Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 404

Export CSV
CVE-2015-0286

openssl: invalid pointer use in ASN1_TYPE_cmp()

The ASN1_TYPE_cmp function in crypto/asn1/a_type.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not properly perform boolean-type comparisons, which allows remote attackers to cause a denial of service (invalid read operation and application crash) via a crafted X.509 certificate to an endpoint that uses the certificate-verification feature.

CVSS 2.0 · 5.0 Medium EPSS 19.9% KEV · Not listed
Vendors
Openssl Redhat
Products
Openssl Enterprise Linux Jboss Core Services and 1 more
CVE-2013-7336

libvirt: unprivileged user can crash libvirtd during spice migration

The qemuMigrationWaitForSpice function in qemu/qemu_migration.c in libvirt before 1.1.3 does not properly enter a monitor when performing seamless SPICE migration, which allows local users to cause a denial of service (NULL pointer dereference and libvirtd crash) by causing domblkstat to be called at the same time as the qemuMonitorGetSpiceMigrationStatus function.

CVSS 2.0 · 1.9 Low EPSS < 1% KEV · Not listed
Vendors
Opensuse Redhat
Products
Opensuse Enterprise Linux Libvirt and 1 more
CVE-2015-0236

libvirt: missing ACL check for the VIR_DOMAIN_XML_SECURE flag in save images and snapshots objects

libvirt before 1.2.12 allow remote authenticated users to obtain the VNC password by using the VIR_DOMAIN_XML_SECURE flag with a crafted (1) snapshot to the virDomainSnapshotGetXMLDesc interface or (2) image to the virDomainSaveImageGetXMLDesc interface.

CVSS 2.0 · 3.5 Low EPSS 1.8% KEV · Not listed
Vendors
Canonical Mageia Opensuse and 1 more
Products
Ubuntu Linux Mageia Opensuse and 7 more
CVE-2015-0209

openssl: use-after-free on invalid EC private key import

Use-after-free vulnerability in the d2i_ECPrivateKey function in crypto/ec/ec_asn1.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a might allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a malformed Elliptic Curve (EC) private-key file that is improperly handled during import.

CVSS 2.0 · 6.8 Medium EPSS 16.4% KEV · Not listed
Vendors
Openssl Redhat
Products
Openssl Enterprise Linux Jboss Core Services and 2 more
CVE-2014-8177

gluster-swift metadata constraints are not correctly enforced

The Red Hat gluster-swift package, as used in Red Hat Gluster Storage (formerly Red Hat Storage Server), allows remote authenticated users to bypass the max_meta_count constraint via multiple crafted requests which exceed the limit when combined.

CVSS 3.0 · 6.5 Medium EPSS 1.7% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Gluster Storage Management Console Gluster Storage Server and 2 more
CVE-2014-8136

libvirt: local denial of service in qemu/qemu_driver.c

The (1) qemuDomainMigratePerform and (2) qemuDomainMigrateFinish2 functions in qemu/qemu_driver.c in libvirt do not unlock the domain when an ACL check fails, which allow local users to cause a denial of service via unspecified vectors.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Canonical Mageia Opensuse and 1 more
Products
Ubuntu Linux Mageia Opensuse and 7 more
CVE-2016-9566

nagios: Privilege escalation issue

base/logging.c in Nagios Core before 4.2.4 allows local users with access to an account in the nagios group to gain root privileges via a symlink attack on the log file. NOTE: this can be leveraged by remote attackers using CVE-2016-9565.

CVSS 3.0 · 7.8 High EPSS 4.9% KEV · Not listed
Vendors
Nagios Redhat
Products
Nagios Openstack Storage
CVE-2016-9565

nagios: Command injection via curl in MagpieRSS

MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote attackers to read or write to arbitrary files by spoofing a crafted response from the Nagios RSS feed server. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4796.

CVSS 3.0 · 9.8 Critical EPSS 22.7% KEV · Not listed
Vendors
Nagios Redhat
Products
Nagios Openstack Storage
CVE-2014-7960

openstack-swift: Swift metadata constraints are not correctly enforced

OpenStack Object Storage (Swift) before 2.2.0 allows remote authenticated users to bypass the max_meta_count and other metadata constraints via multiple crafted requests which exceed the limit when combined.

CVSS 2.0 · 4.0 Medium EPSS 3.1% KEV · Not listed
Vendors
Openstack Redhat
Products
Swift Openstack Storage
CVE-2014-5340

check-mk: multiple flaws fixed in versions 1.2.4p4 and 1.2.5i4

The wato component in Check_MK before 1.2.4p4 and 1.2.5 before 1.2.5i4 uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object, related to an automation URL.

