Export limit exceeded: 17088 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 17,088

Export CSV
CVE-2007-6119

wireshark DCP ETSI dissector flaws

The DCP ETSI dissector in Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (long loop and resource consumption) via unknown vectors.

CVSS 2.0 · 7.8 High EPSS 3.3% KEV · Not listed
Vendors
Redhat Wireshark
Products
Enterprise Linux Wireshark
CVE-2007-6151

I4L: fix isdn_ioctl memory issue

The isdn_ioctl function in isdn_common.c in Linux kernel 2.6.23 allows local users to cause a denial of service via a crafted ioctl struct in which iocts is not null terminated, which triggers a buffer overflow.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux
CVE-2007-6200

rsync excluded content access restrictions bypass via symlinks

Unspecified vulnerability in rsync before 3.0.0pre6, when running a writable rsync daemon, allows remote attackers to bypass exclude, exclude_from, and filter and read or write hidden files via (1) symlink, (2) partial-dir, (3) backup-dir, and unspecified (4) dest options.

CVSS 2.0 · 10.0 Critical EPSS 4.9% KEV · Not listed
Vendors
Redhat Rsync Slackware
Products
Enterprise Linux Rsync Slackware Linux
CVE-2007-6206

Issue with core dump owner

The do_coredump function in fs/exec.c in Linux kernel 2.4.x and 2.6.x up to 2.6.24-rc3, and possibly other versions, does not change the UID of a core dump file if it exists before a root process creates a core dump in the same location, which might allow local users to obtain sensitive information.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Linux and 3 more
Products
Ubuntu Linux Debian Linux Linux Kernel and 10 more
CVE-2007-6207

Security: some HVM domain can access another domain memory.

Xen 3.x, possibly before 3.1.2, when running on IA64 systems, does not check the RID value for mov_to_rr, which allows a VTi domain to read memory of other domains.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Redhat Xensource Inc
Products
Enterprise Linux Xen
CVE-2007-6239

squid: DoS in cache updates

The "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and Squid 3.0 allows remote attackers to cause a denial of service (crash) via unknown vectors related to HTTP headers and an Array memory leak during requests for cached objects.

CVSS 2.0 · 5.0 Medium EPSS 26.7% KEV · Not listed
Vendors
Redhat Squid
Products
Enterprise Linux Squid Web Proxy Cache
CVE-2007-6277

libflac: Multiple security issues fixed in 1.2.1

Multiple buffer overflows in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1 allow user-assisted remote attackers to execute arbitrary code via large (1) Metadata Block Size, (2) VORBIS Comment String Size, (3) Picture Metadata MIME-TYPE Size, (4) Picture Description Size, (5) Picture Data Length, (6) Padding Length, and (7) PICTURE Metadata width and height values in a .FLAC file, which result in a heap-based overflow; and large (8) VORBIS Comment String Size Length, (9) Picture MIME-Type, (10) Picture MIME-Type URL, and (11) Picture Description Length values in a .FLAC file, which result in a stack-based overflow. NOTE: some of these issues may overlap CVE-2007-4619.

CVSS 2.0 · 9.3 Critical EPSS 6.7% KEV · Not listed
Vendors
Flac Redhat
Products
Libflac Enterprise Linux
CVE-2007-6282

IPSec ESP kernel panics

The IPsec implementation in Linux kernel before 2.6.25 allows remote routers to cause a denial of service (crash) via a fragmented ESP packet in which the first fragment does not contain the entire ESP header and IV.

CVSS 2.0 · 7.1 High EPSS 2.5% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Enterprise Linux Desktop Enterprise Mrg
CVE-2007-6283

bind: /etc/rndc.key has 644 permissions by default

Red Hat Enterprise Linux 5 and Fedora install the Bind /etc/rndc.key file with world-readable permissions, which allows local users to perform unauthorized named commands, such as causing a denial of service by stopping named.

CVSS 2.0 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Centos Fedoraproject Oracle and 1 more
Products
Centos Fedora Core Linux and 6 more
CVE-2007-6285

autofs default doesn't set nodev in /net

The default configuration for autofs 5 (autofs5) in some Linux distributions, such as Red Hat Enterprise Linux (RHEL) 4 and 5, does not specify the nodev mount option for the -hosts map, which allows local users to access "important devices" by operating a remote NFS server and creating special device files on that server, as demonstrated by the /dev/mem device.

CVSS 2.0 · 6.2 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux
CVE-2007-6351

libexif infinite recursion flaw (DoS)

libexif 0.6.16 and earlier allows context-dependent attackers to cause a denial of service (infinite recursion) via an image file with crafted EXIF tags, possibly involving the exif_loader_write function in exif_loader.c.

CVSS 2.0 · 4.3 Medium EPSS 1.7% KEV · Not listed
Vendors
Libexif Project Redhat
Products
Libexif Enterprise Linux
CVE-2007-6352

libexif integer overflow

Integer overflow in libexif 0.6.16 and earlier allows context-dependent attackers to execute arbitrary code via an image with crafted EXIF tags, possibly involving the exif_data_load_data_thumbnail function in exif-data.c.

CVSS 2.0 · 6.8 Medium EPSS 2.7% KEV · Not listed
Vendors
Libexif Redhat
Products
Libexif Enterprise Linux
CVE-2007-6388

apache mod_status cross-site scripting

Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2 through 1.3.39, when the server-status page is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0 · 4.3 Medium EPSS 75.9% KEV · Not listed
Vendors
Apache Redhat
Products
Http Server Certificate System Enterprise Linux and 3 more
CVE-2007-6416

Security: vulnerability of copy_to_user in PAL emulation

The copy_to_user function in the PAL emulation functionality for Xen 3.1.2 and earlier, when running on ia64 systems, allows HVM guest users to access arbitrary physical memory by triggering certain mapping operations.

CVSS 2.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat Xen
Products
Enterprise Linux Xen
CVE-2007-6417

tmpfs: restore missing clear_highpage (kernels from 2.6.11 up)

The shmem_getpage function (mm/shmem.c) in Linux kernel 2.6.11 through 2.6.23 does not properly clear allocated memory in some rare circumstances related to tmpfs, which might allow local users to read sensitive kernel data or cause a denial of service (crash).

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux
CVE-2007-6421

httpd mod_proxy_balancer cross-site scripting

Cross-site scripting (XSS) vulnerability in balancer-manager in mod_proxy_balancer in the Apache HTTP Server 2.2.0 through 2.2.6 allows remote attackers to inject arbitrary web script or HTML via the (1) ss, (2) wr, or (3) rr parameters, or (4) the URL.

CVSS 2.0 · 3.5 Low EPSS 8.3% KEV · Not listed
Vendors
Apache Redhat
Products
Http Server Enterprise Linux
CVE-2007-6422

httpd mod_proxy_balancer crash

The balancer_handler function in mod_proxy_balancer in the Apache HTTP Server 2.2.0 through 2.2.6, when a threaded Multi-Processing Module is used, allows remote authenticated users to cause a denial of service (child process crash) via an invalid bb variable.

CVSS 2.0 · 4.0 Medium EPSS 10.0% KEV · Not listed
Vendors
Apache Redhat
Products
Http Server Enterprise Linux