andrey konovalov vulnerabilities and exploits

(subscribe to this query)

7.8

CVSSv3

drivers/media/usb/dvb-usb-v2/dvb_usb_core.c in the Linux kernel 4.9.x and 4.10.x prior to 4.10.12 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other ...

Linux Linux Kernel Debian Debian Linux 8.0 Debian Debian Linux 9.0

4.7

CVSSv3

An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requi...

Linux Linux Kernel 3.18 Linux Linux Kernel 3.10

5.5

CVSSv3

The omninet_open function in drivers/usb/serial/omninet.c in the Linux kernel prior to 4.10.4 allows local users to cause a denial of service (tty exhaustion) by leveraging reference count mishandling.

Linux Linux Kernel Debian Debian Linux 8.0 Debian Debian Linux 9.0

5.5

CVSSv3

The klsi_105_get_line_state function in drivers/usb/serial/kl5kusb105.c in the Linux kernel prior to 4.9.5 places uninitialized heap-memory contents into a log entry upon a failure to read the line status, which allows local users to obtain sensitive information by reading the lo...

Linux Linux Kernel

7.8

CVSSv3

The ipxitf_ioctl function in net/ipx/af_ipx.c in the Linux kernel up to and including 4.11.1 mishandles reference counts, which allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via a failed SIOCGIFADDR ioctl call for an IP...

Linux Linux Kernel Debian Debian Linux 8.0 Debian Debian Linux 9.0

4.6

CVSSv3

The edge_bulk_in_callback function in drivers/usb/serial/io_ti.c in the Linux kernel prior to 4.10.4 allows local users to obtain sensitive information (in the dmesg ringbuffer and syslog) from uninitialized kernel memory by using a crafted USB device (posing as an io_ti USB seri...

Linux Linux Kernel Debian Debian Linux 8.0 Debian Debian Linux 9.0

6.6

CVSSv3

The hdpvr_probe function in drivers/media/usb/hdpvr/hdpvr-core.c in the Linux kernel up to and including 4.13.11 allows local users to cause a denial of service (improper error handling and system crash) or possibly have unspecified other impact via a crafted USB device.

Linux Linux Kernel

7

CVSSv3

net/xfrm/xfrm_policy.c in the Linux kernel up to and including 4.12.3, when CONFIG_XFRM_MIGRATE is enabled, does not ensure that the dir value of xfrm_userpolicy_id is XFRM_POLICY_MAX or less, which allows local users to cause a denial of service (out-of-bounds access) or possibl...

Linux Linux Kernel

7

CVSSv3

The driver_override implementation in drivers/base/platform.c in the Linux kernel prior to 4.12.1 allows local users to gain privileges by leveraging a race condition between a read operation and a store operation that involve different overrides.

Linux Linux Kernel

6.6

CVSSv3

drivers/media/usb/dvb-usb-v2/lmedm04.c in the Linux kernel up to and including 4.13.11 allows local users to cause a denial of service (general protection fault and system crash) or possibly have unspecified other impact via a crafted USB device, related to a missing warm-start c...

Linux Linux Kernel

Get Started

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook