Search vulnerabilities

Results 3

Export CSV
CVE-2020-11868

ntp: DoS on client ntpd using server mode packet

ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-path attacker to block unauthenticated synchronization via a server mode packet with a spoofed source IP address, because transmissions are rescheduled even when a packet lacks a valid origin timestamp.

CVSS 3.1 · 7.5 High EPSS 2.1% KEV · Not listed
Vendors
Debian Netapp Ntp and 2 more
CVE-2022-40982

hw: Intel: Gather Data Sampling (GDS) side channel vulnerability

Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

CVSS 3.1 · 6.5 Medium EPSS 3.0% KEV · Not listed
Vendors
Debian Intel Netapp and 2 more
CVE-2021-45485

kernel: information leak in the IPv6 implementation

In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has an information leak because of certain use of a hash table which, although big, doesn't properly consider that IPv6-based attackers can typically choose among many IPv6 source addresses.

CVSS 3.1 · 7.5 High EPSS 3.8% KEV · Not listed
Vendors
Linux Netapp Oracle and 1 more
Products