Browse CVEs

HIGH 7.2 CVE-2015-4036 Array index error in the tcm_vhost_make_tpg function in drivers/vhost/scsi.c in the Linux kernel before 4.0 might allow guest OS users to cause a den… Linux Kernel 3.10.90 / 3.12.44+ Fix from $1,9502015-08-31 MEDIUM 6.9 CVE-2015-3214 The pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not distinguish between read lengths and write lengths, w… Linux Kernel after 2.6.32 Fix from $1,6002015-08-31 HIGH 9.0 CVE-2015-4002EPSS 8% drivers/staging/ozwpan/ozusbsvc1.c in the OZWPAN driver in the Linux kernel through 4.0.5 does not ensure that certain length values are sufficiently… Linux Kernel 3.4.109 / 3.10.81+ Fix from $1,9502015-06-07 HIGH 9.3 CVE-2015-3331EPSS 10% The __driver_rfc4106_decrypt function in arch/x86/crypto/aesni-intel_glue.c in the Linux kernel before 3.19.3 does not properly determine the memory … Linux Kernel 3.2.69 / 3.4.108+ Fix from $1,9502015-05-27 MEDIUM 6.9 CVE-2015-2666 Stack-based buffer overflow in the get_matching_model_microcode function in arch/x86/kernel/cpu/microcode/intel_early.c in the Linux kernel before 4.… Linux Kernel 3.10.83 / 3.12.40+ Fix from $1,6002015-05-27 MEDIUM 6.1 CVE-2014-8884 Stack-based buffer overflow in the ttusbdecfe_dvbs_diseqc_send_master_cmd function in drivers/media/usb/ttusb-dec/ttusbdecfe.c in the Linux kernel be… Linux Kernel after 3.17.3 Fix from $1,6002014-11-30 HIGH 7.8 CVE-2014-8369 The kvm_iommu_map_pages function in virt/kvm/iommu.c in the Linux kernel through 3.17.2 miscalculates the number of pages during the handling of a ma… Linux Kernel after 3.17.2 Fix from $1,9502014-11-10 HIGH 7.8 CVE-2014-3535 include/linux/netdevice.h in the Linux kernel before 2.6.36 incorrectly uses macros for netdev_printk and its related logging implementation, which a… Linux Kernel after 2.6.35.13 Fix from $1,9502014-09-28 MEDIUM 6.9 CVE-2014-0205 The futex_wait function in kernel/futex.c in the Linux kernel before 2.6.37 does not properly maintain a certain reference count during requeue opera… Linux Kernel after 2.6.36.4 Fix from $1,6002014-09-28 HIGH 7.8 CVE-2014-6416EPSS 6% Buffer overflow in net/ceph/auth_x.c in Ceph, as used in the Linux kernel before 3.16.3, allows remote attackers to cause a denial of service (memory… Linux Kernel 3.2.64 / 3.4.105+ Fix from $1,9502014-09-28 MEDIUM 6.9 CVE-2014-3181 Multiple stack-based buffer overflows in the magicmouse_raw_event function in drivers/hid/hid-magicmouse.c in the Magic Mouse HID driver in the Linux… Linux Kernel 3.2.63 / 3.4.104+ Fix from $1,6002014-09-28 MEDIUM 6.9 CVE-2014-3182 Array index error in the logi_dj_raw_event function in drivers/hid/hid-logitech-dj.c in the Linux kernel before 3.16.2 allows physically proximate at… Linux Kernel 3.2.63 / 3.4.104+ Fix from $1,6002014-09-28 MEDIUM 6.9 CVE-2014-3183 Heap-based buffer overflow in the logi_dj_ll_raw_request function in drivers/hid/hid-logitech-dj.c in the Linux kernel before 3.16.2 allows physicall… Linux Kernel 3.16.2+ Fix from $1,6002014-09-28 MEDIUM 6.9 CVE-2014-3185 Multiple buffer overflows in the command_port_read_callback function in drivers/usb/serial/whiteheat.c in the Whiteheat USB Serial Driver in the Linu… Linux Kernel 3.2.63 / 3.4.104+ Fix from $1,6002014-09-28 MEDIUM 6.9 CVE-2014-3186 Buffer overflow in the picolcd_raw_event function in devices/hid/hid-picolcd_core.c in the PicoLCD HID device driver in the Linux kernel through 3.16… Linux Kernel 3.2.63 / 3.4.104+ Fix from $1,6002014-09-28 MEDIUM 6.1 CVE-2014-2309 The ip6_route_add function in net/ipv6/route.c in the Linux kernel through 3.13.6 does not properly count the addition of routes, which allows remote… Linux Kernel after 3.13.6 Fix from $1,6002014-03-11 HIGH 7.2 CVE-2014-0069 The cifs_iovec_write function in fs/cifs/file.c in the Linux kernel through 3.13.5 does not properly handle uncached write operations that copy fewer… Linux Kernel 3.2.57 / 3.4.83+ Fix from $1,9502014-02-28 MEDIUM 6.1 CVE-2013-7027 The ieee80211_radiotap_iterator_init function in net/wireless/radiotap.c in the Linux kernel before 3.11.7 does not check whether a frame contains an… Linux Kernel after 3.11.6 Fix from $1,6002013-12-09 MEDIUM 6.9 CVE-2013-6381 Buffer overflow in the qeth_snmp_command function in drivers/s390/net/qeth_core_main.c in the Linux kernel through 3.12.1 allows local users to cause… Linux Kernel 3.2.54 / 3.4.72+ Fix from $1,6002013-11-27 HIGH 7.0 CVE-2013-4588 Multiple stack-based buffer overflows in net/netfilter/ipvs/ip_vs_ctl.c in the Linux kernel before 2.6.33, when CONFIG_IP_VS is used, allow local use… Linux Kernel 2.6.33+ Fix from $1,9502013-11-20 MEDIUM 6.2 CVE-2013-4591 Buffer overflow in the __nfs4_get_acl_uncached function in fs/nfs/nfs4proc.c in the Linux kernel before 3.7.2 allows local users to cause a denial of… Linux Kernel after 3.7.1 Fix from $1,6002013-11-20 MEDIUM 6.9 CVE-2013-6763 The uio_mmap_physical function in drivers/uio/uio.c in the Linux kernel before 3.12 does not validate the size of a memory block, which allows local … Linux Kernel 3.2.53 / 3.4.71+ Fix from $1,6002013-11-12 MEDIUM 6.1 CVE-2013-4387 net/ipv6/ip6_output.c in the Linux kernel through 3.11.4 does not properly determine the need for UDP Fragmentation Offload (UFO) processing of small… Linux Kernel after 3.11.4 Fix from $1,6002013-10-10 MEDIUM 5.4 CVE-2013-2895 drivers/hid/hid-logitech-dj.c in the Human Interface Device (HID) subsystem in the Linux kernel through 3.11, when CONFIG_HID_LOGITECH_DJ is enabled,… Linux Kernel after 3.11 Fix from $1,6002013-09-16 HIGH 7.9 CVE-2013-2850EPSS 7% Heap-based buffer overflow in the iscsi_add_notunderstood_response function in drivers/target/iscsi/iscsi_target_parameters.c in the iSCSI target sub… Linux Kernel 3.2.47 / 3.4.48+ Fix from $1,9502013-06-07 MEDIUM 6.8 CVE-2011-4604 The bat_socket_read function in net/batman-adv/icmp_socket.c in the Linux kernel before 3.3 allows remote attackers to cause a denial of service (mem… Linux Kernel after 3.2.46 Fix from $1,6002013-06-07 MEDIUM 6.9 CVE-2013-1860 Heap-based buffer overflow in the wdm_in_callback function in drivers/usb/class/cdc-wdm.c in the Linux kernel before 3.8.4 allows physically proximat… Linux Kernel 3.0.70 / 3.2.41+ Fix from $1,6002013-03-22 MEDIUM 6.8 CVE-2013-1796 The kvm_set_msr_common function in arch/x86/kvm/x86.c in the Linux kernel through 3.8.4 does not ensure a required time_page alignment during an MSR_… Linux Kernel after 3.8.4 Fix from $1,6002013-03-22 MEDIUM 6.2 CVE-2013-1773 Buffer overflow in the VFAT filesystem implementation in the Linux kernel before 3.3 allows local users to gain privileges or cause a denial of servi… Linux Kernel after 3.3 Fix from $1,6002013-02-28 MEDIUM 6.6 CVE-2013-0310 The cipso_v4_validate function in net/ipv4/cipso_ipv4.c in the Linux kernel before 3.4.8 allows local users to cause a denial of service (NULL pointe… Linux Kernel after 3.4.7 Fix from $1,6002013-02-22