Browse CVEs

CRITICAL 9.8 CVE-2019-14895EPSS 8% A heap-based buffer overflow was discovered in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver. The flaw co… Linux Kernel 3.16.81 / 4.4.210+ Fix from $2,3002019-11-29 CRITICAL 9.8 CVE-2011-2717 The DHCPv6 client (dhcp6c) as used in the dhcpv6 project through 2011-07-25 allows remote DHCP servers to execute arbitrary commands via shell metach… Dhcp6c after 2011-07-25 Fix from $2,3002019-11-27 CRITICAL 9.8 CVE-2019-14896EPSS 9% A heap-based buffer overflow vulnerability was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver. A remote attacker could… Linux Kernel 3.16.83 / 4.4.212+ Fix from $2,3002019-11-27 CRITICAL 9.8 CVE-2019-18814 An issue was discovered in the Linux kernel through 5.3.9. There is a use-after-free when aa_label_parse() fails in aa_audit_rule_init() in security/… Linux Kernel after 5.3.9 Fix from $2,3002019-11-07 CRITICAL 9.8 CVE-2019-18805 An issue was discovered in net/ipv4/sysctl_net_ipv4.c in the Linux kernel before 5.0.11. There is a net/ipv4/tcp_input.c signed integer overflow in t… Linux Kernel 4.4.180 / 4.9.172+ Fix from $2,3002019-11-07 CRITICAL 9.1 CVE-2014-3180 In kernel/compat.c in the Linux kernel before 3.17, as used in Google Chrome OS and other products, there is a possible out-of-bounds read. restart_s… Linux Kernel 3.17+ Fix from $2,3002019-11-06 CRITICAL 9.8 CVE-2019-17133EPSS 7% In the Linux kernel through 5.3.2, cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c does not reject a long SSID IE, leading to a Buffer Overflow. Linux Kernel 3.16.77 / 4.4.198+ Fix from $2,3002019-10-04 CRITICAL 9.8 CVE-2019-16746EPSS 13% An issue was discovered in net/wireless/nl80211.c in the Linux kernel through 5.2.17. It does not check the length of variable elements in a beacon h… Linux Kernel 3.16.79 / 4.4.197+ Fix from $2,3002019-09-24 CRITICAL 9.1 CVE-2019-15926EPSS 5% An issue was discovered in the Linux kernel before 5.2.3. Out of bounds access exists in the functions ath6kl_wmi_pstream_timeout_event_rx and ath6kl… Linux Kernel 3.16.74 / 4.4.187+ Fix from $2,3002019-09-04 CRITICAL 9.8 CVE-2019-15504 drivers/net/wireless/rsi/rsi_91x_usb.c in the Linux kernel through 5.2.9 has a Double Free via crafted USB device traffic (which may be remote via us… Linux Kernel 4.19.74 / 5.2.16+ Fix from $2,3002019-08-23 CRITICAL 9.8 CVE-2019-15505EPSS 8% drivers/media/usb/dvb-usb/technisat-usb2.c in the Linux kernel through 5.2.9 has an out-of-bounds read via crafted USB device traffic (which may be r… Linux Kernel 3.16.77 / 4.4.194+ Fix from $2,3002019-08-23 CRITICAL 9.8 CVE-2018-20961EPSS 6% In the Linux kernel before 4.16.4, a double free vulnerability in the f_midi_set_alt function of drivers/usb/gadget/function/f_midi.c in the f_midi d… Linux Kernel 4.4.190 / 4.9.96+ Fix from $2,3002019-08-07 CRITICAL 9.8 CVE-2011-5327 In the Linux kernel before 3.1, an off by one in the drivers/target/loopback/tcm_loop.c tcm_loop_make_naa_tpg() function could result in at least mem… Linux Kernel 3.1+ Fix from $2,3002019-07-27 CRITICAL 9.8 CVE-2012-6712 In the Linux kernel before 3.4, a buffer overflow occurs in drivers/net/wireless/iwlwifi/iwl-agn-sta.c, which will cause at least memory corruption. Linux Kernel 3.4+ Fix from $2,3002019-07-27 CRITICAL 9.8 CVE-2016-10764 In the Linux kernel before 4.9.6, there is an off by one in the drivers/mtd/spi-nor/cadence-quadspi.c cqspi_setup_flash() function. There