Lucene search
+L

1701 matches found

OSV
OSV
added 2024/04/03 5:15 p.m.9 views

UBUNTU-CVE-2024-26748

In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: fix memory double free when handle zero packet 829 if request-complete 830 spinunlock&privdev-lock; 831 usbgadgetgivebackrequest&privep-endpoint, 832 request; 833 spinlock&privdev-lock; 834 835 836 if request-buf ==...

7.8CVSS6.1AI score0.00242EPSS
SaveExploits0References27
RedHat Linux
RedHat Linux
added 2024/03/05 6:05 p.m.8 views

ffr: Flowspec overflow in bgpd/bgp_flowspec.c

A flaw was found in bgpd/bgpflowspec.c in the FFrouting BGP protocol code. An overflow may occur while processing zero length NLRI messages...

9.8CVSS5.8AI score0.00939EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2024/03/05 3:10 p.m.7 views

ffr: Flowspec overflow in bgpd/bgp_flowspec.c

A flaw was found in bgpd/bgpflowspec.c in the FFrouting BGP protocol code. An overflow may occur while processing zero length NLRI messages...

9.8CVSS5.8AI score0.00939EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2024/03/05 8:23 a.m.11 views

ffr: Flowspec overflow in bgpd/bgp_flowspec.c

A flaw was found in bgpd/bgpflowspec.c in the FFrouting BGP protocol code. An overflow may occur while processing zero length NLRI messages...

9.8CVSS5.8AI score0.00939EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2024/02/27 10:15 a.m.9 views

CVE-2021-46935

In the Linux kernel, the following vulnerability has been resolved: binder: fix asyncfreespace accounting for empty parcels In 4.13, commit 74310e06be4d "android: binder: Move buffer out of area shared with user space" fixed a kernel structure visibility issue. As part of that patch, sizeofvoid w...

5.5CVSS5.9AI score0.00229EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2024/02/27 10:15 a.m.7 views

DEBIAN-CVE-2021-46935

In the Linux kernel, the following vulnerability has been resolved: binder: fix asyncfreespace accounting for empty parcels In 4.13, commit 74310e06be4d "android: binder: Move buffer out of area shared with user space" fixed a kernel structure visibility issue. As part of that patch, sizeofvoid w...

5.5CVSS5.4AI score0.00229EPSS
SaveExploits0References1
OSV
OSV
added 2024/02/23 3:15 p.m.3 views

DEBIAN-CVE-2023-52455

In the Linux kernel, the following vulnerability has been resolved: iommu: Don't reserve 0-length IOVA region When the bootloader/firmware doesn't setup the framebuffers, their address and size are 0 in "iommu-addresses" property. If IOVA region is reserved with 0 length, then it ends up corrupti...

7.8CVSS5.9AI score0.00236EPSS
SaveExploits0References1
OSV
OSV
added 2024/02/23 3:15 p.m.7 views

UBUNTU-CVE-2023-52455

In the Linux kernel, the following vulnerability has been resolved: iommu: Don't reserve 0-length IOVA region When the bootloader/firmware doesn't setup the framebuffers, their address and size are 0 in "iommu-addresses" property. If IOVA region is reserved with 0 length, then it ends up corrupti...

7.8CVSS6.3AI score0.00236EPSS
SaveExploits0References13
SUSE CVE
SUSE CVE
added 2024/02/15 4:11 a.m.6 views

SUSE CVE-2023-46838

Transmit requests in Xen's virtual network protocol can consist of multiple parts. While not really useful, except for the initial part any of them may be of zero length, i.e. carry no data at all. Besides a certain initial portion of the to be transferred data, these parts are directly translate...

4.4CVSS6.7AI score0.01177EPSS
SaveExploits0References14
RedHat Linux
RedHat Linux
added 2024/02/13 2:45 p.m.11 views

rubygem-puma: HTTP request smuggling when parsing chunked transfer encoding bodies and zero-length content-length headers

An HTTP request smuggling attack vulnerability was found in Rubygem Puma. This flaw allows an attacker to gain unauthorized access to sensitive data due to an inconsistent interpretation of HTTP requests...

