Export limit exceeded: 425803 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 877

Export CSV
CVE-2019-19053

kernel: A memory leak in the rpmsg_eptdev_write_iter() function in drivers/rpmsg/rpmsg_char.c allows attackers to cause a DoS

A memory leak in the rpmsg_eptdev_write_iter() function in drivers/rpmsg/rpmsg_char.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering copy_from_iter_full() failures, aka CID-bbe692e349e2.

CVSS 3.1 · 7.5 High EPSS 3.3% KEV · Not listed
Vendors
Broadcom Canonical Linux and 1 more
Products
Brocade Fabric Operating System Firmware Ubuntu Linux Linux Kernel and 14 more
CVE-2019-19052

kernel: dos in gs_can_open() function in drivers/net/can/usb/gs_usb.c

A memory leak in the gs_can_open() function in drivers/net/can/usb/gs_usb.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering usb_submit_urb() failures, aka CID-fb5be6a7b486.

CVSS 3.1 · 7.5 High EPSS 5.2% KEV · Not listed
Vendors
Broadcom Canonical Debian and 4 more
Products
Brocade Fabric Operating System Firmware Ubuntu Linux Debian Linux and 17 more
CVE-2019-19050

kernel: dos in crypto_reportstat() function in crypto/crypto_user_stat.c

A memory leak in the crypto_reportstat() function in crypto/crypto_user_stat.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering crypto_reportstat_alg() failures, aka CID-c03b04dcdba1.

CVSS 3.1 · 7.5 High EPSS 5.1% KEV · Not listed
Vendors
Broadcom Canonical Fedoraproject and 2 more
Products
Fabric Operating System Ubuntu Linux Fedora and 19 more
CVE-2019-19044

kernel: dos in v3d_submit_cl_ioctl() function in drivers/gpu/drm/v3d/v3d_gem.c

Two memory leaks in the v3d_submit_cl_ioctl() function in drivers/gpu/drm/v3d/v3d_gem.c in the Linux kernel before 5.3.11 allow attackers to cause a denial of service (memory consumption) by triggering kcalloc() or v3d_job_init() failures, aka CID-29cd13cfd762.

CVSS 3.1 · 7.5 High EPSS 4.0% KEV · Not listed
Vendors
Broadcom Canonical Linux and 1 more
Products
Brocade Fabric Operating System Firmware Ubuntu Linux Linux Kernel and 14 more
CVE-2019-18805

kernel: integer overflow in tcp_ack_update_rtt in net/ipv4/tcp_input.c

An issue was discovered in net/ipv4/sysctl_net_ipv4.c in the Linux kernel before 5.0.11. There is a net/ipv4/tcp_input.c signed integer overflow in tcp_ack_update_rtt() when userspace writes a very large integer to /proc/sys/net/ipv4/tcp_min_rtt_wlen, leading to a denial of service or possibly unspecified other impact, aka CID-19fad20d15a6.

CVSS 3.1 · 9.8 Critical EPSS 3.5% KEV · Not listed
Vendors
Broadcom Linux Netapp and 2 more
Products
Fabric Operating System Linux Kernel Active Iq Unified Manager and 19 more
CVE-2019-18683

kernel: race condition in vivid_stop_generating_vid_cap(),vivid_stop_generating_vid_out(), sdr_cap_stop_streaming()

An issue was discovered in drivers/media/platform/vivid in the Linux kernel through 5.3.8. It is exploitable for privilege escalation on some Linux distributions where local users have /dev/video0 access, but only if the driver happens to be loaded. There are multiple race conditions during streaming stopping in this driver (part of the V4L2 subsystem). These issues are caused by wrong mutex locking in vivid_stop_generating_vid_cap(), vivid_stop_generating_vid_out(), sdr_cap_stop_streaming(), and the corresponding kthreads. At least one of these race conditions leads to a use-after-free.

CVSS 3.1 · 7.0 High EPSS < 1% KEV · Not listed
Vendors
Broadcom Canonical Debian and 3 more
Products
Fabric Operating System Ubuntu Linux Debian Linux and 20 more
CVE-2019-18282

kernel: The flow_dissector feature allows device tracking

The flow_dissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device tracking vulnerability, aka CID-55667441c84f. This occurs because the auto flowlabel of a UDP IPv6 packet relies on a 32-bit hashrnd value as a secret, and because jhash (instead of siphash) is used. The hashrnd value remains the same starting from boot time, and can be inferred by an attacker. This affects net/core/flow_dissector.c and related code.

CVSS 3.1 · 5.3 Medium EPSS 2.9% KEV · Not listed
Vendors
Debian Linux Netapp and 1 more
Products
Debian Linux Linux Kernel 8300 and 18 more
CVE-2019-18218

file: heap-based buffer overflow in cdf_read_property_info in cdf.c

cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR elements, which allows a heap-based buffer overflow (4-byte out-of-bounds write).

