Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 189

Export CSV
CVE-2019-19053

kernel: A memory leak in the rpmsg_eptdev_write_iter() function in drivers/rpmsg/rpmsg_char.c allows attackers to cause a DoS

A memory leak in the rpmsg_eptdev_write_iter() function in drivers/rpmsg/rpmsg_char.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering copy_from_iter_full() failures, aka CID-bbe692e349e2.

CVSS 3.1 · 7.5 High EPSS 3.3% KEV · Not listed
Vendors
Broadcom Canonical Linux and 1 more
Products
Brocade Fabric Operating System Firmware Ubuntu Linux Linux Kernel and 14 more
CVE-2019-19052

kernel: dos in gs_can_open() function in drivers/net/can/usb/gs_usb.c

A memory leak in the gs_can_open() function in drivers/net/can/usb/gs_usb.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures, aka CID-fb5be6a7b486.

CVSS 3.1 · 7.5 High EPSS 5.2% KEV · Not listed
Vendors
Broadcom Canonical Debian and 4 more
Products
Brocade Fabric Operating System Firmware Ubuntu Linux Debian Linux and 17 more
CVE-2019-19050

kernel: dos in crypto_reportstat() function in crypto/crypto_user_stat.c

A memory leak in the crypto_reportstat() function in crypto/crypto_user_stat.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering crypto_reportstat_alg() failures, aka CID-c03b04dcdba1.

CVSS 3.1 · 7.5 High EPSS 5.1% KEV · Not listed
Vendors
Broadcom Canonical Fedoraproject and 2 more
Products
Fabric Operating System Ubuntu Linux Fedora and 19 more
CVE-2019-19044

kernel: dos in v3d_submit_cl_ioctl() function in drivers/gpu/drm/v3d/v3d_gem.c

Two memory leaks in the v3d_submit_cl_ioctl() function in drivers/gpu/drm/v3d/v3d_gem.c in the Linux kernel before 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering kcalloc() or v3d_job_init() failures, aka CID-29cd13cfd762.

CVSS 3.1 · 7.5 High EPSS 4.0% KEV · Not listed
Vendors
Broadcom Canonical Linux and 1 more
Products
Brocade Fabric Operating System Firmware Ubuntu Linux Linux Kernel and 14 more
CVE-2019-18805

kernel: integer overflow in tcp_ack_update_rtt in net/ipv4/tcp_input.c

An issue was discovered in net/ipv4/sysctl_net_ipv4.c in the Linux kernel before 5.0.11. There is a net/ipv4/tcp_input.c signed integer overflow in tcp_ack_update_rtt() when userspace writes a very large integer to /proc/sys/net/ipv4/tcp_min_rtt_wlen, leading to a denial of service or possibly unspecified other impact, aka CID-19fad20d15a6.

CVSS 3.1 · 9.8 Critical EPSS 3.5% KEV · Not listed
Vendors
Broadcom Linux Netapp and 2 more
Products
Fabric Operating System Linux Kernel Active Iq Unified Manager and 19 more
CVE-2019-17006

nss: Check length of inputs for cryptographic primitives

In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length checks. In cases where the application calling the library did not perform a sanity check on the inputs it could result in a crash due to a buffer overflow.

CVSS 3.1 · 9.8 Critical EPSS 3.5% KEV · Not listed
Vendors
Mozilla Netapp Redhat and 1 more
Products
Network Security Services Hci Compute Node Hci Management Node and 24 more
CVE-2019-11815

kernel: race condition in rds_tcp_kill_sock in net/rds/tcp.c leading to use-after-free

An issue was discovered in rds_tcp_kill_sock in net/rds/tcp.c in the Linux kernel before 5.0.8. There is a race condition leading to a use-after-free, related to net namespace cleanup.

CVSS 3.1 · 8.1 High EPSS 4.4% KEV · Not listed
Vendors
Canonical Debian Linux and 2 more
Products
Ubuntu Linux Debian Linux Linux Kernel and 12 more
CVE-2019-0201

zookeeper: Information disclosure in Apache ZooKeeper

An issue is present in Apache ZooKeeper 1.0.0 to 3.4.13 and 3.5.0-alpha to 3.5.4-beta. ZooKeeper’s getACL() command doesn’t check any permission when retrieves the ACLs of the requested node and returns all information contained in the ACL Id field as plaintext string. DigestAuthenticationProvider overloads the Id field with the hash value that is used for user authentication. As a consequence, if Digest Authentication is in use, the unsalted hash value will be disclosed by getACL() request for unauthenticated or unprivileged users.

CVSS 3.1 · 5.9 Medium EPSS 9.7% KEV · Not listed
Vendors
Apache Debian Netapp and 2 more
Products
Activemq Drill Zookeeper and 11 more
CVE-2018-20836

kernel: race condition in smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/sas_expander.c leads to use-after-free

An issue was discovered in the Linux kernel before 4.20. There is a race condition in smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/sas_expander.c, leading to a use-after-free.

CVSS 3.1 · 8.1 High EPSS 5.1% KEV · Not listed
Vendors
Canonical Debian F5 and 4 more
Products
Ubuntu Linux Debian Linux Traffix Signaling Delivery Controller and 13 more