CVE-2010-5298

openssl: freelist misuse causing a possible use-after-free

Race condition in the ssl3_read_bytes function in s3_pkt.c in OpenSSL through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, allows remote attackers to inject data across sessions or cause a denial of service (use-after-free and parsing error) via an SSL connection in a multithreaded environment.

CVSS 2.0 · 4.0 Medium EPSS 34.1% KEV · Not listed

Vendors

Fedoraproject Mariadb Openssl and 2 more

Products

Fedora Mariadb Openssl and 6 more

CVE-2015-0382

mysql: unspecified vulnerability related to Server:Replication (CPU Jan 2015)

Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows remote attackers to affect availability via unknown vectors related to Server : Replication, a different vulnerability than CVE-2015-0381.

CVSS 2.0 · 4.3 Medium EPSS 10.1% KEV · Not listed

Vendors

Canonical Debian Fedoraproject and 4 more

Products

Ubuntu Linux Debian Linux Fedora and 17 more

CVE-2014-6505

mysql: unspecified vulnerability related to SERVER:MEMORY STORAGE ENGINE (CPU October 2014)

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect availability via vectors related to SERVER:MEMORY STORAGE ENGINE.

CVSS 2.0 · 4.0 Medium EPSS 2.7% KEV · Not listed

Vendors

Mariadb Oracle Redhat and 1 more

Products

Mariadb Mysql Enterprise Linux and 6 more

CVE-2014-6507

mysql: unspecified vulnerability related to SERVER:DML (CPU October 2014)

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SERVER:DML.

CVSS 2.0 · 4.3 Medium EPSS 7.3% KEV · Not listed

Vendors

Mariadb Oracle Redhat and 1 more

Products

Mariadb Mysql Solaris and 7 more

CVE-2014-6555

mysql: unspecified vulnerability related to SERVER:DML (CPU October 2014)

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SERVER:DML.

CVSS 2.0 · 6.5 Medium EPSS 3.9% KEV · Not listed

Vendors

Mariadb Oracle Redhat and 1 more

Products

Mariadb Mysql Enterprise Linux and 6 more

CVE-2014-9584

kernel: isofs: unchecked printing of ER records

The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel before 3.18.2 does not validate a length value in the Extensions Reference (ER) System Use Field, which allows local users to obtain sensitive information from kernel memory via a crafted iso9660 image.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed

Vendors

Canonical Debian Linux and 4 more

Products

Ubuntu Linux Debian Linux Linux Kernel and 19 more

CVE-2015-0441

mysql: unspecified vulnerability related to Server:Security:Encryption (CPU April 2015)

Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Security : Encryption.

CVSS 2.0 · 4.0 Medium EPSS 4.5% KEV · Not listed

Vendors

Canonical Debian Mariadb and 3 more

Products

Ubuntu Linux Debian Linux Mariadb and 13 more

CVE-2014-6478

mysql: unspecified vulnerability related to SERVER:SSL:yaSSL (CPU October 2014)

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote attackers to affect integrity via vectors related to SERVER:SSL:yaSSL.

CVSS 2.0 · 4.3 Medium EPSS 2.6% KEV · Not listed

Vendors

Juniper Mariadb Oracle and 1 more

Products

Junos Space Mariadb Mysql and 5 more

CVE-2014-6484

mysql: unspecified vulnerability related to SERVER:DML (CPU October 2014)

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect availability via vectors related to SERVER:DML.

CVSS 2.0 · 4.0 Medium EPSS 2.7% KEV · Not listed

Vendors

Mariadb Oracle Redhat and 1 more

Products

Mariadb Mysql Enterprise Linux and 6 more

CVE-2014-6474

mysql: unspecified vulnerability related to SERVER:MEMCACHED (CPU October 2014)

Unspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:MEMCACHED.

CVSS 2.0 · 3.5 Low EPSS 1.4% KEV · Not listed

Vendors

Mariadb Oracle Suse

Products

Mariadb Mysql Linux Enterprise Desktop and 3 more

CVE-2014-6494

mysql: unspecified vulnerability related to CLIENT:SSL:yaSSL (CPU October 2014)

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect availability via vectors related to CLIENT:SSL:yaSSL, a different vulnerability than CVE-2014-6496.

