Lucene search
+L

6 matches found

Tenable Nessus
Tenable Nessus
•added 2026/09/18 12:00 a.m.•13 views

EulerOS Virtualization 2.11.1 : haveged (EulerOS-SA-2026-3421)

According to the versions of the haveged packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In src/havegecmd.c, the sockethandler function performs a credential check on the abstract UNIX socket \0/sys/entropy/haveged...

7.8CVSS7.3AI score0.00185EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/09/18 12:00 a.m.•20 views

EulerOS Virtualization 2.11.0 : haveged (EulerOS-SA-2026-3508)

According to the versions of the haveged packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In src/havegecmd.c, the sockethandler function performs a credential check on the abstract UNIX socket \0/sys/entropy/haveged...

7.8CVSS7.3AI score0.00185EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/08/25 12:00 a.m.•17 views

EulerOS Virtualization 2.13.1 : haveged (EulerOS-SA-2026-3174)

According to the versions of the haveged packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In src/havegecmd.c, the sockethandler function performs a credential check on the abstract UNIX socket \0/sys/entropy/haveged...

7.8CVSS7.3AI score0.00185EPSS
SaveExploits0References2
osv_azl
osv_azl
•added 2026/05/20 10:16 a.m.•21 views

AZL-87113 CVE-2026-41054 affecting package haveged for versions less than 1.9.22-1

In src/havegecmd.c, the sockethandler function performs a credential check on the abstract UNIX socket \0/sys/entropy/haveged. However, while it detects if the connecting user is not root cred.uid != 0 and prepares a negative acknowledgement ASCIINAK, it fails to stop execution. The code proceeds...

7.8CVSS7.5AI score0.00185EPSS
SaveExploits0References1
Mend
Mend
•added 2026/05/20 8:56 a.m.•5 views

CVE-2026-41054

In "src/havegecmd.c", the "sockethandler" function performs a credential check on the abstract UNIX socket "\0/sys/entropy/haveged". However, while it detects if the connecting user is not root "cred.uid != 0" and prepares a negative acknowledgement "ASCIINAK", it fails to stop execution. The cod...

8.5CVSS7.6AI score0.00185EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/20 12:00 a.m.•5 views

CVE-2026-41054: Authentication Bypass by Primary Weakness

In src/havegecmd.c, the sockethandler function performs a credential check on the abstract UNIX socket \0/sys/entropy/haveged. However, while it detects if the connecting user is not root cred.uid != 0 and prepares a negative acknowledgement ASCIINAK, it fails to stop execution. The code proceeds...

7.8CVSS7.5AI score0.00185EPSS
SaveExploits0References2
Rows per page
Query Builder