CVE-2016-4484

dracut: Brute force attack on LUKS password decryption via initramfs

The Debian initrd script for the cryptsetup package 2:1.7.3-2 and earlier allows physically proximate attackers to gain shell access via many log in attempts with an invalid password.

CVSS 3.0 · 6.8 Medium EPSS < 1% KEV · Not listed

Vendors

Cryptsetup Project

Products

Cryptsetup

CVE-2016-6911

php: Missing check for OOB read in dynamicGetbuf()

The dynamicGetbuf function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TIFF image.

CVSS 3.0 · 5.5 Medium EPSS 1.8% KEV · Not listed

Vendors

Libgd

Products

Libgd

CVE-2017-1000357

opendaylight: odl-l2switch-switch feature does not handle closed-stream error

Denial of Service attack when the switch rejects to receive packets from the controller. Component: This vulnerability affects OpenDaylight odl-l2switch-switch, which is the feature responsible for the OpenFlow communication. Version: OpenDaylight versions 3.3 (Lithium-SR3), 3.4 (Lithium-SR4), 4.0 (Beryllium), 4.1 (Beryllium-SR1), 4.2 (Beryllium-SR2), and 4.4 (Beryllium-SR4) are affected by this flaw. Java version is openjdk version 1.8.0_91.

CVSS 3.0 · 7.5 High EPSS 1.4% KEV · Not listed

Vendors

Opendaylight

Products

Opendaylight

CVE-2017-10662

kernel: Missing sanity check for segment count in f2fs

The sanity_check_raw_super function in fs/f2fs/super.c in the Linux kernel before 4.11.1 does not validate the segment count, which allows local users to gain privileges via unspecified vectors.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Linux

Products

Linux Kernel

CVE-2017-10663

kernel: Missing sanity check for segno and blkoff read

The sanity_check_ckpt function in fs/f2fs/super.c in the Linux kernel before 4.12.4 does not validate the blkoff and segno arrays, which allows local users to gain privileges via unspecified vectors.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Linux

Products

Linux Kernel

CVE-2017-14340

kernel: xfs: unprivileged user kernel oops

The XFS_IS_REALTIME_INODE macro in fs/xfs/xfs_linux.h in the Linux kernel before 4.13.2 does not verify that a filesystem has a realtime device, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) via vectors related to setting an RHINHERIT flag on a directory.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Linux Redhat

Products

Linux Kernel Enterprise Mrg

CVE-2015-1803

libXfont: crash on invalid read in bdfReadCharacters

The bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 does not properly handle character bitmaps it cannot read, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) and possibly execute arbitrary code via a crafted BDF font file.

CVSS 2.0 · 8.5 High EPSS 4.9% KEV · Not listed

Vendors

Canonical Debian Redhat and 1 more

Products

Ubuntu Linux Debian Linux Enterprise Linux and 1 more

CVE-2015-3288

kernel: zero page memory arbitrary modification

mm/memory.c in the Linux kernel before 4.1.4 mishandles anonymous pages, which allows local users to gain privileges or cause a denial of service (page tainting) via a crafted application that triggers writing to page zero.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Linux Redhat

Products

Linux Kernel Enterprise Linux

CVE-2015-5400

squid: information disclosure due to incorrect handling of peer responses in tunnel.cc (SQUID-2015:2)

Squid before 3.5.6 does not properly handle CONNECT method peer responses when configured with cache_peer, which allows remote attackers to bypass intended restrictions and gain access to a backend proxy via a CONNECT request.

CVSS 2.0 · 6.8 Medium EPSS 20.8% KEV · Not listed

Vendors

Debian Fedoraproject Squid-cache

Products

Debian Linux Fedora Squid

CVE-2014-4508

Kernel: x86_32: BUG in syscall auditing

arch/x86/kernel/entry_32.S in the Linux kernel through 3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled and the sep CPU feature flag is set, allows local users to cause a denial of service (OOPS and system crash) via an invalid syscall number, as demonstrated by number 1000.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Canonical Linux Redhat

Products

Ubuntu Linux Linux Kernel Rhel Els

CVE-2015-1349

bind: issue in trust anchor management can cause named to crash

named in ISC BIND 9.7.0 through 9.9.6 before 9.9.6-P2 and 9.10.x before 9.10.1-P2, when DNSSEC validation and the managed-keys feature are enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit, or daemon crash) by triggering an incorrect trust-anchor management scenario in which no key is ready for use.

