Поиск уязвимостей
Количество 97
Количество 97
ALT-PU-2023-1851
ALT-PU-2023-1851: package `kernel-image-centos` update to version 5.14.0.316-alt1.el9
BDU:2023-05193
Уязвимость ядра операционных систем Linux, связанная с манипулированием аргументов TCA_QFQ_LMAX, позволяющая нарушителю привести к записи за пределами допустимого диапазона
CVE-2023-2248
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it was the duplicate of CVE-2023-31436.
CVE-2023-2248
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it was the duplicate of CVE-2023-31436.
CVE-2023-2248
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it was the duplicate of CVE-2023-31436.
SUSE-SU-2023:2731-1
Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP4)
SUSE-SU-2023:2703-1
Security update for the Linux Kernel (Live Patch 8 for SLE 15 SP4)
SUSE-SU-2023:2697-1
Security update for the Linux Kernel RT (Live Patch 3 for SLE 15 SP4)
SUSE-SU-2023:2687-1
Security update for the Linux Kernel (Live Patch 40 for SLE 15 SP1)
SUSE-SU-2023:2743-1
Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP4)
SUSE-SU-2023:2735-1
Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP4)
SUSE-SU-2023:2721-1
Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP4)
SUSE-SU-2023:2719-1
Security update for the Linux Kernel (Live Patch 39 for SLE 12 SP5)
SUSE-SU-2023:2689-1
Security update for the Linux Kernel (Live Patch 41 for SLE 12 SP5)
SUSE-SU-2023:2681-1
Security update for the Linux Kernel (Live Patch 37 for SLE 15 SP1)
SUSE-SU-2023:2680-1
Security update for the Linux Kernel RT (Live Patch 2 for SLE 15 SP4)
GHSA-jrgc-m5wf-7pch
A heap out-of-bounds read/write vulnerability in the Linux Kernel traffic control (QoS) subsystem can be exploited to achieve local privilege escalation. The qfq_change_class function does not properly limit the lmax variable which can lead to out-of-bounds read/write. If the TCA_QFQ_LMAX value is not offered through nlattr, lmax is determined by the MTU value of the network device. The MTU of the loopback device can be set up to 2^31-1 and as a result, it is possible to have an lmax value that exceeds QFQ_MIN_LMAX. We recommend upgrading past commit 3037933448f60f9acb705997eae62013ecb81e0d.
SUSE-SU-2023:2755-1
Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP4)
SUSE-SU-2023:2724-1
Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP3)
SUSE-SU-2023:2718-1
Security update for the Linux Kernel (Live Patch 34 for SLE 12 SP5)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2023-1851 ALT-PU-2023-1851: package `kernel-image-centos` update to version 5.14.0.316-alt1.el9 | CVSS3: 7.8 | больше 3 лет назад | |
 | BDU:2023-05193 Уязвимость ядра операционных систем Linux, связанная с манипулированием аргументов TCA_QFQ_LMAX, позволяющая нарушителю привести к записи за пределами допустимого диапазона | CVSS3: 7.8 | больше 3 лет назад | |
 | CVE-2023-2248 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it was the duplicate of CVE-2023-31436. | больше 3 лет назад | ||
 | CVE-2023-2248 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it was the duplicate of CVE-2023-31436. | больше 3 лет назад | ||
 | CVE-2023-2248 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it was the duplicate of CVE-2023-31436. | около 1 года назад | ||
 | SUSE-SU-2023:2731-1 Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP4) | больше 3 лет назад | ||
| SUSE-SU-2023:2703-1 Security update for the Linux Kernel (Live Patch 8 for SLE 15 SP4) | больше 3 лет назад | ||
| SUSE-SU-2023:2697-1 Security update for the Linux Kernel RT (Live Patch 3 for SLE 15 SP4) | больше 3 лет назад | ||
| SUSE-SU-2023:2687-1 Security update for the Linux Kernel (Live Patch 40 for SLE 15 SP1) | больше 3 лет назад | ||
| SUSE-SU-2023:2743-1 Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP4) | больше 3 лет назад | ||
| SUSE-SU-2023:2735-1 Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP4) | больше 3 лет назад | ||
| SUSE-SU-2023:2721-1 Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP4) | больше 3 лет назад | ||
| SUSE-SU-2023:2719-1 Security update for the Linux Kernel (Live Patch 39 for SLE 12 SP5) | больше 3 лет назад | ||
| SUSE-SU-2023:2689-1 Security update for the Linux Kernel (Live Patch 41 for SLE 12 SP5) | больше 3 лет назад | ||
| SUSE-SU-2023:2681-1 Security update for the Linux Kernel (Live Patch 37 for SLE 15 SP1) | больше 3 лет назад | ||
| SUSE-SU-2023:2680-1 Security update for the Linux Kernel RT (Live Patch 2 for SLE 15 SP4) | больше 3 лет назад | ||
| GHSA-jrgc-m5wf-7pch A heap out-of-bounds read/write vulnerability in the Linux Kernel traffic control (QoS) subsystem can be exploited to achieve local privilege escalation. The qfq_change_class function does not properly limit the lmax variable which can lead to out-of-bounds read/write. If the TCA_QFQ_LMAX value is not offered through nlattr, lmax is determined by the MTU value of the network device. The MTU of the loopback device can be set up to 2^31-1 and as a result, it is possible to have an lmax value that exceeds QFQ_MIN_LMAX. We recommend upgrading past commit 3037933448f60f9acb705997eae62013ecb81e0d. | CVSS3: 7.8 | больше 3 лет назад | |
| SUSE-SU-2023:2755-1 Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP4) | больше 3 лет назад | ||
| SUSE-SU-2023:2724-1 Security update for the Linux Kernel (Live Patch 28 for SLE 15 SP3) | больше 3 лет назад | ||
| SUSE-SU-2023:2718-1 Security update for the Linux Kernel (Live Patch 34 for SLE 12 SP5) | больше 3 лет назад |
Уязвимостей на страницу