Export limit exceeded: 425865 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2,842

Export CSV
CVE-2010-3702

xpdf: uninitialized Gfx::parser pointer dereference

The Gfx::getPos function in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, CUPS, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) via unknown vectors that trigger an uninitialized pointer dereference.

CVSS 2.0 · 7.5 High EPSS 2.8% KEV · Not listed
Vendors
Apple Canonical Debian and 6 more
Products
Cups Ubuntu Linux Debian Linux and 9 more
CVE-2010-3705

kernel: sctp memory corruption in HMAC handling

The sctp_auth_asoc_get_hmac function in net/sctp/auth.c in the Linux kernel before 2.6.36 does not properly validate the hmac_ids array of an SCTP peer, which allows remote attackers to cause a denial of service (memory corruption and panic) via a crafted value in the last element of this array.

CVSS 2.0 · 8.3 High EPSS 2.0% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 2 more
Products
Ubuntu Linux Debian Linux Fedora and 3 more
CVE-2010-3874

kernel: CAN minor heap overflow

Heap-based buffer overflow in the bcm_connect function in net/can/bcm.c (aka the Broadcast Manager) in the Controller Area Network (CAN) implementation in the Linux kernel before 2.6.36.2 on 64-bit platforms might allow local users to cause a denial of service (memory corruption) via a connect operation.

CVSS 2.0 · 4.0 Medium EPSS < 1% KEV · Not listed
Vendors
Debian Fedoraproject Linux and 3 more
Products
Debian Linux Fedora Linux Kernel and 6 more
CVE-2010-4157

kernel: gdth: integer overflow in ioc_general()

Integer overflow in the ioc_general function in drivers/scsi/gdth.c in the Linux kernel before 2.6.36.1 on 64-bit platforms allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact via a large argument in an ioctl call.

CVSS 2.0 · 6.2 Medium EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Linux Opensuse and 2 more
Products
Fedora Linux Kernel Opensuse and 6 more
CVE-2010-4158

kernel: socket filters infoleak

The sk_run_filter function in net/core/filter.c in the Linux kernel before 2.6.36.2 does not check whether a certain memory location has been initialized before executing a (1) BPF_S_LD_MEM or (2) BPF_S_LDX_MEM instruction, which allows local users to obtain potentially sensitive information from kernel stack memory via a crafted socket filter.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Linux Opensuse and 2 more
Products
Fedora Linux Kernel Opensuse and 6 more
CVE-2010-4162

kernel: bio: integer overflow page count when mapping/copying user data

Multiple integer overflows in fs/bio.c in the Linux kernel before 2.6.36.2 allow local users to cause a denial of service (system crash) via a crafted device ioctl to a SCSI device.

CVSS 2.0 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Linux Opensuse and 2 more
Products
Fedora Linux Kernel Opensuse and 6 more
CVE-2010-4169

kernel: perf bug

Use-after-free vulnerability in mm/mprotect.c in the Linux kernel before 2.6.37-rc2 allows local users to cause a denial of service via vectors involving an mprotect system call.

CVSS 2.0 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Linux Opensuse and 2 more
Products
Fedora Linux Kernel Opensuse and 5 more
CVE-2010-4180

openssl: NETSCAPE_REUSE_CIPHER_CHANGE_BUG ciphersuite downgrade attack

OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.

CVSS 2.0 · 4.3 Medium EPSS 9.5% KEV · Not listed
Vendors
Canonical Debian F5 and 5 more
Products
Ubuntu Linux Debian Linux Nginx and 8 more
CVE-2010-4197

WebKit: Use-after-free vulnerabiity related to text editing causes memory corruption

Use-after-free vulnerability in WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving text editing.

CVSS 3.1 · 9.8 Critical EPSS 2.3% KEV · Not listed
Vendors
Fedoraproject Google Redhat and 1 more
Products
Fedora Chrome Enterprise Linux and 1 more
CVE-2010-4198

WebKit: Memory corruption due to improper handling of large text area

WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, does not properly handle large text areas, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted HTML document.

CVSS 3.1 · 8.8 High EPSS 1.5% KEV · Not listed
Vendors
Fedoraproject Google Redhat and 1 more
Products
Fedora Chrome Enterprise Linux and 1 more
CVE-2010-4204

WebKit: Use-after-free vulnerability related frame object

WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, accesses a frame object after this object has been destroyed, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

CVSS 3.1 · 9.8 Critical EPSS 2.3% KEV · Not listed
Vendors
Fedoraproject Google Redhat and 1 more
Products
Fedora Chrome Enterprise Linux and 1 more
CVE-2010-4206

WebKit: Array index error during processing of an SVG document

Array index error in the FEBlend::apply function in WebCore/platform/graphics/filters/FEBlend.cpp in WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted SVG document, related to effects in the application of filters.

