alyssa milburn vulnerabilities and exploits

(subscribe to this query)

6.5

CVSSv3

The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack. Kernel 3.10.x and 4.18.x branches are believed to be vulnerable.

Linux Linux Kernel Debian Debian Linux 8.0 Redhat Enterprise Linux 7.0 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 18.10 Canonical Ubuntu Linux 19.04 Canonical Ubuntu Linux 14.04 Netapp Solidfire -Netapp Hci Management Node -Netapp Snapprotect -Netapp Active Iq Unified Manager For Vmware Vsphere Netapp Cn1610 Firmware -

3.3

CVSSv3

ax25_create in net/ax25/af_ax25.c in the AF_AX25 network module in the Linux kernel 3.16 up to and including 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-0614e2b73768.

Linux Linux Kernel Debian Debian Linux 8.0 Fedoraproject Fedora 29 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 19.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 16.04

3.3

CVSSv3

ieee802154_create in net/ieee802154/socket.c in the AF_IEEE802154 network module in the Linux kernel up to and including 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-e69dbd4619e7.

Linux Linux Kernel

3.3

CVSSv3

atalk_create in net/appletalk/ddp.c in the AF_APPLETALK network module in the Linux kernel up to and including 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-6cc03e8aa36c.

Linux Linux Kernel

3.3

CVSSv3

base_sock_create in drivers/isdn/mISDN/socket.c in the AF_ISDN network module in the Linux kernel up to and including 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-b91ee4aa2a21.

Linux Linux Kernel Debian Debian Linux 8.0 Fedoraproject Fedora 29 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 19.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 16.04 Opensuse Leap 15.0 Opensuse Leap 15.1 Redhat Enterprise Linux Desktop 6.0 Redhat Enterprise Linux Server 6.0 Redhat Enterprise Linux Workstation 6.0

3.3

CVSSv3

llcp_sock_create in net/nfc/llcp_sock.c in the AF_NFC network module in the Linux kernel up to and including 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-3a359798b176.

Linux Linux Kernel

7.8

CVSSv3

In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, shiftfs_btrfs_ioctl_fd_replace() installs an fd referencing a file from the lower filesystem without taking an additional reference to that file. After the btrfs ioctl completes...

Linux Linux Kernel 5.0 Linux Linux Kernel 5.3 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 19.04

1 EDB exploit

8.8

CVSSv3

rtl_p2p_noa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c in the Linux kernel up to and including 5.3.6 lacks a certain upper-bound check, leading to a buffer overflow.

Linux Linux Kernel Debian Debian Linux 8.0 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 19.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 19.10 Canonical Ubuntu Linux 16.04

4.6

CVSSv3

drivers/net/wireless/ath/ath6kl/usb.c in the Linux kernel up to and including 5.2.9 has a NULL pointer dereference via an incomplete address in an endpoint descriptor.

Linux Linux Kernel Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Opensuse Leap 15.0 Canonical Ubuntu Linux 19.04 Netapp Element Software -Netapp Active Iq Performance Analytics Services -Canonical Ubuntu Linux 14.04 Opensuse Leap 15.1 Netapp Active Iq Unified Manager Netapp Data Availability Services -Debian Debian Linux 8.0

7.8

CVSSv3

In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, shiftfs_btrfs_ioctl_fd_replace() calls fdget(oldfd), then without further checks passes the resulting file* into shiftfs_real_fdget(), which casts file->private_data, a void*...

Linux Linux Kernel 5.0 Linux Linux Kernel 5.3 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 19.04

1 EDB exploit

Get Started

1 2 3 4 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook