Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
In the Linux kernel, the following vulnerability has been resolved:
sunrpc: pin svc_xprt across the asynchronous TLS handshake callback
svc_tcp_handshake() stores the raw svc_xprt pointer in
tls_handshake_args.ta_data and submits the request through
tls_server_hello_x509(). The handshake core…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,64 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing
xdr_buf_to_bvec() writes a bio_vec into the caller's array before
testing whether that slot is in range, and the head branch performs
the store with no check at all.…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,64 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
sunrpc: wait for in-flight TLS handshake callback when cancel loses race
When wait_for_completion_interruptible_timeout() in
svc_tcp_handshake() returns 0 (timeout) or -ERESTARTSYS (signal) and
tls_handshake_cancel() then…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,64 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
rxrpc: Don't move a peeked OOB message onto the pending queue
rxrpc_recvmsg_oob() takes a received oob message off recvmsg_oobq and,
if a response is needed, moves it onto the pending_oobq tree. However,
only the unlink from…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,63 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
eth: fbnic: don't cache shinfo across skb realloc
fbnic_tx_lso() calls skb_cow_head() which may reallocate the skb
including the shared info. We can't use the pointer calculated
before the call.
BUG: KASAN:…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,63 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
sunrpc: harden rq_procinfo lifecycle to prevent double-free
The svc_release_rqst() function executes the callback inside
rqstp->rq_procinfo->pc_release. However, if a worker thread begins
processing a new request and encounters…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,63 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
tcp: defer md5sig_info kfree past RCU grace period in tcp_connect
The md5+ao reconciliation in tcp_connect() (net/ipv4/tcp_output.c)
has two symmetric branches:
if (needs_md5) {
tcp_ao_destroy_sock(sk, false);
} else if…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,63 % · rekomendacja wg zapisanej polityki
org.apache.karaf.config.core.impl.ConfigRepositoryImpl#update(pid, properties),
which backs the "config" MBean and the config:* shell commands, derives the file
it writes a configuration to from caller-supplied input without checking that
the result stays inside ${karaf.etc}:
* if the…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,63 % · rekomendacja wg zapisanej polityki
The Social Login & Sharing buttons with Analytics By SoClever WordPress plugin through 1.2.0 does not perform any authentication, authorisation or nonce checks in one of its publicly accessible login handlers, allowing unauthenticated attackers to obtain a valid session as any existing user,…
Opis źródłowy NVD · ENCVSS 9,8 · EPSS 0,63 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
sunrpc: pin svc_xprt across the asynchronous TLS handshake callback
svc_tcp_handshake() stores the raw svc_xprt pointer in
tls_handshake_args.ta_data and submits the request through
tls_server_hello_x509(). The handshake core…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,64 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing
xdr_buf_to_bvec() writes a bio_vec into the caller's array before
testing whether that slot is in range, and the head branch performs
the store with no check at all.…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,64 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
sunrpc: wait for in-flight TLS handshake callback when cancel loses race
When wait_for_completion_interruptible_timeout() in
svc_tcp_handshake() returns 0 (timeout) or -ERESTARTSYS (signal) and
tls_handshake_cancel() then…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,64 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
rxrpc: Don't move a peeked OOB message onto the pending queue
rxrpc_recvmsg_oob() takes a received oob message off recvmsg_oobq and,
if a response is needed, moves it onto the pending_oobq tree. However,
only the unlink from…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,63 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
eth: fbnic: don't cache shinfo across skb realloc
fbnic_tx_lso() calls skb_cow_head() which may reallocate the skb
including the shared info. We can't use the pointer calculated
before the call.
BUG: KASAN:…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,63 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
sunrpc: harden rq_procinfo lifecycle to prevent double-free
The svc_release_rqst() function executes the callback inside
rqstp->rq_procinfo->pc_release. However, if a worker thread begins
processing a new request and encounters…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,63 % · rekomendacja wg zapisanej polityki
In the Linux kernel, the following vulnerability has been resolved:
tcp: defer md5sig_info kfree past RCU grace period in tcp_connect
The md5+ao reconciliation in tcp_connect() (net/ipv4/tcp_output.c)
has two symmetric branches:
if (needs_md5) {
tcp_ao_destroy_sock(sk, false);
} else if…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,63 % · rekomendacja wg zapisanej polityki
org.apache.karaf.config.core.impl.ConfigRepositoryImpl#update(pid, properties),
which backs the "config" MBean and the config:* shell commands, derives the file
it writes a configuration to from caller-supplied input without checking that
the result stays inside ${karaf.etc}:
* if the…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,63 % · rekomendacja wg zapisanej polityki
The Social Login & Sharing buttons with Analytics By SoClever WordPress plugin through 1.2.0 does not perform any authentication, authorisation or nonce checks in one of its publicly accessible login handlers, allowing unauthenticated attackers to obtain a valid session as any existing user,…
Opis źródłowy NVD · EN
W tym tygodniu
CVSS 9,8 · EPSS 0,63 % · rekomendacja wg zapisanej polityki