CVSS 2.0 · 4.3 Medium EPSS 4.9% KEV · Not listed

Vendors

Juniper Mariadb Oracle and 1 more

Products

Junos Space Mariadb Mysql and 5 more

CVE-2014-6463

mysql: unspecified vulnerability related to SERVER:REPLICATION ROW FORMAT BINARY LOG DML (CPU October 2014)

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:REPLICATION ROW FORMAT BINARY LOG DML.

CVSS 2.0 · 3.3 Low EPSS 2.8% KEV · Not listed

Vendors

Mariadb Oracle Redhat and 1 more

Products

Mariadb Mysql Solaris and 7 more

CVE-2014-6464

mysql: unspecified vulnerability related to SERVER:INNODB DML FOREIGN KEYS (CPU October 2014)

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:INNODB DML FOREIGN KEYS.

CVSS 2.0 · 4.0 Medium EPSS 4.1% KEV · Not listed

Vendors

Mariadb Oracle Redhat and 1 more

Products

Mariadb Mysql Enterprise Linux and 6 more

CVE-2014-4287

mysql: unspecified vulnerability related to SERVER:CHARACTER SETS (CPU October 2014)

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:CHARACTER SETS.

CVSS 2.0 · 4.0 Medium EPSS 2.7% KEV · Not listed

Vendors

Mariadb Oracle Redhat and 1 more

Products

Mariadb Mysql Enterprise Linux and 6 more

CVE-2014-4260

mysql: unspecified vulnerability related to SRCHAR (CPU July 2014)

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier, and 5.6.17 and earlier, allows remote authenticated users to affect integrity and availability via vectors related to SRCHAR.

CVSS 2.0 · 5.5 Medium EPSS 3.5% KEV · Not listed

Vendors

Debian Mariadb Oracle and 2 more

Products

Debian Linux Mariadb Mysql and 8 more

CVE-2014-6469

mysql: unspecified vulnerability related to SERVER:OPTIMIZER (CPU October 2014)

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:OPTIMIZER.

CVSS 2.0 · 6.8 Medium EPSS 4.4% KEV · Not listed

Vendors

Mariadb Oracle Redhat and 1 more

Products

Mariadb Mysql Solaris and 7 more

CVE-2014-6495

mysql: unspecified vulnerability related to SERVER:SSL:yaSSL (CPU October 2014)

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote attackers to affect availability via vectors related to SERVER:SSL:yaSSL.

CVSS 2.0 · 4.3 Medium EPSS 3.0% KEV · Not listed

Vendors

Juniper Mariadb Oracle and 1 more

Products

Junos Space Mariadb Mysql and 5 more

CVE-2014-3687

kernel: net: sctp: fix panic on duplicate ASCONF chunks

The sctp_assoc_lookup_asconf_ack function in net/sctp/associola.c in the SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (panic) via duplicate ASCONF chunks that trigger an incorrect uncork within the side-effect interpreter.

CVSS 3.1 · 7.5 High EPSS 8.6% KEV · Not listed

Vendors

Canonical Debian Linux and 5 more

Products

Ubuntu Linux Debian Linux Linux Kernel and 12 more

CVE-2014-3673

kernel: sctp: skb_over_panic when receiving malformed ASCONF chunks

The SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (system crash) via a malformed ASCONF chunk, related to net/sctp/sm_make_chunk.c and net/sctp/sm_statefuns.c.

CVSS 3.1 · 7.5 High EPSS 7.5% KEV · Not listed

Vendors

Canonical Debian Linux and 4 more

Products

Ubuntu Linux Debian Linux Linux Kernel and 9 more

CVE-2014-3690

kernel: kvm: vmx: invalid host cr4 handling across vm entries

arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.17.2 on Intel processors does not ensure that the value in the CR4 control register remains the same after a VM entry, which allows host OS users to kill arbitrary processes or cause a denial of service (system disruption) by leveraging /dev/kvm access, as demonstrated by PR_SET_TSC prctl calls within a modified copy of QEMU.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Canonical Debian Linux and 4 more

Products

Ubuntu Linux Debian Linux Linux Kernel and 8 more