CVSS 2.0 · 5.4 Medium EPSS 22.9% KEV · Not listed

Vendors

Isc Redhat

Products

Bind Enterprise Linux

CVE-2016-2182

openssl: Out-of-bounds write caused by unchecked errors in BN_bn2dec()

The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate division results, which allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors.

CVSS 3.0 · 9.8 Critical EPSS 44.2% KEV · Not listed

Vendors

Hp Openssl Oracle and 1 more

Products

Icewall Federation Agent Icewall Mcrp Icewall Sso and 5 more

CVE-2016-2145

mod_auth_mellon: Missing error check when calling ap_get_client_block()

The am_read_post_data function in mod_auth_mellon before 0.11.1 does not check if the ap_get_client_block function returns an error, which allows remote attackers to cause a denial of service (segmentation fault and process crash) via a crafted POST data.

CVSS 3.0 · 7.5 High EPSS 3.1% KEV · Not listed

Vendors

Fedoraproject Uninett

Products

Fedora Mod Auth Mellon

CVE-2015-0239

kernel: kvm: insufficient sysenter emulation when invoked from 16-bit code

The em_sysenter function in arch/x86/kvm/emulate.c in the Linux kernel before 3.18.5, when the guest OS lacks SYSENTER MSR initialization, allows guest OS users to gain guest OS privileges or cause a denial of service (guest OS crash) by triggering use of a 16-bit code segment for emulation of a SYSENTER instruction.

CVSS 2.0 · 4.4 Medium EPSS < 1% KEV · Not listed

Vendors

Canonical Debian Linux and 2 more

Products

Ubuntu Linux Debian Linux Linux Kernel and 5 more

CVE-2016-9083

kernel: State machine confusion bug in vfio driver leading to memory corruption

drivers/vfio/pci/vfio_pci.c in the Linux kernel through 4.8.11 allows local users to bypass integer overflow checks, and cause a denial of service (memory corruption) or have unspecified other impact, by leveraging access to a vfio PCI device file for a VFIO_DEVICE_SET_IRQS ioctl call, aka a "state machine confusion bug."

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Linux Redhat

Products

Linux Kernel Enterprise Linux Rhel Extras Rt

CVE-2016-5689

ImageMagick: Lack of null pointer check in ReadDCMImage()

The DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact by leveraging lack of NULL pointer checks.

CVSS 3.0 · 9.8 Critical EPSS 5.4% KEV · Not listed

Vendors

Imagemagick Oracle

Products

Imagemagick Solaris

CVE-2013-4355

Kernel: Xen: Xsa-63: information leak via I/O instruction emulation

Xen 4.3.x and earlier does not properly handle certain errors, which allows local HVM guests to obtain hypervisor stack memory via a (1) port or (2) memory mapped I/O write or (3) other unspecified operations related to addresses without associated memory.

CVSS 2.0 · 1.5 Low EPSS < 1% KEV · Not listed

Vendors

Redhat Xen

Products

Enterprise Linux Xen

CVE-2013-0223

coreutils: segfault in "join -i" with long line input

The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a long string to the join command, when using the -i switch, which triggers a stack-based buffer overflow in the alloca function.

CVSS 2.0 · 1.9 Low EPSS < 1% KEV · Not listed

Vendors

Opensuse Redhat

Products

Opensuse Enterprise Linux

CVE-2013-0221

coreutils: segfault in "sort -d" and "sort -M" with long line input

The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a long string to the sort command, when using the (1) -d or (2) -M switch, which triggers a stack-based buffer overflow in the alloca function.

CVSS 2.0 · 4.3 Medium EPSS 7.2% KEV · Not listed

Vendors

Opensuse Redhat

Products

Opensuse Enterprise Linux

CVE-2013-0222

coreutils: segfault in uniq with long line input

The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a long string to the uniq command, which triggers a stack-based buffer overflow in the alloca function.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed

Vendors

Opensuse Redhat

Products

Opensuse Enterprise Linux