Lucene search
+L

2950 matches found

Github Security Blog
Github Security Blog
added 2021/08/25 9:1 p.m.41 views

crossbeam-deque Data Race before v0.7.4 and v0.8.1

Impact In the affected version of this crate, the result of the race condition is that one or more tasks in the worker queue can be popped twice instead of other tasks that are forgotten and never popped. If tasks are allocated on the heap, this can cause double free and a memory leak. If not, th...

9.8CVSS0.6AI score0.01923EPSS
SaveExploits0References18Affected Software1
OSV
OSV
added 2021/08/12 12:0 a.m.6 views

UBUNTU-CVE-2021-3677

A flaw was found in postgresql. A purpose-crafted query can read arbitrary bytes of server memory. In the default configuration, any authenticated database user can complete this attack at will. The attack does not require the ability to create objects. If server settings include...

6.5CVSS6.9AI score0.01442EPSS
SaveExploits0References3
PostrgeSql
PostrgeSql
added 2021/08/12 12:0 a.m.134 views

Vulnerability in core server (CVE-2021-3677)

Memory disclosure in certain queries A purpose-crafted query can read arbitrary bytes of server memory. In the default configuration, any authenticated database user can complete this attack at will. The attack does not require the ability to create objects. If server settings include...

6.5CVSS6.6AI score0.01442EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2021/07/30 12:0 p.m.38 views

RUSTSEC-2021-0093 Data race in crossbeam-deque

In the affected version of this crate, the result of the race condition is that one or more tasks in the worker queue can be popped twice instead of other tasks that are forgotten and never popped. If tasks are allocated on the heap, this can cause double free and a memory leak. If not, this stil...

9.8CVSS8AI score0.01923EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2021/07/16 12:0 a.m.79 views

openSUSE 15 Security Update : nginx (openSUSE-SU-2021:1815-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:1815-1 advisory. - A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause...

7.7CVSS7.8AI score0.53461EPSS
SaveExploits10References4
IBM Security Bulletins
IBM Security Bulletins
added 2021/06/24 6:31 p.m.26 views

Security Bulletin: Red Hat OpenShift on IBM Cloud is affected by a security vulnerability (CVE-2020-14336)

Summary Red Hat OpenShift Container Platform is vulnerable to a denial of service, caused by a flaw in the Restricted Security Context Constraints SCC. By sending specially crafted network packets, an attacker could exploit this vulnerability to cause a denial of service CVE-2020-14336...

6.5CVSS0.3AI score0.0093EPSS
SaveExploits0Affected Software1
Ivan 'd0znpp' Novikov
Ivan 'd0znpp' Novikov
added 2021/06/21 3:50 p.m.134 views

What is DNS (Domain Name System) Spoofing and Cache Poisoning❓

What Is DNS spoofing? Domain Name System DNS harming and caricaturing are sorts of cyberattack that adventure DNS worker weaknesses to redirect traffic from real workers towards counterfeit ones. Whenever you’ve ventured out to a fake page, you might be astounded on the best way to determine it —...

6.8AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2021/06/11 3:52 p.m.46 views

Security Bulletin: Red Hat OpenShift on IBM Cloud is affected by a cri-o/runc security vulnerability (CVE-2021-30465)

Summary Red Hat OpenShift on IBM Cloud is affected by a security vulnerability found in cri-o/runc that could allow certain container configuration requests to actually result in the host filesystem being bind-mounted into the container allowing for a container escape CVE-2021-30465. Vulnerabilit...

8.5CVSS0.1AI score0.06604EPSS
SaveExploits0Affected Software1
Microsoft CVE
Microsoft CVE
added 2021/06/11 7:0 a.m.8 views

A security issue in nginx resolver was identified which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite resulting in worker process crash or potential other impact.

...

7.7CVSS7AI score0.53461EPSS
SaveExploits10
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.33 views

SUSE: Security Advisory (SUSE-SU-2019:0334-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.2CVSS7.1AI score0.47057EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2021/06/04 12:0 a.m.9 views

PT-2024-11274 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel version 5.13.0-rc4-00927-gebbe9dbd802c-dirty 36 Description: A vulnerability in the Linux kernel has been resolved. The issue involves a pending hrtimer that may expire after the kthread worker of a tcpm port is destroyed. This c...

7.8CVSS7AI score0.00231EPSS
SaveExploits0References16
IBM Security Bulletins
IBM Security Bulletins
added 2021/06/03 2:45 p.m.36 views

Security Bulletin: IBM Cloud Kubernetes Service is affected by a containerd security vulnerability (CVE-2021-30465)

Summary IBM Cloud Kubernetes Service is affected by a security vulnerability found in containerd that could allow certain container configuration requests to actually result in the host filesystem being bind-mounted into the container allowing for a container escape CVE-2021-30465. Vulnerability...

8.5CVSS0.06604EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2021/06/01 1:15 p.m.10 views

ALPINE-CVE-2021-23017

A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact...

7.7CVSS6.8AI score0.53461EPSS
SaveExploits10References1
OSV
OSV
added 2021/06/01 1:15 p.m.4 views

DEBIAN-CVE-2021-23017

A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact...

7.7CVSS7.8AI score0.53461EPSS
SaveExploits10References1
OSV
OSV
added 2021/06/01 1:15 p.m.33 views

CVE-2021-23017

A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact...

7.7CVSS6.9AI score
SaveExploits0References14
NVD
NVD
added 2021/06/01 1:15 p.m.40 views

CVE-2021-23017

A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact...

7.7CVSS0.53461EPSS
SaveExploits10References14
ATTACKERKB
ATTACKERKB
added 2021/06/01 1:15 p.m.7 views

CVE-2021-23017

A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact...

7.7CVSS7.2AI score0.53461EPSS
SaveExploits10References23
Prion
Prion
added 2021/06/01 1:15 p.m.90 views

Memory corruption

A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact...

6.8CVSS7.4AI score0.53461EPSS
SaveExploits10References14Affected Software12
Cvelist
Cvelist
added 2021/06/01 12:28 p.m.73 views

CVE-2021-23017

A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact...

7.9AI score0.53461EPSS
SaveExploits10References14
Debian CVE
Debian CVE
added 2021/06/01 12:28 p.m.182 views

CVE-2021-23017

A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact...

7.7CVSS8AI score0.53461EPSS
SaveExploits10
Rows per page
Query Builder