CVE-2016-4484

dracut: Brute force attack on LUKS password decryption via initramfs

The Debian initrd script for the cryptsetup package 2:1.7.3-2 and earlier allows physically proximate attackers to gain shell access via many log in attempts with an invalid password.

CVSS 3.0 · 6.8 Medium EPSS < 1% KEV · Not listed

Vendors

Cryptsetup Project

Products

Cryptsetup

CVE-2017-15896

nodejs: Vulnerable to CVE-2017-3737 due to embedded OpenSSL

Node.js was affected by OpenSSL vulnerability CVE-2017-3737 in regards to the use of SSL_read() due to TLS handshake failure. The result was that an active network attacker could send application data to Node.js using the TLS or HTTP2 modules in a way that bypassed TLS authentication and encryption.

CVSS 3.1 · 9.1 Critical EPSS 2.4% KEV · Not listed

Vendors

Nodejs

Products

Node.js

CVE-2017-17806

kernel: HMAC implementation does not validate that the underlying cryptographic hash algorithm is unkeyed allowing local attackers to cause denial-of-service

The HMAC implementation (crypto/hmac.c) in the Linux kernel before 4.14.8 does not validate that the underlying cryptographic hash algorithm is unkeyed, allowing a local attacker able to use the AF_ALG-based hash interface (CONFIG_CRYPTO_USER_API_HASH) and the SHA-3 hash algorithm (CONFIG_CRYPTO_SHA3) to cause a kernel stack buffer overflow by executing a crafted sequence of system calls that encounter a missing SHA-3 initialization.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Canonical Debian Linux and 4 more

Products

Ubuntu Linux Debian Linux Linux Kernel and 6 more

CVE-2015-3420

dovecot: SSL/TLS handshake failures leading to a crash of the login process.

The ssl-proxy-openssl.c function in Dovecot before 2.2.17, when SSLv3 is disabled, allow remote attackers to cause a denial of service (login process crash) via vectors related to handshake failures.

CVSS 3.0 · 5.9 Medium EPSS 2.8% KEV · Not listed

Vendors

Dovecot Fedoraproject

Products

Dovecot Fedora

CVE-2017-16538

kernel: general protection fault in drivers/media/usb/dvb-usb-v2/lmedm04.c

drivers/media/usb/dvb-usb-v2/lmedm04.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (general protection fault and system crash) or possibly have unspecified other impact via a crafted USB device, related to a missing warm-start check and incorrect attach timing (dm04_lme2510_frontend_attach versus dm04_lme2510_tuner).

CVSS 3.0 · 6.6 Medium EPSS < 1% KEV · Not listed

Vendors

Linux

Products

Linux Kernel

CVE-2017-15868

kernel: bnep_add_connection does not check if l2cap socket is available allowing privilege escalation

The bnep_add_connection function in net/bluetooth/bnep/core.c in the Linux kernel before 3.19 does not ensure that an l2cap socket is available, which allows local users to gain privileges via a crafted application.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Canonical Debian Linux

Products

Ubuntu Linux Debian Linux Linux Kernel

CVE-2016-5689

ImageMagick: Lack of null pointer check in ReadDCMImage()

The DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact by leveraging lack of NULL pointer checks.

CVSS 3.0 · 9.8 Critical EPSS 5.4% KEV · Not listed

Vendors

Imagemagick Oracle

Products

Imagemagick Solaris

CVE-2014-4508

Kernel: x86_32: BUG in syscall auditing

arch/x86/kernel/entry_32.S in the Linux kernel through 3.15.1 on 32-bit x86 platforms, when syscall auditing is enabled and the sep CPU feature flag is set, allows local users to cause a denial of service (OOPS and system crash) via an invalid syscall number, as demonstrated by number 1000.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Canonical Linux Redhat

Products

Ubuntu Linux Linux Kernel Rhel Els

CVE-2015-0239

kernel: kvm: insufficient sysenter emulation when invoked from 16-bit code

The em_sysenter function in arch/x86/kvm/emulate.c in the Linux kernel before 3.18.5, when the guest OS lacks SYSENTER MSR initialization, allows guest OS users to gain guest OS privileges or cause a denial of service (guest OS crash) by triggering use of a 16-bit code segment for emulation of a SYSENTER instruction.

CVSS 2.0 · 4.4 Medium EPSS < 1% KEV · Not listed

Vendors

Canonical Debian Linux and 2 more

Products

Ubuntu Linux Debian Linux Linux Kernel and 5 more

CVE-2015-5400

squid: information disclosure due to incorrect handling of peer responses in tunnel.cc (SQUID-2015:2)

Squid before 3.5.6 does not properly handle CONNECT method peer responses when configured with cache_peer, which allows remote attackers to bypass intended restrictions and gain access to a backend proxy via a CONNECT request.

