Lucene search
K

843 matches found

Tenable Nessus
Tenable Nessus
added 2025/03/13 12:0 a.m.8 views

Siemens SCALANCE X-200RNA Switch Devices Concurrent Execution using Shared Resource with Improper Synchronization (CVE-2015-1791)

Race condition in the ssl3getnewsessionticket function in ssl/s3clnt.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b, when used for a multi-threaded client, allows remote attackers to cause a denial of service double free and application crash or...

6.8CVSS7.6AI score0.15968EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/03/06 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2023-45664

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - stbimage is a single file MIT licensed library for processing images. A crafted image file can trigger stbiloadgifmainoutofmem attempt to double-free the out...

8.8CVSS7.2AI score0.00867EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.16 views

Linux Distros Unpatched Vulnerability : CVE-2024-45296

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cause...

7.5CVSS6.7AI score0.00932EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2023-6879

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Increasing the resolution of video frames, while performing a multi-threaded encode, can result in a heap overflow in av1looprestorationdealloc. CVE-2023-6879...

9.8CVSS6.2AI score0.01165EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2015-1791

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in the ssl3getnewsessionticket function in ssl/s3clnt.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before...

6.8CVSS7.5AI score0.15968EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2025/03/01 2:52 a.m.9 views

SUSE CVE-2025-21821

In the Linux kernel, the following vulnerability has been resolved: fbdev: omap: use threaded IRQ for LCD DMA When using touchscreen and framebuffer, Nokia 770 crashes easily with: BUG: scheduling while atomic: irq/144-ads7846/82/0x00010000 Modules linked in: usbfecm gether usbfrndis uether...

5.5CVSS6.7AI score0.00176EPSS
Exploits0References16
OSV
OSV
added 2025/02/27 8:16 p.m.0 views

DEBIAN-CVE-2025-21821

In the Linux kernel, the following vulnerability has been resolved: fbdev: omap: use threaded IRQ for LCD DMA When using touchscreen and framebuffer, Nokia 770 crashes easily with: BUG: scheduling while atomic: irq/144-ads7846/82/0x00010000 Modules linked in: usbfecm gether usbfrndis uether...

5.5CVSS5.6AI score0.00176EPSS
Exploits0References1
OSV
OSV
added 2025/02/27 8:16 p.m.3 views

UBUNTU-CVE-2025-21821

In the Linux kernel, the following vulnerability has been resolved: fbdev: omap: use threaded IRQ for LCD DMA When using touchscreen and framebuffer, Nokia 770 crashes easily with: BUG: scheduling while atomic: irq/144-ads7846/82/0x00010000 Modules linked in: usbfecm gether usbfrndis uether...

5.5CVSS6.5AI score0.00176EPSS
Exploits0References17
Cvelist
Cvelist
added 2025/02/27 8:6 p.m.18 views

CVE-2025-21821 fbdev: omap: use threaded IRQ for LCD DMA

In the Linux kernel, the following vulnerability has been resolved: fbdev: omap: use threaded IRQ for LCD DMA When using touchscreen and framebuffer, Nokia 770 crashes easily with: BUG: scheduling while atomic: irq/144-ads7846/82/0x00010000 Modules linked in: usbfecm gether usbfrndis uether...

0.00176EPSS
Exploits0References5
Debian CVE
Debian CVE
added 2025/02/27 8:6 p.m.8 views

CVE-2025-21821

In the Linux kernel, the following vulnerability has been resolved: fbdev: omap: use threaded IRQ for LCD DMA When using touchscreen and framebuffer, Nokia 770 crashes easily with: BUG: scheduling while atomic: irq/144-ads7846/82/0x00010000 Modules linked in: usbfecm gether usbfrndis uether...

5.5CVSS5.6AI score0.00176EPSS
Exploits0
CNNVD
CNNVD
added 2025/02/27 12:0 a.m.3 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the use of a non-threaded IRQ to handle LCD DMA, which could lead to scheduling issues...

5.5CVSS6.4AI score0.00176EPSS
Exploits0References7
Rockylinux
Rockylinux
added 2025/02/13 8:34 p.m.12 views

mariadb:10.11 security update

An update is available for module.mariadb, module.Judy, mariadb, module.galera, Judy, galera. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list MariaDB is a...

4.9CVSS5.6AI score0.00424EPSS
Exploits0
AstraLinux
AstraLinux
added 2025/02/06 4:28 p.m.2 views

Astra Linux - уязвимость в linux-5.10

In the Linux kernel, the following vulnerability has been resolved: VMCI: Use threaded irqs instead of tasklets The vmcidispatchdgs tasklet function calls vmcireaddata which uses waitevent resulting in invalid sleep in an atomic context and therefore potentially in a deadlock. Use threaded irqs t...

5.5CVSS6.4AI score0.00113EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2025/02/06 3:48 a.m.2 views

SUSE CVE-2025-0665

libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having completed a threaded name resolve...

6.5CVSS7AI score0.01166EPSS
Exploits1References5
ATTACKERKB
ATTACKERKB
added 2025/02/05 10:15 a.m.1 views

CVE-2025-0665

libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having completed a threaded name resolve...

9.8CVSS5.8AI score0.01166EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2025/02/05 10:15 a.m.2 views

ALPINE-CVE-2025-0665

libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having completed a threaded name resolve...

7CVSS7AI score0.01166EPSS
Exploits1References1
OSV
OSV
added 2025/02/05 10:15 a.m.1 views

AZL-56692 CVE-2025-0665 affecting package curl for versions less than 8.11.1-3

libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having completed a threaded name resolve...

7CVSS7.2AI score0.01166EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2025/02/05 9:16 a.m.22 views

CVE-2025-0665 eventfd double close

libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having completed a threaded name resolve...

9.4AI score0.01166EPSS
Exploits1References3
CVE
CVE
added 2025/02/05 9:16 a.m.403 views

CVE-2025-0665

CVE-2025-0665 affects libcurl/curl. The issue is double-closing the same eventfd file descriptor when bringing down a connection channel after a threaded name resolve, leading to potential instability and misbehavior. Several sources note that this can allow a remote attacker to execute arbitrary...

7CVSS7AI score0.01166EPSS
Exploits1References6Affected Software1
OSV
OSV
added 2025/02/05 8:0 a.m.11 views

CURL-CVE-2025-0665 eventfd double close

libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having completed a threaded name resolve...

7CVSS7.1AI score0.01166EPSS
Exploits1
Rows per page
Query Builder