Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

real-time scheduler vulnerabilities and exploits

(subscribe to this query)
9.8
CVSSv3
CVE-2018-20784
In the Linux kernel prior to 4.20.2, kernel/sched/fair.c mishandles leaf cfs_rq's, which allows malicious users to cause a denial of service (infinite loop in update_blocked_averages) or possibly have unspecified other impact by inducing a high load.
Linux Linux KernelLinux Linux Kernel 5.0Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Redhat Enterprise Linux 8.0Redhat Enterprise Linux For Real Time 8
7.8
CVSSv3
CVE-2023-4147
A use-after-free flaw was found in the Linux kernel’s Netfilter functionality when adding a rule with NFTA_RULE_CHAIN_ID. This flaw allows a local user to crash or escalate their privileges on the system.
Linux Linux Kernel 6.5Linux Linux KernelFedoraproject Fedora 38Redhat Enterprise Linux 9.0Redhat Enterprise Linux For Real Time For Nfv 9.0Redhat Enterprise Linux For Real Time 9.0Redhat Enterprise Linux Server Aus 9.2Redhat Enterprise Linux Eus 9.2Debian Debian Linux 10.0Debian Debian Linux 11.0Debian Debian Linux 12.0
7.8
CVSSv3
CVE-2023-0179
A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel. This issue could allow the leakage of both stack and heap addresses, and potentially allow Local Privilege Escalation to the root user via arbitrary code execution.
Linux Linux KernelCanonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 20.04Canonical Ubuntu Linux 22.04Fedoraproject Fedora 36Fedoraproject Fedora 37Redhat Enterprise Linux 9.0Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 9.0Redhat Enterprise Linux For Power Little Endian Eus 9.0Redhat Enterprise Linux For Power Little Endian 9.0Redhat Enterprise Linux Eus 9.0Redhat Enterprise Linux For Real Time For Nfv 9.0Redhat Enterprise Linux For Real Time 9.0Redhat Enterprise Linux Server 9.0Redhat Enterprise Linux For Ibm Z Systems 9.0Redhat Codeready Linux Builder -
7.8
CVSSv3
CVE-2022-1011
A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write(). This flaw allows a local user to gain unauthorized access to data from the FUSE filesystem, resulting in privilege escalation.
Linux Linux KernelLinux Linux Kernel 5.17Fedoraproject Fedora 34Fedoraproject Fedora 35Redhat Enterprise Linux 7.0Redhat Enterprise Linux 6.0Redhat Enterprise Linux 8.0Redhat Developer Tools 1.0Redhat Enterprise Linux For Real Time 8Redhat Enterprise Linux For Real Time For Nfv 8Redhat Enterprise Linux For Power Little Endian 8.0Redhat Enterprise Linux For Ibm Z Systems 8.0Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 8.6Redhat Build Of Quarkus 2.0Redhat Enterprise Linux For Real Time For Nfv Tus 8.6Redhat Enterprise Linux For Real Time Tus 8.6Redhat Enterprise Linux Eus 8.6Redhat Enterprise Linux Server Aus 8.6Redhat Enterprise Linux For Ibm Z Systems Eus 8.6Redhat Enterprise Linux For Power Little Endian Eus 8.6Redhat Enterprise Linux Server Update Services For Sap Solutions 8.6Redhat Enterprise Linux Server Tus 8.6
6.1
CVSSv3
CVE-2019-11358
jQuery prior to 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
Jquery JqueryDebian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Drupal DrupalBackdropcms BackdropFedoraproject Fedora 28Fedoraproject Fedora 29Fedoraproject Fedora 30Opensuse Leap 15.1Opensuse Backports Sle 15.0Netapp Snapcenter -Netapp Oncommand System ManagerRedhat Cloudforms 4.7Redhat Virtualization Manager 4.3Oracle Service Bus 12.1.3.0.0Oracle Primavera Unifier 16.2Oracle Jd Edwards Enterpriseone Tools 9.2Oracle Weblogic Server 12.1.3.0.0Oracle Service Bus 11.1.1.9.0Oracle Jdeveloper 11.1.1.9.0Oracle Primavera Unifier 16.1
6.1
CVSSv3
CVE-2017-3537
Vulnerability in the Oracle Real-Time Scheduler component of Oracle Utilities Applications (subcomponent: Mobile Communications Platform). Supported versions that are affected are 2.2.0.3.13, 2.3.0.0 and 2.3.0.1. Easily "exploitable" vulnerability allows unauthenticated...
Oracle Real-time Scheduler 2.3.0.1Oracle Real-time Scheduler 2.3.0.0Oracle Real-time Scheduler 2.2.0.3.13
5.5
CVSSv3
CVE-2023-4132
A use-after-free vulnerability was found in the siano smsusb module in the Linux kernel. The bug occurs during device initialization when the siano device is plugged in. This flaw allows a local user to crash the system, causing a denial of service condition.
Linux Linux KernelRedhat Enterprise Linux 8.0Redhat Enterprise Linux For Real Time 8.0Redhat Enterprise Linux For Real Time For Nfv 8.0Fedoraproject Fedora -Debian Debian Linux 10.0Debian Debian Linux 11.0Debian Debian Linux 12.0
4.4
CVSSv3
CVE-2023-3772
A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer in xfrm_update_ae_params(), leading to a possible kernel crash and denia...
Redhat Enterprise Linux 8.0Redhat Enterprise Linux For Real Time 8.0Redhat Enterprise Linux For Real Time For Nfv 8.0Redhat Enterprise Linux 9.0Fedoraproject Fedora -Linux Linux Kernel -Debian Debian Linux 10.0Debian Debian Linux 12.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27977IMAPlocal usersCVE-2024-32038CVE-2023-49963CVE-2023-22869CVE-2024-31497localCVE-2024-2961
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook