Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 101

Export CSV
CVE-2015-8922

libarchive: NULL pointer access in 7z parser

The read_CodersInfo function in archive_read_support_format_7zip.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted 7z file, related to the _7z_folder struct.

CVSS 3.0 · 5.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Canonical Libarchive Novell and 2 more
Products
Ubuntu Linux Libarchive Suse Linux Enterprise Desktop and 4 more
CVE-2016-0363

JDK: insecure use of invoke method in CORBA component, incorrect CVE-2013-3009 fix

The com.ibm.CORBA.iiop.ClientDelegate class in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1 before SR3 FP40 (7.1.3.40), and 8 before SR3 (8.0.3.0) uses the invoke method of the java.lang.reflect.Method class in an AccessController doPrivileged block, which allows remote attackers to call setSecurityManager and bypass a sandbox protection mechanism via vectors related to a Proxy object instance implementing the java.lang.reflect.InvocationHandler interface. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-3009.

CVSS 3.0 · 8.1 High EPSS 4.0% KEV · Not listed
Vendors
Ibm Novell Redhat
Products
Java Sdk Suse Linux Enterprise Module For Legacy Software Suse Linux Enterprise Server and 12 more
CVE-2016-0376

JDK: insecure deserialization in CORBA, incorrect CVE-2013-5456 fix

The com.ibm.rmi.io.SunSerializableFactory class in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1 before SR3 FP40 (7.1.3.40), and 8 before SR3 (8.0.3.0) does not properly deserialize classes in an AccessController doPrivileged block, which allows remote attackers to bypass a sandbox protection mechanism and execute arbitrary code as demonstrated by the readValue method of the com.ibm.rmi.io.ValueHandlerPool.ValueHandlerSingleton class, which implements the javax.rmi.CORBA.ValueHandler interface. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-5456.

CVSS 3.0 · 8.1 High EPSS 5.7% KEV · Not listed
Vendors
Ibm Novell Redhat
Products
Java Sdk Suse Linux Enterprise Module For Legacy Software Suse Linux Enterprise Server and 12 more
CVE-2016-1583

kernel: Stack overflow via ecryptfs and /proc/$pid/environ

The ecryptfs_privileged_open function in fs/ecryptfs/kthread.c in the Linux kernel before 4.6.3 allows local users to gain privileges or cause a denial of service (stack memory consumption) via vectors involving crafted mmap calls for /proc pathnames, leading to recursive pagefault handling.

CVSS 3.1 · 7.8 High EPSS 1.4% KEV · Not listed
Vendors
Canonical Debian Linux and 2 more
Products
Ubuntu Linux Debian Linux Linux Kernel and 9 more
CVE-2016-2184

kernel: Kernel panic on invalid USB device descriptor (snd_usb_audio driver)

The create_fixed_stream_quirk function in sound/usb/quirks.c in the snd-usb-audio driver in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference or double free, and system crash) via a crafted endpoints value in a USB device descriptor.

CVSS 3.0 · 4.6 Medium EPSS 1.9% KEV · Not listed
Vendors
Canonical Linux Novell
Products
Ubuntu Linux Linux Kernel Suse Linux Enterprise Debuginfo and 7 more
CVE-2016-2185

kernel: Kernel panic on invalid USB device descriptor (ati_remote2 driver)

The ati_remote2_probe function in drivers/input/misc/ati_remote2.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor.

CVSS 3.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Linux Novell
Products
Ubuntu Linux Linux Kernel Suse Linux Enterprise Debuginfo and 7 more
CVE-2016-2186

kernel: Kernel panic on invalid USB device descriptor (powermate driver)

The powermate_probe function in drivers/input/misc/powermate.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor.

CVSS 3.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Linux Novell
Products
Ubuntu Linux Linux Kernel Suse Linux Enterprise Debuginfo and 7 more
CVE-2016-2187

kernel: Kernel panic on invalid USB device descriptor (gtco driver)

The gtco_probe function in drivers/input/tablet/gtco.c in the Linux kernel through 4.5.2 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor.

CVSS 3.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Linux Novell
Products
Ubuntu Linux Linux Kernel Suse Linux Enterprise Debuginfo and 2 more
CVE-2016-2188

kernel: Kernel panic on invalid USB device descriptor (iowarrior driver)

The iowarrior_probe function in drivers/usb/misc/iowarrior.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted endpoints value in a USB device descriptor.

CVSS 3.0 · 4.6 Medium EPSS 1.8% KEV · Not listed
Vendors
Canonical Linux Novell
Products
Ubuntu Linux Linux Kernel Suse Linux Enterprise Debuginfo and 7 more
CVE-2016-2818

Mozilla: Miscellaneous memory safety hazards (rv:45.2) (MFSA 2016-49)

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

CVSS 3.0 · 8.8 High EPSS 3.9% KEV · Not listed
Vendors
Canonical Debian Mozilla and 3 more
Products
Ubuntu Linux Debian Linux Firefox and 19 more
CVE-2016-2834

nss: Multiple security flaws (MFSA 2016-61)

Mozilla Network Security Services (NSS) before 3.23, as used in Mozilla Firefox before 47.0, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via unknown vectors.

CVSS 3.0 · 8.8 High EPSS 3.4% KEV · Not listed
Vendors
Canonical Mozilla Novell and 2 more
Products
Ubuntu Linux Firefox Network Security Services and 6 more
CVE-2016-2847

kernel: pipe: limit the per-user amount of pages allocated in pipes

fs/pipe.c in the Linux kernel before 4.5 does not limit the amount of unread data in pipes, which allows local users to cause a denial of service (memory consumption) by creating many pipes with non-default sizes.

CVSS 3.0 · 6.2 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Novell Redhat
Products
Linux Kernel Suse Linux Enterprise Debuginfo Suse Linux Enterprise Desktop and 9 more
CVE-2016-3134

kernel: netfilter: missing bounds check in ipt_entry structure

The netfilter subsystem in the Linux kernel through 4.5.2 does not validate certain offset fields, which allows local users to gain privileges or cause a denial of service (heap memory corruption) via an IPT_SO_SET_REPLACE setsockopt call.

CVSS 3.0 · 8.4 High EPSS 1.2% KEV · Not listed
Vendors
Linux Novell Redhat
Products
Linux Kernel Suse Linux Enterprise Debuginfo Suse Linux Enterprise Desktop and 9 more
CVE-2016-3136

kernel: Crash on invalid USB device descriptors (mct_u232 driver)

The mct_u232_msr_to_state function in drivers/usb/serial/mct_u232.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a crafted USB device without two interrupt-in endpoint descriptors.

CVSS 3.0 · 4.6 Medium EPSS 1.8% KEV · Not listed
Vendors
Canonical Linux Novell
Products
Ubuntu Linux Linux Kernel Suse Linux Enterprise Desktop and 6 more
CVE-2016-3137

kernel: Crash on invalid USB device descriptors (cypress_m8 driver)

drivers/usb/serial/cypress_m8.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a USB device without both an interrupt-in and an interrupt-out endpoint descriptor, related to the cypress_generic_port_probe and cypress_open functions.

CVSS 3.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Linux Novell
Products
Ubuntu Linux Linux Kernel Suse Linux Enterprise Debuginfo and 7 more
CVE-2016-3138

kernel: Crash on invalid USB device descriptors (cdc_acm driver)

The acm_probe function in drivers/usb/class/cdc-acm.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) via a USB device without both a control and a data endpoint descriptor.

CVSS 3.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Linux Novell
Products
Ubuntu Linux Linux Kernel Suse Linux Enterprise Debuginfo and 7 more