Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 89

Export CSV
CVE-2015-8845

kernel: incorrect restoration of machine specific registers from userspace

The tm_reclaim_thread function in arch/powerpc/kernel/process.c in the Linux kernel before 4.4.1 on powerpc platforms does not ensure that TM suspend mode exists before proceeding with a tm_reclaim call, which allows local users to cause a denial of service (TM Bad Thing exception and panic) via a crafted application.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Novell Redhat and 1 more
Products
Linux Kernel Suse Linux Enterprise Desktop Suse Linux Enterprise Server and 7 more
CVE-2015-8922

libarchive: NULL pointer access in 7z parser

The read_CodersInfo function in archive_read_support_format_7zip.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted 7z file, related to the _7z_folder struct.

CVSS 3.0 · 5.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Canonical Libarchive Novell and 2 more
Products
Ubuntu Linux Libarchive Suse Linux Enterprise Desktop and 4 more
CVE-2016-1583

kernel: Stack overflow via ecryptfs and /proc/$pid/environ

The ecryptfs_privileged_open function in fs/ecryptfs/kthread.c in the Linux kernel before 4.6.3 allows local users to gain privileges or cause a denial of service (stack memory consumption) via vectors involving crafted mmap calls for /proc pathnames, leading to recursive pagefault handling.

CVSS 3.1 · 7.8 High EPSS 1.4% KEV · Not listed
Vendors
Canonical Debian Linux and 2 more
Products
Ubuntu Linux Debian Linux Linux Kernel and 9 more
CVE-2016-2184

kernel: Kernel panic on invalid USB device descriptor (snd_usb_audio driver)

The create_fixed_stream_quirk function in sound/usb/quirks.c in the snd-usb-audio driver in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference or double free, and system crash) via a crafted endpoints value in a USB device descriptor.

CVSS 3.0 · 4.6 Medium EPSS 1.9% KEV · Not listed
Vendors
Canonical Linux Novell
Products
Ubuntu Linux Linux Kernel Suse Linux Enterprise Debuginfo and 7 more
CVE-2016-2185

kernel: Kernel panic on invalid USB device descriptor (ati_remote2 driver)

The ati_remote2_probe function in drivers/input/misc/ati_remote2.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor.

CVSS 3.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Linux Novell
Products
Ubuntu Linux Linux Kernel Suse Linux Enterprise Debuginfo and 7 more
CVE-2016-2186

kernel: Kernel panic on invalid USB device descriptor (powermate driver)

The powermate_probe function in drivers/input/misc/powermate.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor.

CVSS 3.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Linux Novell
Products
Ubuntu Linux Linux Kernel Suse Linux Enterprise Debuginfo and 7 more
CVE-2016-2188

kernel: Kernel panic on invalid USB device descriptor (iowarrior driver)

The iowarrior_probe function in drivers/usb/misc/iowarrior.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor.

CVSS 3.0 · 4.6 Medium EPSS 1.8% KEV · Not listed
Vendors
Canonical Linux Novell
Products
Ubuntu Linux Linux Kernel Suse Linux Enterprise Debuginfo and 7 more
CVE-2016-2818

Mozilla: Miscellaneous memory safety hazards (rv:45.2) (MFSA 2016-49)

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

CVSS 3.0 · 8.8 High EPSS 3.9% KEV · Not listed
Vendors
Canonical Debian Mozilla and 3 more
Products
Ubuntu Linux Debian Linux Firefox and 19 more
CVE-2016-2834

nss: Multiple security flaws (MFSA 2016-61)

Mozilla Network Security Services (NSS) before 3.23, as used in Mozilla Firefox before 47.0, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unknown vectors.

CVSS 3.0 · 8.8 High EPSS 3.4% KEV · Not listed
Vendors
Canonical Mozilla Novell and 2 more
Products
Ubuntu Linux Firefox Network Security Services and 6 more
CVE-2016-2847

kernel: pipe: limit the per-user amount of pages allocated in pipes

fs/pipe.c in the Linux kernel before 4.5 does not limit the amount of unread data in pipes, which allows local users to cause a denial of service (memory consumption) by creating many pipes with non-default sizes.

CVSS 3.0 · 6.2 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Novell Redhat
Products
Linux Kernel Suse Linux Enterprise Debuginfo Suse Linux Enterprise Desktop and 9 more
CVE-2016-3134

kernel: netfilter: missing bounds check in ipt_entry structure

The netfilter subsystem in the Linux kernel through 4.5.2 does not validate certain offset fields, which allows local users to gain privileges or cause a denial of service (heap memory corruption) via an IPT_SO_SET_REPLACE setsockopt call.

CVSS 3.0 · 8.4 High EPSS 1.2% KEV · Not listed
Vendors
Linux Novell Redhat
Products
Linux Kernel Suse Linux Enterprise Debuginfo Suse Linux Enterprise Desktop and 9 more
CVE-2016-3136

kernel: Crash on invalid USB device descriptors (mct_u232 driver)

The mct_u232_msr_to_state function in drivers/usb/serial/mct_u232.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted USB device without two interrupt-in endpoint descriptors.

CVSS 3.0 · 4.6 Medium EPSS 1.8% KEV · Not listed
Vendors
Canonical Linux Novell
Products
Ubuntu Linux Linux Kernel Suse Linux Enterprise Desktop and 6 more
CVE-2016-3137

kernel: Crash on invalid USB device descriptors (cypress_m8 driver)

drivers/usb/serial/cypress_m8.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a USB device without both an interrupt-in and an interrupt-out endpoint descriptor, related to the cypress_generic_port_probe and cypress_open functions.

CVSS 3.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Linux Novell
Products
Ubuntu Linux Linux Kernel Suse Linux Enterprise Debuginfo and 7 more
CVE-2016-3138

kernel: Crash on invalid USB device descriptors (cdc_acm driver)

The acm_probe function in drivers/usb/class/cdc-acm.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a USB device without both a control and a data endpoint descriptor.

CVSS 3.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Linux Novell
Products
Ubuntu Linux Linux Kernel Suse Linux Enterprise Debuginfo and 7 more