stab126.2 based on the Red Hat Enterprise Linux 6.9 kernel 2.6.32-696.16.1.el6. The new kernel introduces security and stability fixes. Vulnerability id: CVE-2017-8824 dccpdisconnect set the socket state to DCCPCLOSED but did not properly...

7.8CVSS7.1AI score0.0215EPSS
SaveExploits8References2
OSV
OSV
•added 2015/03/27 2:59 p.m.•9 views

DEBIAN-CVE-2014-3619

The socketprotostatemachine function in GlusterFS 3.5 allows remote attackers to cause a denial of service infinite loop via a "00000000" fragment header...

5CVSS8.1AI score0.02719EPSS
SaveExploits0References1
OSV
OSV
•added 2015/03/27 2:59 p.m.•10 views

UBUNTU-CVE-2014-3619

The socketprotostatemachine function in GlusterFS 3.5 allows remote attackers to cause a denial of service infinite loop via a "00000000" fragment header...

5CVSS7.3AI score0.02719EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2015/03/27 12:00 a.m.•11 views

PT-2015-3728 · Red Hat +1 · Glusterfs +1

Name of the Vulnerable Software and Affected Versions: GlusterFS version 3.5 Description: The issue allows remote attackers to cause a denial of service, resulting in an infinite loop. This is achieved by sending a specific fragment header, "00000000", to the socket proto state machine function...

8.8CVSS6.7AI score0.05487EPSS
SaveExploits1References69
RedHat Linux
RedHat Linux
•added 2015/01/15 1:35 p.m.•13 views

glusterfs: fragment header infinite loop DoS

A denial of service flaw was found in the way the socketprotostatemachine function of glusterfs processed certain fragment headers. A remote attacker could send a specially crafted fragment header that, when processed, would cause the glusterfs process to enter an infinite loop...

5CVSS7.3AI score0.02719EPSS
SaveExploits0References4
Rows per page
Query Builder