CVSS 2.0 · 9.3 Critical EPSS 6.1% KEV · Not listed
Vendors
Check Mk Project Redhat
Products
Check Mk Storage
CVE-2016-5008

libvirt: Setting empty VNC password allows access to unauthorized users

libvirt before 2.0.0 improperly disables password checking when the password on a VNC server is set to an empty string, which allows remote attackers to bypass authentication and establish a VNC session by connecting to the server.

CVSS 3.0 · 9.8 Critical EPSS 3.7% KEV · Not listed
Vendors
Debian Redhat
Products
Debian Linux Enterprise Linux Libvirt and 1 more
CVE-2014-5339

check-mk: multiple flaws fixed in versions 1.2.4p4 and 1.2.5i4

Check_MK before 1.2.4p4 and 1.2.5 before 1.2.5i4 allows remote authenticated users to write check_mk config files (.mk files) to arbitrary locations via vectors related to row selections.

CVSS 2.0 · 4.9 Medium EPSS 1.8% KEV · Not listed
Vendors
Check Mk Project Redhat
Products
Check Mk Storage
CVE-2014-5338

check-mk: multiple flaws fixed in versions 1.2.4p4 and 1.2.5i4

Multiple cross-site scripting (XSS) vulnerabilities in the multisite component in Check_MK before 1.2.4p4 and 1.2.5 before 1.2.5i4 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors to the (1) render_status_icons function in htmllib.py or (2) ajax_action function in actions.py.

CVSS 2.0 · 3.5 Low EPSS 1.7% KEV · Not listed
Vendors
Check Mk Project Redhat
Products
Check Mk Storage
CVE-2014-3619

glusterfs: fragment header infinite loop DoS

The __socket_proto_state_machine function in GlusterFS 3.5 allows remote attackers to cause a denial of service (infinite loop) via a "00000000" fragment header.

CVSS 2.0 · 5.0 Medium EPSS 2.7% KEV · Not listed
Vendors
Gluster Opensuse Redhat
Products
Glusterfs Opensuse Rhel Common and 1 more
CVE-2016-2119

samba: Client side SMB2/3 required signing can be downgraded

libcli/smb/smbXcli_base.c in Samba 4.x before 4.2.14, 4.3.x before 4.3.11, and 4.4.x before 4.4.5 allows man-in-the-middle attackers to bypass a client-signing protection mechanism, and consequently spoof SMB2 and SMB3 servers, via the (1) SMB2_SESSION_FLAG_IS_GUEST or (2) SMB2_SESSION_FLAG_IS_NULL flag.

CVSS 3.1 · 7.5 High EPSS 3.1% KEV · Not listed
Vendors
Redhat Samba
Products
Enterprise Linux Storage Samba
CVE-2016-2118

samba: SAMR and LSA man in the middle attacks

The MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 mishandle DCERPC connections, which allows man-in-the-middle attackers to perform protocol-downgrade attacks and impersonate users by modifying the client-server data stream, aka "BADLOCK."

CVSS 3.1 · 7.5 High EPSS 37.2% KEV · Not listed
Vendors
Canonical Debian Redhat and 1 more
Products
Ubuntu Linux Debian Linux Enterprise Linux and 6 more
CVE-2014-3567

openssl: Invalid TLS/SSL session tickets could cause memory leak leading to server crash

Memory leak in the tls_decrypt_ticket function in t1_lib.c in OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j allows remote attackers to cause a denial of service (memory consumption) via a crafted session ticket that triggers an integrity-check failure.

CVSS 2.0 · 7.1 High EPSS 22.7% KEV · Not listed
Vendors
Openssl Redhat
Products
Openssl Enterprise Linux Storage
CVE-2016-2115

samba: Smb signing not required by default when smb client connection is used for ipc usage

Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not require SMB signing within a DCERPC session over ncacn_np, which allows man-in-the-middle attackers to spoof SMB clients by modifying the client-server data stream.

CVSS 3.0 · 5.9 Medium EPSS 10.2% KEV · Not listed
Vendors
Canonical Redhat Samba
Products
Ubuntu Linux Enterprise Linux Rhel Aus and 4 more
CVE-2016-2114

samba: Samba based active directory domain controller does not enforce smb signing

The SMB1 protocol implementation in Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the "server signing = mandatory" setting, which allows man-in-the-middle attackers to spoof SMB servers by modifying the client-server data stream.

CVSS 3.0 · 5.9 Medium EPSS 2.7% KEV · Not listed
Vendors
Canonical Redhat Samba
Products
Ubuntu Linux Enterprise Linux Rhel Aus and 4 more
CVE-2014-3513

openssl: SRTP memory leak causes crash when using specially-crafted handshake message

Memory leak in d1_srtp.c in the DTLS SRTP extension in OpenSSL 1.0.1 before 1.0.1j allows remote attackers to cause a denial of service (memory consumption) via a crafted handshake message.

CVSS 2.0 · 7.1 High EPSS 37.1% KEV · Not listed
Vendors
Openssl Redhat
Products
Openssl Enterprise Linux Storage