Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

suse linux enterprise real time extension 12 vulnerabilities and exploits

(subscribe to this query)
8.2
CVSSv3
CVE-2015-8550
Xen, when used on a system providing PV backends, allows local guest OS administrators to cause a denial of service (host OS crash) or gain privileges by writing to memory shared between the frontend and backend, aka a double fetch vulnerability.
Xen Xen -Novell Suse Linux Enterprise Real Time Extension 12
7.8
CVSSv3
CVE-2015-8539
The KEYS subsystem in the Linux kernel prior to 4.4 allows local users to gain privileges or cause a denial of service (BUG) via crafted keyctl commands that negatively instantiate a key, related to security/keys/encrypted-keys/encrypted.c, security/keys/trusted.c, and security/k...
Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 14.04Suse Linux Enterprise Real Time Extension 12Linux Linux KernelLinux Linux Kernel 4.4
7.5
CVSSv3
CVE-2016-5244
The rds_inc_info_copy function in net/rds/recv.c in the Linux kernel up to and including 4.6.3 does not initialize a certain structure member, which allows remote malicious users to obtain sensitive information from kernel stack memory by reading an RDS message.
Fedoraproject Fedora 23Suse Linux Enterprise Real Time Extension 11Fedoraproject Fedora 24Suse Linux Enterprise Debuginfo 11Suse Linux Enterprise Real Time Extension 12Suse Linux Enterprise Server 11Redhat Enterprise Linux 6.0Suse Suse Linux Enterprise Software Development Kit 11Suse Linux Enterprise Workstation Extension 12Redhat Enterprise Linux 5Suse Linux Enterprise Desktop 12Suse Opensuse Leap 42.1Suse Suse Linux Enterprise Software Development Kit 12Fedoraproject Fedora 22Linux Linux KernelSuse Suse Linux Enterprise Server 12
6.8
CVSSv3
CVE-2015-8816
The hub_activate function in drivers/usb/core/hub.c in the Linux kernel prior to 4.3.5 does not properly maintain a hub-interface data structure, which allows physically proximate malicious users to cause a denial of service (invalid memory access and system crash) or possibly ha...
Novell Suse Linux Enterprise Server 12.0Novell Suse Linux Enterprise Server 11Novell Suse Linux Enterprise Debuginfo 11Novell Suse Linux Enterprise Live Patching 12.0Novell Suse Linux Enterprise Real Time Extension 11Novell Suse Linux Enterprise Desktop 12.0Novell Suse Linux Enterprise Module For Public Cloud 12Novell Suse Linux Enterprise Workstation Extension 12.0Novell Suse Linux Enterprise Software Development Kit 11.0Novell Suse Linux Enterprise Real Time Extension 12Novell Suse Linux Enterprise Software Development Kit 12.0Linux Linux KernelSuse Linux Enterprise Server 12Suse Linux Enterprise Live Patching 12
6.2
CVSSv3
CVE-2015-8785
The fuse_fill_write_pages function in fs/fuse/file.c in the Linux kernel prior to 4.4 allows local users to cause a denial of service (infinite loop) via a writev system call that triggers a zero length for the first segment of an iov.
Linux Linux KernelLinux Linux Kernel 4.4Suse Linux Enterprise Real Time Extension 12
6
CVSSv3
CVE-2015-8551
The PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x up to and including 4.3.x as the driver domain, allows local guest administrators to hit BUG conditions and cause a denial of service (NULL pointer dereference and host OS crash) by leveraging a sy...
Linux Linux KernelDebian Debian Linux 7.0Debian Debian Linux 8.0Opensuse Opensuse 13.1Suse Linux Enterprise Desktop 11Suse Linux Enterprise Desktop 12Suse Linux Enterprise Real Time Extension 11Suse Linux Enterprise Real Time Extension 12Suse Linux Enterprise Server 11Suse Linux Enterprise Server 12Suse Linux Enterprise Software Development Kit 11Suse Linux Enterprise Software Development Kit 12Suse Linux Enterprise Workstation Extension 12
4.6
CVSSv3
CVE-2016-3951
Double free vulnerability in drivers/net/usb/cdc_ncm.c in the Linux kernel prior to 4.5 allows physically proximate malicious users to cause a denial of service (system crash) or possibly have unspecified other impact by inserting a USB device with an invalid USB descriptor.
Canonical Ubuntu Linux 15.10Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 12.04Novell Suse Linux Enterprise Desktop 12Novell Suse Linux Enterprise Module For Public Cloud 12Novell Suse Linux Enterprise Real Time Extension 12Novell Suse Linux Enterprise Software Development Kit 12.0Novell Suse Linux Enterprise Workstation Extension 12.0Novell Suse Linux Enterprise Server 12.0Novell Suse Linux Enterprise Live Patching 12.0Suse Suse Linux Enterprise Software Development Kit 12.0Linux Linux Kernel 4.5.0
4.6
CVSSv3
CVE-2016-2782
The treo_attach function in drivers/usb/serial/visor.c in the Linux kernel prior to 4.5 allows physically proximate malicious users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by inserting a USB device that la...
Linux Linux KernelLinux Linux Kernel 4.5.0Suse Linux Enterprise Debuginfo 11Suse Linux Enterprise Module For Public Cloud 12Suse Linux Enterprise Desktop 12Suse Linux Enterprise Real Time Extension 11Suse Linux Enterprise Real Time Extension 12Suse Linux Enterprise Server 11Suse Linux Enterprise Server 12Suse Linux Enterprise Software Development Kit 11Suse Linux Enterprise Software Development Kit 12Suse Linux Enterprise Workstation Extension 12
4.6
CVSSv3
CVE-2015-7566
The clie_5_attach function in drivers/usb/serial/visor.c in the Linux kernel up to and including 4.4.1 allows physically proximate malicious users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by inserting a USB...
Novell Suse Linux Enterprise Real Time Extension 12Novell Suse Linux Enterprise Debuginfo 11Novell Suse Linux Enterprise Software Development Kit 11Novell Suse Linux Enterprise Real Time Extension 11Novell Suse Linux Enterprise Server 11Linux Linux Kernel
4.4
CVSSv3
CVE-2015-8552
The PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x up to and including 4.3.x as the driver domain, allows local guest administrators to generate a continuous stream of WARN messages and cause a denial of service (disk consumption) by leveraging a s...
Xen Xen 4.3.3Xen Xen 4.3.2Xen Xen 4.2.1Xen Xen 4.2.0Xen Xen 4.1.0Xen Xen 4.0.4Xen Xen 3.4.2Xen Xen 3.4.1Xen Xen 3.2.1Xen Xen 3.2.0Xen Xen 4.3.1Xen Xen 4.3.0Xen Xen 4.1.6.1Xen Xen 4.1.6Xen Xen 4.0.3Xen Xen 4.0.2Xen Xen 3.4.0Xen Xen 3.3.2Xen Xen 3.1.4Xen Xen 3.1.3Xen Xen 4.2.5Xen Xen 4.2.4
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook