Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2018-15473

openssh: User enumeration via malformed packets in authentication requests

OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.

CVSS 3.1 · 5.9 Medium EPSS 98.7% KEV · Not listed
Vendors
Canonical Debian Netapp and 4 more
Products
Ubuntu Linux Debian Linux Aff Baseboard Management Controller and 22 more
CVE-2021-26708

kernel: race conditions caused by wrong locking in net/vmw_vsock/af_vsock.c

A local privilege escalation was discovered in the Linux kernel before 5.10.13. Multiple race conditions in the AF_VSOCK implementation are caused by wrong locking in net/vmw_vsock/af_vsock.c. The race conditions were implicitly introduced in the commits that added VSOCK multi-transport support.

CVSS 3.1 · 7.0 High EPSS 1.6% KEV · Not listed
Vendors
Linux Netapp Redhat
Products
Linux Kernel 500f A250 and 10 more
CVE-2021-20322

kernel: new DNS Cache Poisoning Attack based on ICMP fragment needed packets replies

A flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the Linux kernel functionality was found to allow the ability to quickly scan open UDP ports. This flaw allows an off-path remote user to effectively bypass the source port UDP randomization. The highest threat from this vulnerability is to confidentiality and possibly integrity, because software that relies on UDP source port randomization are indirectly affected as well.

CVSS 3.1 · 7.4 High EPSS 6.9% KEV · Not listed
Vendors
Debian Fedoraproject Linux and 3 more
Products
Debian Linux Fedora Linux Kernel and 31 more
CVE-2020-8832

Ubuntu 18.04 Linux kernel i915 incomplete fix for CVE-2019-14615

The fix for the Linux kernel in Ubuntu 18.04 LTS for CVE-2019-14615 ("The Linux kernel did not properly clear data structures on context switches for certain Intel graphics processors.") was discovered to be incomplete, meaning that in versions of the kernel before 4.15.0-91.92, an attacker could use this vulnerability to expose sensitive information.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Netapp
Products
Ubuntu Linux Aff 8300 Aff 8300 Firmware and 57 more
CVE-2019-20636

kernel: out-of-bounds write via crafted keycode table

In the Linux kernel before 5.4.12, drivers/input/input.c has out-of-bounds writes via a crafted keycode table, as demonstrated by input_set_keycode, aka CID-cb222aed03d7.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Netapp Redhat
Products
Linux Kernel Cloud Backup Fas 8300 and 21 more