Vulnerability index

Browse CVEs

40 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Improper Access ControlCWE-284 × clear
Linux Kernel MEDIUM 5.5
CVE-2016-8645

The TCP stack in the Linux kernel before 4.8.10 mishandles skb truncation, which allows local users to cause a denial of service (system crash) via a…

Fix: after 4.8.9
Fix from $1,600 2016-11-28
Linux Kernel MEDIUM 6.8
CVE-2016-8633

drivers/firewire/net.c in the Linux kernel before 4.8.7, in certain unusual hardware configurations, allows remote attackers to execute arbitrary cod…

Fix: after 4.8.6
Fix from $1,600 2016-11-28
Linux Kernel MEDIUM 5.5
CVE-2016-8630

The x86_decode_insn function in arch/x86/kvm/emulate.c in the Linux kernel before 4.8.7, when KVM is enabled, allows local users to cause a denial of…

Fix: after 4.8.6
Fix from $1,600 2016-11-28
Linux Kernel MEDIUM 5.5
CVE-2016-6198

The filesystem layer in the Linux kernel before 4.5.5 proceeds with post-rename operations after an OverlayFS file is renamed to a self-hardlink, whi…

Fix: after 4.5.4
Fix from $1,600 2016-08-06
Linux Kernel MEDIUM 5.5
CVE-2016-1237

nfsd in the Linux kernel through 4.6.3 allows local users to bypass intended file-permission restrictions by setting a POSIX ACL, related to nfs2acl.…

Fix: after 4.6.3
Fix from $1,600 2016-06-29
Linux Kernel HIGH 7.1
CVE-2016-3713

The msr_mtrr_valid function in arch/x86/kvm/mtrr.c in the Linux kernel before 4.6.1 supports MSR 0x2f8, which allows guest OS users to read or write …

Fix: after 4.6
Fix from $1,950 2016-06-27
Linux Kernel Rt HIGH 8.1
CVE-2016-3707

The icmp_check_sysrq function in net/ipv4/icmp.c in the kernel.org projects/rt patches for the Linux kernel, as used in the kernel-rt package before …

Fix: after 3.10.0
Fix from $1,950 2016-06-27
Linux Kernel MEDIUM 6.1
CVE-2014-9717

fs/namespace.c in the Linux kernel before 4.0.2 processes MNT_DETACH umount2 system calls without verifying that the MNT_LOCKED flag is unset, which …

Fix: after 4.0.1
Fix from $1,600 2016-05-02
Linux Kernel HIGH 7.8
CVE-2012-6689

The netlink_sendmsg function in net/netlink/af_netlink.c in the Linux kernel before 3.5.5 does not validate the dst_pid field, which allows local use…

Fix: 3.0.44 / 3.2.30+
Fix from $1,950 2016-05-02
Linux Kernel MEDIUM 5.5
CVE-2015-8845

The tm_reclaim_thread function in arch/powerpc/kernel/process.c in the Linux kernel before 4.4.1 on powerpc platforms does not ensure that TM suspend…

Fix: after 4.4
Fix from $1,600 2016-04-27