Lucene search
K

20 matches found

AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.2 views

Astra Linux - уязвимость в linux-5.10, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: ALSA: dice: fix buffer overflow in detectstreamformats The function detectstreamformats reads the streamcount value directly from a FireWire device without validating it. This can lead to out-of-bounds writes when a malicious...

5.8AI score0.00082EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/03/05 12:0 a.m.1 views

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005745)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005745 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: check send stream number after waitforsndbuf This patch fixes a corner case where the asoc...

5.5CVSS5.6AI score0.00021EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2025/12/25 12:24 a.m.1 views

SUSE CVE-2025-68346

In the Linux kernel, the following vulnerability has been resolved: ALSA: dice: fix buffer overflow in detectstreamformats The function detectstreamformats reads the streamcount value directly from a FireWire device without validating it. This can lead to out-of-bounds writes when a malicious...

5.5CVSS6.9AI score0.00082EPSS
Exploits0References21
EUVD
EUVD
added 2025/12/24 12:30 p.m.0 views

EUVD-2025-205108

In the Linux kernel, the following vulnerability has been resolved: ALSA: dice: fix buffer overflow in detectstreamformats The function detectstreamformats reads the streamcount value directly from a FireWire device without validating it. This can lead to out-of-bounds writes when a malicious...

6.4AI score0.00082EPSS
Exploits0References5
NVD
NVD
added 2025/12/24 11:15 a.m.1 views

CVE-2025-68346

In the Linux kernel, the following vulnerability has been resolved: ALSA: dice: fix buffer overflow in detectstreamformats The function detectstreamformats reads the streamcount value directly from a FireWire device without validating it. This can lead to out-of-bounds writes when a malicious...

0.00082EPSS
Exploits0References8
OSV
OSV
added 2025/12/24 11:15 a.m.0 views

UBUNTU-CVE-2025-68346

In the Linux kernel, the following vulnerability has been resolved: ALSA: dice: fix buffer overflow in detectstreamformats The function detectstreamformats reads the streamcount value directly from a FireWire device without validating it. This can lead to out-of-bounds writes when a malicious...

6.1AI score0.00082EPSS
Exploits0References35
CVE
CVE
added 2025/12/24 10:32 a.m.9 views

CVE-2025-68346

The CVE-2025-68346 vulnerability affects the Linux kernel ALSA: dice driver. The root cause is a missing validation of stream_count read from a FireWire device in detect_stream_formats(), which can allow out-of-bounds writes if stream_count exceeds MAX_STREAMS. The fix adds the same validation to...

6.6AI score0.00082EPSS
Exploits0References8
Tenable Nessus
Tenable Nessus
added 2025/12/24 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2025-68346

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: dice: fix buffer overflow in detectstreamformats The function detectstreamformats reads the streamcount value directly from a FireWire device without...

6AI score0.00082EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/12/24 12:0 a.m.1 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an unvalidated streamcount value that could result in a buffer overflow...

6.5AI score0.00082EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2025/11/29 12:0 a.m.2 views

PT-2025-52882

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The detect stream formats function in the ALSA driver for Digital Interface Communication Engine dice devices does not validate the stream count value received from a FireWire device. A...

6CVSS6.4AI score0.00082EPSS
Exploits0
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-59893

Malicious code in bioql PyPI...

6.3AI score0.00021EPSS
Exploits0References8
OSV
OSV
added 2025/09/16 8:15 a.m.0 views

DEBIAN-CVE-2023-53296

In the Linux kernel, the following vulnerability has been resolved: sctp: check send stream number after waitforsndbuf This patch fixes a corner case where the asoc out stream count may change after waitforsndbuf. When the main thread in the client starts a connection, if its out stream count is...

5.5CVSS5.3AI score0.00021EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/09/16 8:11 a.m.4 views

CVE-2023-53296 sctp: check send stream number after wait_for_sndbuf

In the Linux kernel, the following vulnerability has been resolved: sctp: check send stream number after waitforsndbuf This patch fixes a corner case where the asoc out stream count may change after waitforsndbuf. When the main thread in the client starts a connection, if its out stream count is...

0.00021EPSS
Exploits0References7
Vulnrichment
Vulnrichment
added 2025/09/16 8:11 a.m.1 views

CVE-2023-53296 sctp: check send stream number after wait_for_sndbuf

In the Linux kernel, the following vulnerability has been resolved: sctp: check send stream number after waitforsndbuf This patch fixes a corner case where the asoc out stream count may change after waitforsndbuf. When the main thread in the client starts a connection, if its out stream count is...

6AI score0.00021EPSS
Exploits0References7
CVE
CVE
added 2025/09/16 8:11 a.m.15 views

CVE-2023-53296

CVE-2023-53296 affects the Linux kernel SCTP stack. The issue arises when a client’s out-stream count is temporarily higher than the server’s, allowing a thread waiting for sndbuf to send a message on a stream that may no longer exist after INIT_ACK processing, potentially triggering a crash. The...

5.5CVSS6.1AI score0.00021EPSS
Exploits0References7Affected Software1
OSV
OSV
added 2024/09/27 1:15 p.m.1 views

DEBIAN-CVE-2024-46817

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Stop amdgpudm initialize when stream nums greater than 6 Why Coverity reports OVERRUN warning. Should abort amdgpudm initialize. How Return failure to amdgpudminit...

5.5CVSS5.5AI score0.00008EPSS
Exploits0References1
OSV
OSV
added 2024/09/27 1:15 p.m.0 views

UBUNTU-CVE-2024-46817

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Stop amdgpudm initialize when stream nums greater than 6 Why Coverity reports OVERRUN warning. Should abort amdgpudm initialize. How Return failure to amdgpudminit...

5.5CVSS6.1AI score0.00008EPSS
Exploits0References26
RedHat Linux
RedHat Linux
added 2024/01/30 1:28 p.m.2 views

kernel: sctp: check send stream number after wait_for_sndbuf

In the Linux kernel, the following vulnerability has been resolved: sctp: check send stream number after waitforsndbuf This patch fixes a corner case where the asoc out stream count may change after waitforsndbuf. When the main thread in the client starts a connection, if its out stream count is...

5.5CVSS6.8AI score0.00021EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2023/11/14 3:46 p.m.2 views

kernel: sctp: check send stream number after wait_for_sndbuf

In the Linux kernel, the following vulnerability has been resolved: sctp: check send stream number after waitforsndbuf This patch fixes a corner case where the asoc out stream count may change after waitforsndbuf. When the main thread in the client starts a connection, if its out stream count is...

5.5CVSS6.8AI score0.00021EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2023/11/07 9:3 a.m.2 views

kernel: sctp: check send stream number after wait_for_sndbuf

In the Linux kernel, the following vulnerability has been resolved: sctp: check send stream number after waitforsndbuf This patch fixes a corner case where the asoc out stream count may change after waitforsndbuf. When the main thread in the client starts a connection, if its out stream count is...

5.5CVSS6.8AI score0.00021EPSS
Exploits0References5
Rows per page
Query Builder