CVSS 3.1 · 8.8 High EPSS 2.5% KEV · Not listed
Vendors
Fedoraproject Google Redhat and 1 more
Products
Fedora Chrome Enterprise Linux and 1 more
CVE-2010-4249

kernel: unix socket local dos

The wait_for_unix_gc function in net/unix/garbage.c in the Linux kernel before 2.6.37-rc3-next-20101125 does not properly select times for garbage collection of inflight sockets, which allows local users to cause a denial of service (system hang) via crafted use of the socketpair and sendmsg system calls for SOCK_SEQPACKET sockets.

CVSS 2.0 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Linux Redhat
Products
Fedora Linux Kernel Enterprise Linux and 1 more
CVE-2010-4494

libxml2: double-free in XPath processing code

Double free vulnerability in libxml2 2.7.8 and other versions, as used in Google Chrome before 8.0.552.215 and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XPath handling.

CVSS 2.0 · 7.5 High EPSS 5.9% KEV · Not listed
Vendors
Apache Apple Debian and 7 more
Products
Openoffice Iphone Os Itunes and 15 more
CVE-2010-4577

webkit: CSS Font Face Parsing Type Confusion Vulnerability

The CSSParser::parseFontFaceSrc function in WebCore/css/CSSParser.cpp in WebKit, as used in Google Chrome before 8.0.552.224, Chrome OS before 8.0.552.343, webkitgtk before 1.2.6, and other products does not properly parse Cascading Style Sheets (CSS) token sequences, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted local font, related to "Type Confusion."

CVSS 3.1 · 7.5 High EPSS 2.2% KEV · Not listed
Vendors
Debian Fedoraproject Google and 2 more
Products
Debian Linux Fedora Chrome and 3 more
CVE-2002-2443

krb5: UDP ping-pong flaw in kpasswd

schpw.c in the kpasswd service in kadmind in MIT Kerberos 5 (aka krb5) before 1.11.3 does not properly validate UDP packets before sending responses, which allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged packet that triggers a communication loop, as demonstrated by krb_pingpong.nasl, a related issue to CVE-1999-0103.

CVSS 2.0 · 5.0 Medium EPSS 6.4% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 3 more
Products
Ubuntu Linux Debian Linux Fedora and 8 more
CVE-2011-0008

sudo in Fedora vulnerable to CVE-2009-0034 again due to improper patch rediff

A certain Fedora patch for parse.c in sudo before 1.7.4p5-1.fc14 on Fedora 14 does not properly interpret a system group (aka %group) in the sudoers file during authorization decisions for a user who belongs to that group, which allows local users to leverage an applicable sudoers file and gain root privileges via a sudo command. NOTE: this vulnerability exists because of a CVE-2009-0034 regression.

CVSS 2.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat Todd Miller
Products
Fedora Sudo
CVE-2011-0762

vsftpd: remote DoS via crafted glob pattern

The vsf_filename_passes_filter function in ls.c in vsftpd before 2.3.3 allows remote authenticated users to cause a denial of service (CPU consumption and process slot exhaustion) via crafted glob expressions in STAT commands in multiple FTP sessions, a different vulnerability than CVE-2010-2632.

CVSS 2.0 · 4.0 Medium EPSS 73.9% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 4 more
Products
Ubuntu Linux Debian Linux Fedora and 4 more
CVE-2011-1002

avahi: daemon infinite loop triggered by an empty UDP packet (CVE-2010-2244 fix regression)

avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a denial of service (infinite loop) via an empty mDNS (1) IPv4 or (2) IPv6 UDP packet to port 5353. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-2244.

CVSS 2.0 · 5.0 Medium EPSS 29.4% KEV · Not listed
Vendors
Avahi Canonical Debian and 2 more
Products
Avahi Ubuntu Linux Debian Linux and 2 more
CVE-2011-1011

policycoreutils: insecure temporary directory handling in seunshare

The seunshare_mount function in sandbox/seunshare.c in seunshare in certain Red Hat packages of policycoreutils 2.0.83 and earlier in Red Hat Enterprise Linux (RHEL) 6 and earlier, and Fedora 14 and earlier, mounts a new directory on top of /tmp without assigning root ownership and the sticky bit to this new directory, which allows local users to replace or delete arbitrary /tmp files, and consequently cause a denial of service or possibly gain privileges, by running a setuid application that relies on /tmp, as demonstrated by the ksu application.

CVSS 2.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Fedora Policycoreutils