Поиск уязвимостей
Количество 60
Количество 60
BDU:2023-04270
Уязвимость функции fw_set_parms() в модуле net/sched/cls_fw.c ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации и повысить свои привилегии
ALT-PU-2023-5540
ALT-PU-2023-5540: package `kernel-image-centos` update to version 5.14.0.364-alt1.el9
CVE-2023-3776
A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, fw_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability. We recommend upgrading past commit 0323bce598eea038714f941ce2b22541c46d488f.
CVE-2023-3776
A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, fw_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability. We recommend upgrading past commit 0323bce598eea038714f941ce2b22541c46d488f.
CVE-2023-3776
A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, fw_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability. We recommend upgrading past commit 0323bce598eea038714f941ce2b22541c46d488f.
CVE-2023-3776
Use-after-free in Linux kernel's net/sched: cls_fw component
CVE-2023-3776
A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw ...
GHSA-fcg7-9x44-gx43
A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, fw_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability. We recommend upgrading past commit 0323bce598eea038714f941ce2b22541c46d488f.
ALT-PU-2023-8808
ALT-PU-2023-8808: package `kernel-image-std-def` update to version 6.1.40-alt1
ALT-PU-2023-8880
ALT-PU-2023-8880: package `kernel-image-un-def` update to version 6.4.5-alt1
SUSE-SU-2023:3924-1
Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP5)
ROS-20230904-02
Множественные уязвимости ядра ОС
ROS-20230904-01
Множественные уязвимости ядра ОС
SUSE-SU-2023:3923-1
Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP5)
SUSE-SU-2023:3838-1
Security update for the Linux Kernel (Live Patch 40 for SLE 15 SP1)
SUSE-SU-2023:3809-1
Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP1)
SUSE-SU-2023:3786-1
Security update for the Linux Kernel (Live Patch 34 for SLE 15 SP1)
SUSE-SU-2023:3773-1
Security update for the Linux Kernel RT (Live Patch 9 for SLE 15 SP4)
SUSE-SU-2023:3768-1
Security update for the Linux Kernel (Live Patch 35 for SLE 15 SP1)
SUSE-SU-2023:3749-1
Security update for the Linux Kernel (Live Patch 35 for SLE 12 SP5)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2023-04270 Уязвимость функции fw_set_parms() в модуле net/sched/cls_fw.c ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации и повысить свои привилегии | CVSS3: 7.8 | 1% Низкий | больше 3 лет назад |
| ALT-PU-2023-5540 ALT-PU-2023-5540: package `kernel-image-centos` update to version 5.14.0.364-alt1.el9 | CVSS3: 7.8 | 1% Низкий | около 3 лет назад |
 | CVE-2023-3776 A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, fw_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability. We recommend upgrading past commit 0323bce598eea038714f941ce2b22541c46d488f. | CVSS3: 7.8 | 1% Низкий | больше 3 лет назад |
 | CVE-2023-3776 A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, fw_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability. We recommend upgrading past commit 0323bce598eea038714f941ce2b22541c46d488f. | CVSS3: 7 | 1% Низкий | больше 3 лет назад |
 | CVE-2023-3776 A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, fw_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability. We recommend upgrading past commit 0323bce598eea038714f941ce2b22541c46d488f. | CVSS3: 7.8 | 1% Низкий | больше 3 лет назад |
 | CVE-2023-3776 Use-after-free in Linux kernel's net/sched: cls_fw component | CVSS3: 7.8 | 1% Низкий | больше 3 лет назад |
| CVE-2023-3776 A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw ... | CVSS3: 7.8 | 1% Низкий | больше 3 лет назад |
| GHSA-fcg7-9x44-gx43 A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, fw_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability. We recommend upgrading past commit 0323bce598eea038714f941ce2b22541c46d488f. | CVSS3: 7.8 | 1% Низкий | больше 3 лет назад |
| ALT-PU-2023-8808 ALT-PU-2023-8808: package `kernel-image-std-def` update to version 6.1.40-alt1 | CVSS3: 8.8 | больше 3 лет назад | |
| ALT-PU-2023-8880 ALT-PU-2023-8880: package `kernel-image-un-def` update to version 6.4.5-alt1 | CVSS3: 8.8 | больше 3 лет назад | |
 | SUSE-SU-2023:3924-1 Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP5) | около 3 лет назад | ||
 | ROS-20230904-02 Множественные уязвимости ядра ОС | CVSS3: 9.3 | около 3 лет назад | |
| ROS-20230904-01 Множественные уязвимости ядра ОС | CVSS3: 9.3 | около 3 лет назад | |
| SUSE-SU-2023:3923-1 Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP5) | около 3 лет назад | ||
| SUSE-SU-2023:3838-1 Security update for the Linux Kernel (Live Patch 40 for SLE 15 SP1) | около 3 лет назад | ||
| SUSE-SU-2023:3809-1 Security update for the Linux Kernel (Live Patch 41 for SLE 15 SP1) | около 3 лет назад | ||
| SUSE-SU-2023:3786-1 Security update for the Linux Kernel (Live Patch 34 for SLE 15 SP1) | около 3 лет назад | ||
| SUSE-SU-2023:3773-1 Security update for the Linux Kernel RT (Live Patch 9 for SLE 15 SP4) | около 3 лет назад | ||
| SUSE-SU-2023:3768-1 Security update for the Linux Kernel (Live Patch 35 for SLE 15 SP1) | около 3 лет назад | ||
| SUSE-SU-2023:3749-1 Security update for the Linux Kernel (Live Patch 35 for SLE 12 SP5) | около 3 лет назад |
Уязвимостей на страницу