CVSS 2.0 · 6.8 Medium EPSS 20.8% KEV · Not listed

Vendors

Debian Fedoraproject Squid-cache

Products

Debian Linux Fedora Squid

CVE-2015-1349

bind: issue in trust anchor management can cause named to crash

named in ISC BIND 9.7.0 through 9.9.6 before 9.9.6-P2 and 9.10.x before 9.10.1-P2, when DNSSEC validation and the managed-keys feature are enabled, allows remote attackers to cause a denial of service (assertion failure and daemon exit, or daemon crash) by triggering an incorrect trust-anchor management scenario in which no key is ready for use.

CVSS 2.0 · 5.4 Medium EPSS 22.9% KEV · Not listed

Vendors

Isc Redhat

Products

Bind Enterprise Linux

CVE-2016-2145

mod_auth_mellon: Missing error check when calling ap_get_client_block()

The am_read_post_data function in mod_auth_mellon before 0.11.1 does not check if the ap_get_client_block function returns an error, which allows remote attackers to cause a denial of service (segmentation fault and process crash) via a crafted POST data.

CVSS 3.0 · 7.5 High EPSS 3.1% KEV · Not listed

Vendors

Fedoraproject Uninett

Products

Fedora Mod Auth Mellon

CVE-2016-9083

kernel: State machine confusion bug in vfio driver leading to memory corruption

drivers/vfio/pci/vfio_pci.c in the Linux kernel through 4.8.11 allows local users to bypass integer overflow checks, and cause a denial of service (memory corruption) or have unspecified other impact, by leveraging access to a vfio PCI device file for a VFIO_DEVICE_SET_IRQS ioctl call, aka a "state machine confusion bug."

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Linux Redhat

Products

Linux Kernel Enterprise Linux Rhel Extras Rt

CVE-2015-3288

kernel: zero page memory arbitrary modification

mm/memory.c in the Linux kernel before 4.1.4 mishandles anonymous pages, which allows local users to gain privileges or cause a denial of service (page tainting) via a crafted application that triggers writing to page zero.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Linux Redhat

Products

Linux Kernel Enterprise Linux

CVE-2015-1803

libXfont: crash on invalid read in bdfReadCharacters

The bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 does not properly handle character bitmaps it cannot read, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) and possibly execute arbitrary code via a crafted BDF font file.

CVSS 2.0 · 8.5 High EPSS 4.9% KEV · Not listed

Vendors

Canonical Debian Redhat and 1 more

Products

Ubuntu Linux Debian Linux Enterprise Linux and 1 more

CVE-2016-2182

openssl: Out-of-bounds write caused by unchecked errors in BN_bn2dec()

The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate division results, which allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors.

CVSS 3.0 · 9.8 Critical EPSS 44.2% KEV · Not listed

Vendors

Hp Openssl Oracle and 1 more

Products

Icewall Federation Agent Icewall Mcrp Icewall Sso and 5 more

CVE-2013-4355

Kernel: Xen: Xsa-63: information leak via I/O instruction emulation

Xen 4.3.x and earlier does not properly handle certain errors, which allows local HVM guests to obtain hypervisor stack memory via a (1) port or (2) memory mapped I/O write or (3) other unspecified operations related to addresses without associated memory.

CVSS 2.0 · 1.5 Low EPSS < 1% KEV · Not listed

Vendors

Redhat Xen

Products

Enterprise Linux Xen

CVE-2013-0221

coreutils: segfault in "sort -d" and "sort -M" with long line input

The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a long string to the sort command, when using the (1) -d or (2) -M switch, which triggers a stack-based buffer overflow in the alloca function.

CVSS 2.0 · 4.3 Medium EPSS 7.2% KEV · Not listed

Vendors

Opensuse Redhat

Products

Opensuse Enterprise Linux

CVE-2013-0223

coreutils: segfault in "join -i" with long line input

The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a long string to the join command, when using the -i switch, which triggers a stack-based buffer overflow in the alloca function.

CVSS 2.0 · 1.9 Low EPSS < 1% KEV · Not listed

Vendors

Opensuse Redhat

Products

Opensuse Enterprise Linux

CVE-2013-0222

coreutils: segfault in uniq with long line input

The SUSE coreutils-i18n.patch for GNU coreutils allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a long string to the uniq command, which triggers a stack-based buffer overflow in the alloca function.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed

Vendors

Opensuse Redhat

Products

Opensuse Enterprise Linux