CVSS 3.1 · 7.8 High EPSS 1.8% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 4 more
Products
Ubuntu Linux Debian Linux Fedora and 4 more
CVE-2019-15902

kernel: backporting error in ptrace_get_debugreg()

A backporting error was discovered in the Linux stable/longterm kernel 4.4.x through 4.4.190, 4.9.x through 4.9.190, 4.14.x through 4.14.141, 4.19.x through 4.19.69, and 5.2.x through 5.2.11. Misuse of the upstream "x86/ptrace: Fix possible spectre-v1 in ptrace_get_debugreg()" commit reintroduced the Spectre vulnerability that it aimed to eliminate. This occurred because the backport process depends on cherry picking specific commits, and because two (correctly ordered) code lines were swapped.

CVSS 3.1 · 5.6 Medium EPSS < 1% KEV · Not listed
Vendors
Debian Linux Netapp and 1 more
Products
Debian Linux Linux Kernel Active Iq Performance Analytics Services and 4 more
CVE-2019-15221

kernel: Null pointer dereference in the sound/usb/line6/pcm.c

An issue was discovered in the Linux kernel before 5.1.17. There is a NULL pointer dereference caused by a malicious USB device in the sound/usb/line6/pcm.c driver.

CVSS 3.1 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Linux and 3 more
Products
Ubuntu Linux Debian Linux Linux Kernel and 9 more
CVE-2019-15220

kernel: Use-after-free in drivers/net/wireless/intersil/p54/p54usb.c

An issue was discovered in the Linux kernel before 5.2.1. There is a use-after-free caused by a malicious USB device in the drivers/net/wireless/intersil/p54/p54usb.c driver.

CVSS 3.1 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Linux and 2 more
Products
Ubuntu Linux Debian Linux Linux Kernel and 7 more
CVE-2019-15216

kernel: null-pointer dereference in drivers/usb/misc/yurex.c driver

An issue was discovered in the Linux kernel before 5.0.14. There is a NULL pointer dereference caused by a malicious USB device in the drivers/usb/misc/yurex.c driver.

CVSS 3.1 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Linux and 2 more
Products
Ubuntu Linux Debian Linux Linux Kernel and 7 more
CVE-2019-15215

kernel: use after free in drivers/media/usb/cpia2/cpia2_usb.c driver

An issue was discovered in the Linux kernel before 5.2.6. There is a use-after-free caused by a malicious USB device in the drivers/media/usb/cpia2/cpia2_usb.c driver.

CVSS 3.1 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Linux and 2 more
Products
Ubuntu Linux Debian Linux Linux Kernel and 7 more
CVE-2019-15212

kernel: double-free caused by malicious USB device in drivers/usb/misc/rio500.c

An issue was discovered in the Linux kernel before 5.1.8. There is a double-free caused by a malicious USB device in the drivers/usb/misc/rio500.c driver.

CVSS 3.1 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Linux and 2 more
Products
Ubuntu Linux Debian Linux Linux Kernel and 7 more
CVE-2019-15211

kernel: use-after-free in drivers/media/v4l2-core/v4l2-dev.c

An issue was discovered in the Linux kernel before 5.2.6. There is a use-after-free caused by a malicious USB device in the drivers/media/v4l2-core/v4l2-dev.c driver because drivers/media/radio/radio-raremono.c does not properly allocate memory.

CVSS 3.1 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Linux and 2 more
Products
Ubuntu Linux Debian Linux Linux Kernel and 7 more
CVE-2019-15118

kernel: mishandling recursion in sound/usb/mixer.c leading to kernel stack exhaustion and crash

check_input_term in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles recursion, leading to kernel stack exhaustion.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Linux and 2 more
Products
Ubuntu Linux Debian Linux Linux Kernel and 9 more
CVE-2019-15098

kernel: a NULL pointer dereference in drivers/net/wireless/ath/ath6kl/usb.c leads to a crash

drivers/net/wireless/ath/ath6kl/usb.c in the Linux kernel through 5.2.9 has a NULL pointer dereference via an incomplete address in an endpoint descriptor.

CVSS 3.1 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Linux and 2 more
Products
Ubuntu Linux Debian Linux Linux Kernel and 5 more
CVE-2019-14888

undertow: possible Denial Of Service (DOS) in Undertow HTTP server listening on HTTPS

A vulnerability was found in the Undertow HTTP server in versions before 2.0.28.SP1 when listening on HTTPS. An attacker can target the HTTPS port to carry out a Denial Of Service (DOS) to make the service unavailable on SSL.

CVSS 3.1 · 7.5 High EPSS 2.2% KEV · Not listed
Vendors
Netapp Redhat
Products
Active Iq Unified Manager Jboss Data Grid Jboss Enterprise Application Platform and 7 more