9.8CVSS7.1AI score0.00847EPSS
SaveExploits0References5
Microsoft CVE
Microsoft CVE
added 2024/02/02 8:00 a.m.6 views

Linux: netback processing of zero-length transmit fragment

...

7.5CVSS6.7AI score0.01177EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2024/02/02 12:00 a.m.10 views

PT-2024-7717 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the crypto component of the Linux kernel, specifically with the algif hash function. When a zero-length message is hashed by algif hash and an error is triggere...

7.8CVSS6.5AI score0.00839EPSS
SaveExploits1References318
RedHat Linux
RedHat Linux
added 2024/01/30 1:24 p.m.11 views

ffr: Flowspec overflow in bgpd/bgp_flowspec.c

A flaw was found in bgpd/bgpflowspec.c in the FFrouting BGP protocol code. An overflow may occur while processing zero length NLRI messages...

9.8CVSS5.8AI score0.00939EPSS
SaveExploits0References5
NVD
NVD
added 2024/01/29 11:15 a.m.32 views

CVE-2023-46838

Transmit requests in Xen's virtual network protocol can consist of multiple parts. While not really useful, except for the initial part any of them may be of zero length, i.e. carry no data at all. Besides a certain initial portion of the to be transferred data, these parts are directly translate...

7.5CVSS7.5AI score0.01177EPSS
SaveExploits0References6
OSV
OSV
added 2024/01/29 11:15 a.m.6 views

ALPINE-CVE-2023-46838

Transmit requests in Xen's virtual network protocol can consist of multiple parts. While not really useful, except for the initial part any of them may be of zero length, i.e. carry no data at all. Besides a certain initial portion of the to be transferred data, these parts are directly translate...

7.5CVSS7.1AI score0.01177EPSS
SaveExploits0References1
OSV
OSV
added 2024/01/29 11:15 a.m.9 views

AZL-34016 CVE-2023-46838 affecting package kernel for versions less than 5.15.153.1-1

Transmit requests in Xen's virtual network protocol can consist of multiple parts. While not really useful, except for the initial part any of them may be of zero length, i.e. carry no data at all. Besides a certain initial portion of the to be transferred data, these parts are directly translate...

7.5CVSS6.8AI score0.01177EPSS
SaveExploits0References1
OSV
OSV
added 2024/01/29 11:15 a.m.2 views

DEBIAN-CVE-2023-46838

Transmit requests in Xen's virtual network protocol can consist of multiple parts. While not really useful, except for the initial part any of them may be of zero length, i.e. carry no data at all. Besides a certain initial portion of the to be transferred data, these parts are directly translate...

7.5CVSS6.9AI score0.01177EPSS
SaveExploits0References1
OSV
OSV
added 2024/01/29 11:15 a.m.12 views

AZL-34863 CVE-2023-46838 affecting package kernel for versions less than 6.6.35.1-4

Transmit requests in Xen's virtual network protocol can consist of multiple parts. While not really useful, except for the initial part any of them may be of zero length, i.e. carry no data at all. Besides a certain initial portion of the to be transferred data, these parts are directly translate...

7.5CVSS6.8AI score0.01177EPSS
SaveExploits0References1
OSV
OSV
added 2024/01/29 11:15 a.m.42 views

CVE-2023-46838

Transmit requests in Xen's virtual network protocol can consist of multiple parts. While not really useful, except for the initial part any of them may be of zero length, i.e. carry no data at all. Besides a certain initial portion of the to be transferred data, these parts are directly translate...

7.5CVSS7.6AI score
SaveExploits0References6
OSV
OSV
added 2024/01/29 11:15 a.m.9 views

UBUNTU-CVE-2023-46838

Transmit requests in Xen's virtual network protocol can consist of multiple parts. While not really useful, except for the initial part any of them may be of zero length, i.e. carry no data at all. Besides a certain initial portion of the to be transferred data, these parts are directly translate...

7.5CVSS6.8AI score0.01177EPSS
SaveExploits0References17
Rows per page
Query Builder