are CQSPI_M… Linux Kernel 4.9.6+ Fix from $2,3002019-07-27 CRITICAL 9.8 CVE-2017-18379 In the Linux kernel before 4.14, an out of boundary access happened in drivers/nvme/target/fc.c. Linux Kernel 4.14+ Fix from $2,3002019-07-27 CRITICAL 9.8 CVE-2007-6762 In the Linux kernel before 2.6.20, there is an off-by-one bug in net/netlabel/netlabel_cipso_v4.c where it is possible to overflow the doi_def->tags[… Linux Kernel 2.6.20+ Fix from $2,3002019-07-27 CRITICAL 9.8 CVE-2019-10126EPSS 7% A flaw was found in the Linux kernel. A heap based buffer overflow in mwifiex_uap_parse_tail_ies function in drivers/net/wireless/marvell/mwifiex/ie.… Linux Kernel 4.4.186 / 4.9.186+ Fix from $2,3002019-06-14 CRITICAL 9.8 CVE-2019-11683EPSS 7% udp_gro_receive_segment in net/ipv4/udp_offload.c in the Linux kernel 5.x before 5.0.13 allows remote attackers to cause a denial of service (slab-ou… Linux Kernel 5.0.13+ Fix from $2,3002019-05-02 CRITICAL 9.8 CVE-2019-10125EPSS 5% An issue was discovered in aio_poll() in fs/aio.c in the Linux kernel through 5.0.4. A file may be released by aio_poll_wake() if an expected event i… Linux Kernel 4.19.38 / 5.0.5+ Fix from $2,3002019-03-27 CRITICAL 9.8 CVE-2018-20784 In the Linux kernel before 4.20.2, kernel/sched/fair.c mishandles leaf cfs_rq's, which allows attackers to cause a denial of service (infinite loop i… Linux Kernel 4.14.93 / 4.19.15+ Fix from $2,3002019-02-22 CRITICAL 9.8 CVE-2018-12714EPSS 5% An issue was discovered in the Linux kernel through 4.17.2. The filter parsing in kernel/trace/trace_events_filter.c could be called with no filter, … Linux Kernel 4.17.4+ Fix from $2,3002018-06-24 CRITICAL 9.8 CVE-2017-18174 In the Linux kernel before 4.7, the amd_gpio_remove function in drivers/pinctrl/pinctrl-amd.c calls the pinctrl_unregister function, leading to a dou… Linux Kernel 4.7+ Fix from $2,3002018-02-11 CRITICAL 9.8 CVE-2018-5703 The tcp_v6_syn_recv_sock function in net/ipv6/tcp_ipv6.c in the Linux kernel through 4.14.11 allows attackers to cause a denial of service (slab out-… Linux Kernel 4.14.86 / 4.15.8+ Fix from $2,3002018-01-16 CRITICAL 9.8 CVE-2017-18017EPSS 53% The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to c… Linux Kernel 3.2.99 / 3.10.108+ Fix from $2,3002018-01-03 CRITICAL 9.8 CVE-2017-13715EPSS 10% The __skb_flow_dissect function in net/core/flow_dissector.c in the Linux kernel before 4.3 does not ensure that n_proto, ip_proto, and thoff are ini… Linux Kernel 4.3+ Fix from $2,3002017-08-29 CRITICAL 9.8 CVE-2017-12762EPSS 5% In /drivers/isdn/i4l/isdn_net.c: A user-controlled buffer is copied into a local buffer of constant size using strcpy without a length check which ca… Linux Kernel 3.18.64+ Fix from $2,3002017-08-09 CRITICAL 9.8 CVE-2017-7895EPSS 11% The NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lack certain checks for the end of a buffer, which allows remote attac… Linux Kernel 3.2.89 / 3.16.44+ Fix from $2,3002017-04-28 CRITICAL 9.8 CVE-2017-0561EPSS 24% A remote code execution vulnerability in the Broadcom Wi-Fi firmware could enable a remote attacker to execute arbitrary code within the context of t… Linux Kernel Patch available Fix from $2,3002017-04-07 CRITICAL 9.8 CVE-2016-10229EPSS 13% udp.c in the Linux kernel before 4.5 allows remote attackers to execute arbitrary code via UDP traffic that triggers an unsafe second checksum calcul… Linux Kernel 3.2.76 / 3.4.113+ Fix from $2,3002017-04-04