Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

debian debian linux 6.0 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv3
CVE-2023-44487
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
Ietf Http 2.0Nghttp2 Nghttp2Netty NettyEnvoyproxy Envoy 1.27.0Envoyproxy Envoy 1.26.4Envoyproxy Envoy 1.25.9Envoyproxy Envoy 1.24.10Eclipse JettyCaddyserver CaddyGolang Http2Golang GoGolang NetworkingF5 Big-ip AnalyticsF5 Big-ip Policy Enforcement ManagerF5 Big-ip Local Traffic ManagerF5 Big-ip Link ControllerF5 Big-ip Global Traffic ManagerF5 Big-ip Fraud Protection ServiceF5 Big-ip Domain Name SystemF5 Big-ip Application Security ManagerF5 Big-ip Application Acceleration ManagerF5 Big-ip Advanced Firewall Manager
6.5
CVSSv3
CVE-2022-40982
Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
Redhat Enterprise Linux 7.0Xen Xen -Redhat Enterprise Linux 6.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux 9.0Intel MicrocodeIntel Xeon E-2314 Firmware -Intel Xeon E-2324g Firmware -Intel Xeon E-2334 Firmware -Intel Xeon E-2374g Firmware -Intel Xeon E-2336 Firmware -Intel Xeon E-2356g Firmware -Intel Xeon E-2386g Firmware -Intel Xeon E-2378 Firmware -Intel Xeon E-2378g Firmware -Intel Xeon E-2388g Firmware -Intel Xeon W-1350 Firmware -Intel Xeon W-1350p Firmware -Intel Xeon W-1370 Firmware -Intel Xeon W-1370p Firmware -Intel Xeon W-1390t Firmware -Intel Xeon W-1390 Firmware -
5.9
CVSSv3
CVE-2022-2127
An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in winbindd_pam_auth_crap.c. When performing NTLM authentication, the client replies to cryptographic challenges back to the server. These replies have variable lengths, and Winbind fails to ...
Samba SambaRedhat Enterprise Linux 7.0Redhat Enterprise Linux 6.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux 9.0Fedoraproject Fedora 37Fedoraproject Fedora 38Debian Debian Linux 12.0
3.3
CVSSv3
CVE-2023-2602
A vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cause __real_pthread_create() to return an error, which can exhaust the process memory.
Libcap Project Libcap 2.66Redhat Enterprise Linux 7.0Redhat Enterprise Linux 6.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Debian Debian Linux 12.0Fedoraproject Fedora 37Fedoraproject Fedora 38
7.8
CVSSv3
CVE-2022-4283
A vulnerability was found in X.Org. This security flaw occurs because the XkbCopyNames function left a dangling pointer to freed memory, resulting in out-of-bounds memory access on subsequent XkbGetKbdByName requests.. This issue can lead to local privileges elevation on systems ...
X.org Xorg-server 1.20.4Fedoraproject Fedora 36Fedoraproject Fedora 37Redhat Enterprise Linux 7.0Redhat Enterprise Linux 6.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux 9.0Debian Debian Linux 11.0
7.5
CVSSv3
CVE-2022-45060
An HTTP Request Forgery issue exists in Varnish Cache 5.x and 6.x prior to 6.0.11, 7.x prior to 7.1.2, and 7.2.x prior to 7.2.1. An attacker may introduce characters through HTTP/2 pseudo-headers that are invalid in the context of an HTTP/1 request line, causing the Varnish serve...
Varnish-software Varnish Cache Plus 6.0.8Varnish Cache Project Varnish Cache 7.2.0Varnish Cache Project Varnish CacheVarnish-software Varnish Cache Plus 6.0.10Varnish-software Varnish Cache Plus 6.0.0Varnish-software Varnish Cache Plus 6.0.1Varnish-software Varnish Cache Plus 6.0.2Varnish-software Varnish Cache Plus 6.0.3Varnish-software Varnish Cache Plus 6.0.4Varnish-software Varnish Cache Plus 6.0.5Varnish-software Varnish Cache Plus 6.0.6Varnish-software Varnish Cache Plus 6.0.7Varnish-software Varnish Cache Plus 6.0.9Varnish-software Varnish CacheFedoraproject Fedora 35Fedoraproject Fedora 36Fedoraproject Fedora 37Debian Debian Linux 10.0Debian Debian Linux 11.0
5.5
CVSSv3
CVE-2022-3586
A flaw was found in the Linux kernel’s networking code. A use-after-free was found in the way the sch_sfb enqueue function used the socket buffer (SKB) cb field after the same SKB had been enqueued (and freed) into a child qdisc. This flaw allows a local, unprivileged user ...
Linux Linux Kernel 6.0Linux Linux KernelDebian Debian Linux 10.0
6.5
CVSSv3
CVE-2022-2850
A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated malicious user to cause a denial of service. This CVE is assigned aga...
Redhat Enterprise Linux 7.0Redhat Enterprise Linux 6.0Redhat Enterprise Linux 8.0Redhat Directory Server 11.0Redhat Enterprise Linux 9.0Redhat Directory Server 12.0Fedoraproject Fedora 35Fedoraproject Fedora 36Port389 389-ds-baseDebian Debian Linux 10.0
4.7
CVSSv3
CVE-2022-3303
A race condition flaw was found in the Linux kernel sound subsystem due to improper locking. It could lead to a NULL pointer dereference while handling the SNDCTL_DSP_SYNC ioctl. A privileged local user (root or member of the audio group) could use this flaw to crash the system, ...
Linux Linux Kernel 6.0Linux Linux KernelDebian Debian Linux 10.0Debian Debian Linux 11.0
5.5
CVSSv3
CVE-2022-2905
An out-of-bounds memory read flaw was found in the Linux kernel's BPF subsystem in how a user calls the bpf_tail_call function with a key larger than the max_entries of the map. This flaw allows a local user to gain unauthorized access to data.
Linux Linux Kernel 6.0Linux Linux KernelRedhat Enterprise Linux 8.0Debian Debian Linux 10.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-30924CVE-2024-3400overflowCVE-2024-23528CVE-2024-21338CVE-2024-3818CVE-2024-23535NULL pointer dereferenceelevation of privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook