Логотип exploitDog
bind:"CVE-2021-27365" OR bind:"CVE-2021-27364" OR bind:"CVE-2021-28038" OR bind:"CVE-2021-27363"
Консоль
Логотип exploitDog

exploitDog

bind:"CVE-2021-27365" OR bind:"CVE-2021-27364" OR bind:"CVE-2021-28038" OR bind:"CVE-2021-27363"

Количество 67

Количество 67

fstec логотип

BDU:2021-01666

больше 4 лет назад

(ДУБЛИКАТ)Уязвимость подсистемы iSCSI ядра операционных систем Linux, позволяющая нарушителю нарушить конфиденциальность, целостность и доступность данных

CVSS3: 7.8
EPSS: Низкий
fstec логотип

BDU:2021-01218

больше 4 лет назад

Уязвимость функции show_transport_handle ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

CVSS3: 7.3
EPSS: Низкий
redos логотип

ROS-20220919-01

почти 3 года назад

Множественные уязвимости ядра ОС

EPSS: Низкий
ubuntu логотип

CVE-2021-27364

больше 4 лет назад

An issue was discovered in the Linux kernel through 5.11.3. drivers/scsi/scsi_transport_iscsi.c is adversely affected by the ability of an unprivileged user to craft Netlink messages.

CVSS3: 7.1
EPSS: Низкий
redhat логотип

CVE-2021-27364

больше 4 лет назад

An issue was discovered in the Linux kernel through 5.11.3. drivers/scsi/scsi_transport_iscsi.c is adversely affected by the ability of an unprivileged user to craft Netlink messages.

CVSS3: 7.1
EPSS: Низкий
nvd логотип

CVE-2021-27364

больше 4 лет назад

An issue was discovered in the Linux kernel through 5.11.3. drivers/scsi/scsi_transport_iscsi.c is adversely affected by the ability of an unprivileged user to craft Netlink messages.

CVSS3: 7.1
EPSS: Низкий
msrc логотип

CVE-2021-27364

больше 4 лет назад

CVSS3: 7.1
EPSS: Низкий
debian логотип

CVE-2021-27364

больше 4 лет назад

An issue was discovered in the Linux kernel through 5.11.3. drivers/sc ...

CVSS3: 7.1
EPSS: Низкий
github логотип

GHSA-qh7p-rxx9-vwx2

около 3 лет назад

An issue was discovered in the Linux kernel through 5.11.3. drivers/scsi/scsi_transport_iscsi.c is adversely affected by the ability of an unprivileged user to craft Netlink messages.

EPSS: Низкий
fstec логотип

BDU:2021-01650

больше 4 лет назад

(ДУБЛИКАТ)Уязвимость подсистемы iSCSI ядра операционных систем Linux, позволяющая нарушителю вызвать отказ в обслуживании или повысить свои привилегии

CVSS3: 7.1
EPSS: Низкий
fstec логотип

BDU:2021-01213

больше 4 лет назад

Уязвимость файла drivers/scsi/scsi_transport_iscsi.c ядра операционной системы Linux, позволяющая нарушителю подключаться к сокету iscsi NETLINK и отправлять команды ядру

CVSS3: 7.1
EPSS: Низкий
ubuntu логотип

CVE-2021-28038

больше 4 лет назад

An issue was discovered in the Linux kernel through 5.11.3, as used with Xen PV. A certain part of the netback driver lacks necessary treatment of errors such as failed memory allocations (as a result of changes to the handling of grant mapping errors). A host OS denial of service may occur during misbehavior of a networking frontend driver. NOTE: this issue exists because of an incomplete fix for CVE-2021-26931.

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2021-28038

больше 4 лет назад

An issue was discovered in the Linux kernel through 5.11.3, as used with Xen PV. A certain part of the netback driver lacks necessary treatment of errors such as failed memory allocations (as a result of changes to the handling of grant mapping errors). A host OS denial of service may occur during misbehavior of a networking frontend driver. NOTE: this issue exists because of an incomplete fix for CVE-2021-26931.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2021-28038

больше 4 лет назад

An issue was discovered in the Linux kernel through 5.11.3, as used wi ...

CVSS3: 6.5
EPSS: Низкий
ubuntu логотип

CVE-2021-27363

больше 4 лет назад

An issue was discovered in the Linux kernel through 5.11.3. A kernel pointer leak can be used to determine the address of the iscsi_transport structure. When an iSCSI transport is registered with the iSCSI subsystem, the transport's handle is available to unprivileged users via the sysfs file system, at /sys/class/iscsi_transport/$TRANSPORT_NAME/handle. When read, the show_transport_handle function (in drivers/scsi/scsi_transport_iscsi.c) is called, which leaks the handle. This handle is actually the pointer to an iscsi_transport struct in the kernel module's global variables.

CVSS3: 4.4
EPSS: Низкий
redhat логотип

CVE-2021-27363

больше 4 лет назад

An issue was discovered in the Linux kernel through 5.11.3. A kernel pointer leak can be used to determine the address of the iscsi_transport structure. When an iSCSI transport is registered with the iSCSI subsystem, the transport's handle is available to unprivileged users via the sysfs file system, at /sys/class/iscsi_transport/$TRANSPORT_NAME/handle. When read, the show_transport_handle function (in drivers/scsi/scsi_transport_iscsi.c) is called, which leaks the handle. This handle is actually the pointer to an iscsi_transport struct in the kernel module's global variables.

CVSS3: 4.4
EPSS: Низкий
nvd логотип

CVE-2021-27363

больше 4 лет назад

An issue was discovered in the Linux kernel through 5.11.3. A kernel pointer leak can be used to determine the address of the iscsi_transport structure. When an iSCSI transport is registered with the iSCSI subsystem, the transport's handle is available to unprivileged users via the sysfs file system, at /sys/class/iscsi_transport/$TRANSPORT_NAME/handle. When read, the show_transport_handle function (in drivers/scsi/scsi_transport_iscsi.c) is called, which leaks the handle. This handle is actually the pointer to an iscsi_transport struct in the kernel module's global variables.

CVSS3: 4.4
EPSS: Низкий
msrc логотип

CVE-2021-27363

больше 4 лет назад

CVSS3: 4.4
EPSS: Низкий
debian логотип

CVE-2021-27363

больше 4 лет назад

An issue was discovered in the Linux kernel through 5.11.3. A kernel p ...

CVSS3: 4.4
EPSS: Низкий
github логотип

GHSA-j7vw-r676-53wr

около 3 лет назад

An issue was discovered in the Linux kernel through 5.11.3, as used with Xen PV. A certain part of the netback driver lacks necessary treatment of errors such as failed memory allocations (as a result of changes to the handling of grant mapping errors). A host OS denial of service may occur during misbehavior of a networking frontend driver. NOTE: this issue exists because of an incomplete fix for CVE-2021-26931.

CVSS3: 6.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
fstec логотип
BDU:2021-01666

(ДУБЛИКАТ)Уязвимость подсистемы iSCSI ядра операционных систем Linux, позволяющая нарушителю нарушить конфиденциальность, целостность и доступность данных

CVSS3: 7.8
0%
Низкий
больше 4 лет назад
fstec логотип
BDU:2021-01218

Уязвимость функции show_transport_handle ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

CVSS3: 7.3
0%
Низкий
больше 4 лет назад
redos логотип
ROS-20220919-01

Множественные уязвимости ядра ОС

почти 3 года назад
ubuntu логотип
CVE-2021-27364

An issue was discovered in the Linux kernel through 5.11.3. drivers/scsi/scsi_transport_iscsi.c is adversely affected by the ability of an unprivileged user to craft Netlink messages.

CVSS3: 7.1
0%
Низкий
больше 4 лет назад
redhat логотип
CVE-2021-27364

An issue was discovered in the Linux kernel through 5.11.3. drivers/scsi/scsi_transport_iscsi.c is adversely affected by the ability of an unprivileged user to craft Netlink messages.

CVSS3: 7.1
0%
Низкий
больше 4 лет назад
nvd логотип
CVE-2021-27364

An issue was discovered in the Linux kernel through 5.11.3. drivers/scsi/scsi_transport_iscsi.c is adversely affected by the ability of an unprivileged user to craft Netlink messages.

CVSS3: 7.1
0%
Низкий
больше 4 лет назад
msrc логотип
CVSS3: 7.1
0%
Низкий
больше 4 лет назад
debian логотип
CVE-2021-27364

An issue was discovered in the Linux kernel through 5.11.3. drivers/sc ...

CVSS3: 7.1
0%
Низкий
больше 4 лет назад
github логотип
GHSA-qh7p-rxx9-vwx2

An issue was discovered in the Linux kernel through 5.11.3. drivers/scsi/scsi_transport_iscsi.c is adversely affected by the ability of an unprivileged user to craft Netlink messages.

0%
Низкий
около 3 лет назад
fstec логотип
BDU:2021-01650

(ДУБЛИКАТ)Уязвимость подсистемы iSCSI ядра операционных систем Linux, позволяющая нарушителю вызвать отказ в обслуживании или повысить свои привилегии

CVSS3: 7.1
0%
Низкий
больше 4 лет назад
fstec логотип
BDU:2021-01213

Уязвимость файла drivers/scsi/scsi_transport_iscsi.c ядра операционной системы Linux, позволяющая нарушителю подключаться к сокету iscsi NETLINK и отправлять команды ядру

CVSS3: 7.1
0%
Низкий
больше 4 лет назад
ubuntu логотип
CVE-2021-28038

An issue was discovered in the Linux kernel through 5.11.3, as used with Xen PV. A certain part of the netback driver lacks necessary treatment of errors such as failed memory allocations (as a result of changes to the handling of grant mapping errors). A host OS denial of service may occur during misbehavior of a networking frontend driver. NOTE: this issue exists because of an incomplete fix for CVE-2021-26931.

CVSS3: 6.5
0%
Низкий
больше 4 лет назад
nvd логотип
CVE-2021-28038

An issue was discovered in the Linux kernel through 5.11.3, as used with Xen PV. A certain part of the netback driver lacks necessary treatment of errors such as failed memory allocations (as a result of changes to the handling of grant mapping errors). A host OS denial of service may occur during misbehavior of a networking frontend driver. NOTE: this issue exists because of an incomplete fix for CVE-2021-26931.

CVSS3: 6.5
0%
Низкий
больше 4 лет назад
debian логотип
CVE-2021-28038

An issue was discovered in the Linux kernel through 5.11.3, as used wi ...

CVSS3: 6.5
0%
Низкий
больше 4 лет назад
ubuntu логотип
CVE-2021-27363

An issue was discovered in the Linux kernel through 5.11.3. A kernel pointer leak can be used to determine the address of the iscsi_transport structure. When an iSCSI transport is registered with the iSCSI subsystem, the transport's handle is available to unprivileged users via the sysfs file system, at /sys/class/iscsi_transport/$TRANSPORT_NAME/handle. When read, the show_transport_handle function (in drivers/scsi/scsi_transport_iscsi.c) is called, which leaks the handle. This handle is actually the pointer to an iscsi_transport struct in the kernel module's global variables.

CVSS3: 4.4
0%
Низкий
больше 4 лет назад
redhat логотип
CVE-2021-27363

An issue was discovered in the Linux kernel through 5.11.3. A kernel pointer leak can be used to determine the address of the iscsi_transport structure. When an iSCSI transport is registered with the iSCSI subsystem, the transport's handle is available to unprivileged users via the sysfs file system, at /sys/class/iscsi_transport/$TRANSPORT_NAME/handle. When read, the show_transport_handle function (in drivers/scsi/scsi_transport_iscsi.c) is called, which leaks the handle. This handle is actually the pointer to an iscsi_transport struct in the kernel module's global variables.

CVSS3: 4.4
0%
Низкий
больше 4 лет назад
nvd логотип
CVE-2021-27363

An issue was discovered in the Linux kernel through 5.11.3. A kernel pointer leak can be used to determine the address of the iscsi_transport structure. When an iSCSI transport is registered with the iSCSI subsystem, the transport's handle is available to unprivileged users via the sysfs file system, at /sys/class/iscsi_transport/$TRANSPORT_NAME/handle. When read, the show_transport_handle function (in drivers/scsi/scsi_transport_iscsi.c) is called, which leaks the handle. This handle is actually the pointer to an iscsi_transport struct in the kernel module's global variables.

CVSS3: 4.4
0%
Низкий
больше 4 лет назад
msrc логотип
CVSS3: 4.4
0%
Низкий
больше 4 лет назад
debian логотип
CVE-2021-27363

An issue was discovered in the Linux kernel through 5.11.3. A kernel p ...

CVSS3: 4.4
0%
Низкий
больше 4 лет назад
github логотип
GHSA-j7vw-r676-53wr

An issue was discovered in the Linux kernel through 5.11.3, as used with Xen PV. A certain part of the netback driver lacks necessary treatment of errors such as failed memory allocations (as a result of changes to the handling of grant mapping errors). A host OS denial of service may occur during misbehavior of a networking frontend driver. NOTE: this issue exists because of an incomplete fix for CVE-2021-26931.

CVSS3: 6.5
0%
Низкий
около 3 лет назад

Уязвимостей на страницу