805 matches found
kernel: fuse: stall on CPU can occur because a retry loop continually finds the same bad inode
A denial of service in the kernel side of the FUSE functionality can allow a local system to create a denial of service...
kernel: fuse: stall on CPU can occur because a retry loop continually finds the same bad inode
A denial of service in the kernel side of the FUSE functionality can allow a local system to create a denial of service...
GSD-2021-1002161 mptcp: fix possible stall on recvmsg()
mptcp: fix possible stall on recvmsg This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15 by commit 612f71d7328c14369924384ad2170aae2a6abd92, i...
UVI-2021-1002161 mptcp: fix possible stall on recvmsg()
mptcp: fix possible stall on recvmsg This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15 by commit 612f71d7328c14369924384ad2170aae2a6abd92, i...
GSD-2021-1002092 mptcp: fix possible stall on recvmsg()
mptcp: fix possible stall on recvmsg This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.14 by commit 1a4554e94f0deff9fc1dc5addf93fa579cc29711...
UVI-2021-1002092 mptcp: fix possible stall on recvmsg()
mptcp: fix possible stall on recvmsg This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.14 by commit 1a4554e94f0deff9fc1dc5addf93fa579cc29711...
PT-2021-30557
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.14 Description A potential issue exists in the mptcp component, which could lead to a stall on recvmsg. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2021-30626
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.6 through v5.15 Description A potential issue in the mptcp component of the Linux Kernel may cause a stall on recvmsg. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...
PT-2021-26562
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.14 Description A potential issue exists in the mptcp component, which could lead to a stall on recvmsg. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2021-26631
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.6 through v5.15 Description: A potential issue in the mptcp component of the Linux Kernel may cause a stall on recvmsg. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...
CentOS 8 : kernel-rt (CESA-2021:4140)
The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:4140 advisory. - kernel: Intel graphics card information leak. CVE-2019-14615 - kernel: out-of-bounds reads in pinctrl subsystem. CVE-2020-0427 - kernel: Improper inp...
kernel: fuse: stall on CPU can occur because a retry loop continually finds the same bad inode
A denial of service in the kernel side of the FUSE functionality can allow a local system to create a denial of service...
CVE-2021-43173
In NLnet Labs Routinator prior to 0.10.2, a validation run can be delayed significantly by an RRDP repository by not answering but slowly drip-feeding bytes to keep the connection alive. This can be used to effectively stall validation. While Routinator has a configurable time-out value for RRDP...
DEBIAN-CVE-2021-43173
In NLnet Labs Routinator prior to 0.10.2, a validation run can be delayed significantly by an RRDP repository by not answering but slowly drip-feeding bytes to keep the connection alive. This can be used to effectively stall validation. While Routinator has a configurable time-out value for RRDP...
CVE-2021-43173
In NLnet Labs Routinator prior to 0.10.2, a validation run can be delayed significantly by an RRDP repository by not answering but slowly drip-feeding bytes to keep the connection alive. This can be used to effectively stall validation. While Routinator has a configurable time-out value for RRDP...
CVE-2021-43173
In NLnet Labs Routinator prior to 0.10.2, a validation run can be delayed significantly by an RRDP repository by not answering but slowly drip-feeding bytes to keep the connection alive. This can be used to effectively stall validation. While Routinator has a configurable time-out value for RRDP...
CVE-2021-43173
In NLnet Labs Routinator prior to 0.10.2, a validation run can be delayed significantly by an RRDP repository by not answering but slowly drip-feeding bytes to keep the connection alive. This can be used to effectively stall validation. While Routinator has a configurable time-out value for RRDP...
CVE-2021-43173
CVE-2021-43173 concerns NLnet Labs Routinator prior to 0.10.2. A validation run can be stalled by an RRDP repository that slowly drip-feeds bytes, exploiting the misapplied timeout (applied to individual reads/writes, not the whole request). This can cause validation to be delayed for so long tha...
CVE-2021-43173
In NLnet Labs Routinator prior to 0.10.2, a validation run can be delayed significantly by an RRDP repository by not answering but slowly drip-feeding bytes to keep the connection alive. This can be used to effectively stall validation. While Routinator has a configurable time-out value for RRDP...
CVE-2021-43173: Improper Handling of Exceptional Conditions
In NLnet Labs Routinator prior to 0.10.2, a validation run can be delayed significantly by an RRDP repository by not answering but slowly drip-feeding bytes to keep the connection alive. This can be used to effectively stall validation. While Routinator has a configurable time-out value for RRDP...