Lucene search
K

23 matches found

RedhatCVE
RedhatCVE
added 2026/06/05 7:44 p.m.6 views

CVE-2026-0930

Potential read out of bounds case with wolfSSHd on Windows while handling a terminal resize request. An authenticated user could trigger the out of bounds read after establishing a connection which would leak the adjacent stack memory to the pseudo-console output...

4.3CVSS5.5AI score0.00172EPSS
Exploits0References1
EUVD
EUVD
added 2026/04/21 12:32 a.m.3 views

EUVD-2026-23950

Potential read out of bounds case with wolfSSHd on Windows while handling a terminal resize request. An authenticated user could trigger the out of bounds read after establishing a connection which would leak the adjacent stack memory to the pseudo-console output...

2.3CVSS5.8AI score0.00172EPSS
Exploits0References2
NVD
NVD
added 2026/04/20 10:16 p.m.2 views

CVE-2026-0930

Potential read out of bounds case with wolfSSHd on Windows while handling a terminal resize request. An authenticated user could trigger the out of bounds read after establishing a connection which would leak the adjacent stack memory to the pseudo-console output...

4.3CVSS0.00172EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/04/20 9:28 p.m.29 views

CVE-2026-0930 Potential wolfSSHd Buffer out-of-bounds Read on Windows Handling Terminal Resize

Potential read out of bounds case with wolfSSHd on Windows while handling a terminal resize request. An authenticated user could trigger the out of bounds read after establishing a connection which would leak the adjacent stack memory to the pseudo-console output...

2.3CVSS0.00172EPSS
Exploits0References1
CVE
CVE
added 2026/04/20 9:28 p.m.5 views

CVE-2026-0930

CVE-2026-0930 affects wolfSSHd on Windows and describes a potential read-out-of-bounds in the handling of a terminal resize. An authenticated user could trigger the out-of-bounds read after establishing a connection, leaking adjacent stack memory to the pseudo-console output. Public sources (NVD;...

4.3CVSS5.8AI score0.00172EPSS
Exploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/20 9:28 p.m.0 views

CVE-2026-0930

Potential read out of bounds case with wolfSSHd on Windows while handling a terminal resize request. An authenticated user could trigger the out of bounds read after establishing a connection which would leak the adjacent stack memory to the pseudo-console output...

2.3CVSS5.8AI score0.00172EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/20 9:28 p.m.1 views

CVE-2026-0930 Potential wolfSSHd Buffer out-of-bounds Read on Windows Handling Terminal Resize

Potential read out of bounds case with wolfSSHd on Windows while handling a terminal resize request. An authenticated user could trigger the out of bounds read after establishing a connection which would leak the adjacent stack memory to the pseudo-console output...

2.3CVSS5.8AI score0.00172EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/04/20 12:0 a.m.4 views

wolfSSH 安全漏洞

WolfSSH is a small, fast, and portable SSH implementation of wolfSSL, including support for SCP and SFTP. WolfSSH has security vulnerabilities, particularly an out-of-bounds read vulnerability when handling terminal resizing requests, which may lead to authenticated users leaking adjacent stack...

4.3CVSS5.8AI score0.00172EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/04/20 12:0 a.m.3 views

PT-2026-33853

Potential read out of bounds case with wolfSSHd on Windows while handling a terminal resize request. An authenticated user could trigger the out of bounds read after establishing a connection which would leak the adjacent stack memory to the pseudo-console output...

2.3CVSS5.8AI score0.00172EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.5 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004030)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004030 advisory. A flaw was found in the Linux kernels implementation of the invert video code on VGA consoles when a local attacker attempts to resize the console, calling an ioctl...

7.2CVSS7AI score0.00563EPSS
Exploits1References9
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2022-23471

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - containerd is an open source container runtime. A bug was found in containerd's CRI implementation where a user can exhaust memory on the host. In the CRI strea...

6.5CVSS7.1AI score0.01022EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2023/10/10 4:31 p.m.1 views

kernel: race condition in VT_RESIZEX ioctl when vc_cons[i].d is already NULL leading to NULL pointer dereference

A NULL pointer dereference flaw was found in the Linux kernel’s Virtual Terminal subsystem was found in how a user calls the VTRESIZEX ioctl. This flaw allows a local user to crash the system...

5.1CVSS6.6AI score0.00294EPSS
Exploits1References5
Tenable Nessus
Tenable Nessus
added 2023/03/24 12:0 a.m.24 views

EulerOS 2.0 SP11 : containerd (EulerOS-SA-2023-1580)

According to the versions of the containerd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - containerd is an open source container runtime. A bug was found in containerd's CRI implementation where a user can exhaust memory on the hos...

6.5CVSS7.3AI score0.01022EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2023/02/15 3:28 a.m.1 views

SUSE CVE-2022-23471

containerd is an open source container runtime. A bug was found in containerd's CRI implementation where a user can exhaust memory on the host. In the CRI stream server, a goroutine is launched to handle terminal resize events if a TTY is requested. If the user's process fails to launch due to, f...

6.5CVSS7.7AI score0.01022EPSS
Exploits0References19
OSV
OSV
added 2022/12/17 11:4 a.m.2 views

OESA-2022-2143 containerd security update

containerd is an industry-standard container runtime with an emphasis on simplicity, robustness and portability. It is available as a daemon for Linux and Windows, which can manage the complete container lifecycle of its host system: image transfer and storage, container execution and supervision...

6.5CVSS7.4AI score0.01022EPSS
Exploits0References2
Microsoft CVE
Microsoft CVE
added 2022/12/13 8:0 a.m.4 views

containerd CRI stream server: Host memory exhaustion through terminal resize goroutine leak

...

6.5CVSS6.8AI score0.01022EPSS
Exploits0
OSV
OSV
added 2022/12/08 12:0 a.m.0 views

UBUNTU-CVE-2022-23471

containerd is an open source container runtime. A bug was found in containerd's CRI implementation where a user can exhaust memory on the host. In the CRI stream server, a goroutine is launched to handle terminal resize events if a TTY is requested. If the user's process fails to launch due to, f...

6.5CVSS6.8AI score0.01022EPSS
Exploits0References5
Cvelist
Cvelist
added 2022/12/07 10:51 p.m.21 views

CVE-2022-23471 containerd CRI stream server: Host memory exhaustion through terminal resize goroutine leak

containerd is an open source container runtime. A bug was found in containerd's CRI implementation where a user can exhaust memory on the host. In the CRI stream server, a goroutine is launched to handle terminal resize events if a TTY is requested. If the user's process fails to launch due to, f...

5.7CVSS7.4AI score0.01022EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2022/12/07 10:51 p.m.4 views

CVE-2022-23471 containerd CRI stream server: Host memory exhaustion through terminal resize goroutine leak

containerd is an open source container runtime. A bug was found in containerd's CRI implementation where a user can exhaust memory on the host. In the CRI stream server, a goroutine is launched to handle terminal resize events if a TTY is requested. If the user's process fails to launch due to, f...

5.7CVSS6.7AI score0.01022EPSS
Exploits0References3
RedHat Linux
RedHat Linux
added 2022/11/08 9:25 a.m.4 views

kernel: race condition in VT_RESIZEX ioctl when vc_cons[i].d is already NULL leading to NULL pointer dereference

A NULL pointer dereference flaw was found in the Linux kernel’s Virtual Terminal subsystem was found in how a user calls the VTRESIZEX ioctl. This flaw allows a local user to crash the system...

5.1CVSS6.6AI score0.00294EPSS
Exploits1References5
Rows per page
Query Builder