Поиск уязвимостей
Количество 92
Количество 92
CVE-2017-17807
The KEYS subsystem in the Linux kernel before 4.14.6 omitted an access-control check when adding a key to the current task's "default request-key keyring" via the request_key() system call, allowing a local user to use a sequence of crafted system calls to add keys to a keyring with only Search permission (not Write permission) to that keyring, related to construct_get_dest_keyring() in security/keys/request_key.c.
CVE-2017-17807
The KEYS subsystem in the Linux kernel before 4.14.6 omitted an access-control check when adding a key to the current task's "default request-key keyring" via the request_key() system call, allowing a local user to use a sequence of crafted system calls to add keys to a keyring with only Search permission (not Write permission) to that keyring, related to construct_get_dest_keyring() in security/keys/request_key.c.
CVE-2017-17807
The KEYS subsystem in the Linux kernel before 4.14.6 omitted an access ...
ELSA-2018-2390
ELSA-2018-2390: kernel security and bug fix update (IMPORTANT)
CVE-2017-17558
The usb_destroy_configuration function in drivers/usb/core/config.c in the USB core subsystem in the Linux kernel through 4.14.5 does not consider the maximum number of configurations and interfaces before attempting to release resources, which allows local users to cause a denial of service (out-of-bounds write access) or possibly have unspecified other impact via a crafted USB device.
CVE-2017-17558
The usb_destroy_configuration function in drivers/usb/core/config.c in the USB core subsystem in the Linux kernel through 4.14.5 does not consider the maximum number of configurations and interfaces before attempting to release resources, which allows local users to cause a denial of service (out-of-bounds write access) or possibly have unspecified other impact via a crafted USB device.
CVE-2017-17558
The usb_destroy_configuration function in drivers/usb/core/config.c in the USB core subsystem in the Linux kernel through 4.14.5 does not consider the maximum number of configurations and interfaces before attempting to release resources, which allows local users to cause a denial of service (out-of-bounds write access) or possibly have unspecified other impact via a crafted USB device.
CVE-2017-17558
The usb_destroy_configuration function in drivers/usb/core/config.c in ...
SUSE-SU-2018:1221-1
Security update for the Linux Kernel
SUSE-SU-2018:1220-1
Security update for the Linux Kernel
GHSA-vfg5-pf24-9v2v
The KEYS subsystem in the Linux kernel before 4.14.6 omitted an access-control check when adding a key to the current task's "default request-key keyring" via the request_key() system call, allowing a local user to use a sequence of crafted system calls to add keys to a keyring with only Search permission (not Write permission) to that keyring, related to construct_get_dest_keyring() in security/keys/request_key.c.
SUSE-SU-2018:1309-1
Security update for the Linux Kernel
SUSE-SU-2018:1080-1
Security update for the Linux Kernel
GHSA-pjjf-q5j5-prhg
The usb_destroy_configuration function in drivers/usb/core/config.c in the USB core subsystem in the Linux kernel through 4.14.5 does not consider the maximum number of configurations and interfaces before attempting to release resources, which allows local users to cause a denial of service (out-of-bounds write access) or possibly have unspecified other impact via a crafted USB device.
SUSE-SU-2018:1172-1
Security update for the Linux Kernel
SUSE-SU-2018:3869-1
Security update for the Linux RT Kernel
SUSE-SU-2018:3746-1
Security update for the Linux Kernel
ELSA-2018-3083
ELSA-2018-3083: kernel security, bug fix, and enhancement update (IMPORTANT)
SUSE-SU-2019:13937-1
Security update for the Linux Kernel
ELSA-2019-4576
ELSA-2019-4576: Unbreakable Enterprise kernel security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2017-17807 The KEYS subsystem in the Linux kernel before 4.14.6 omitted an access-control check when adding a key to the current task's "default request-key keyring" via the request_key() system call, allowing a local user to use a sequence of crafted system calls to add keys to a keyring with only Search permission (not Write permission) to that keyring, related to construct_get_dest_keyring() in security/keys/request_key.c. | CVSS3: 3.3 | 0% Низкий | почти 9 лет назад |
 | CVE-2017-17807 The KEYS subsystem in the Linux kernel before 4.14.6 omitted an access-control check when adding a key to the current task's "default request-key keyring" via the request_key() system call, allowing a local user to use a sequence of crafted system calls to add keys to a keyring with only Search permission (not Write permission) to that keyring, related to construct_get_dest_keyring() in security/keys/request_key.c. | CVSS3: 3.3 | 0% Низкий | почти 9 лет назад |
| CVE-2017-17807 The KEYS subsystem in the Linux kernel before 4.14.6 omitted an access ... | CVSS3: 3.3 | 0% Низкий | почти 9 лет назад |
| ELSA-2018-2390 ELSA-2018-2390: kernel security and bug fix update (IMPORTANT) | около 8 лет назад | ||
 | CVE-2017-17558 The usb_destroy_configuration function in drivers/usb/core/config.c in the USB core subsystem in the Linux kernel through 4.14.5 does not consider the maximum number of configurations and interfaces before attempting to release resources, which allows local users to cause a denial of service (out-of-bounds write access) or possibly have unspecified other impact via a crafted USB device. | CVSS3: 6.6 | 0% Низкий | почти 9 лет назад |
| CVE-2017-17558 The usb_destroy_configuration function in drivers/usb/core/config.c in the USB core subsystem in the Linux kernel through 4.14.5 does not consider the maximum number of configurations and interfaces before attempting to release resources, which allows local users to cause a denial of service (out-of-bounds write access) or possibly have unspecified other impact via a crafted USB device. | CVSS3: 6.4 | 0% Низкий | почти 9 лет назад |
| CVE-2017-17558 The usb_destroy_configuration function in drivers/usb/core/config.c in the USB core subsystem in the Linux kernel through 4.14.5 does not consider the maximum number of configurations and interfaces before attempting to release resources, which allows local users to cause a denial of service (out-of-bounds write access) or possibly have unspecified other impact via a crafted USB device. | CVSS3: 6.6 | 0% Низкий | почти 9 лет назад |
| CVE-2017-17558 The usb_destroy_configuration function in drivers/usb/core/config.c in ... | CVSS3: 6.6 | 0% Низкий | почти 9 лет назад |
 | SUSE-SU-2018:1221-1 Security update for the Linux Kernel | больше 8 лет назад | ||
| SUSE-SU-2018:1220-1 Security update for the Linux Kernel | больше 8 лет назад | ||
| GHSA-vfg5-pf24-9v2v The KEYS subsystem in the Linux kernel before 4.14.6 omitted an access-control check when adding a key to the current task's "default request-key keyring" via the request_key() system call, allowing a local user to use a sequence of crafted system calls to add keys to a keyring with only Search permission (not Write permission) to that keyring, related to construct_get_dest_keyring() in security/keys/request_key.c. | CVSS3: 3.3 | 0% Низкий | больше 4 лет назад |
| SUSE-SU-2018:1309-1 Security update for the Linux Kernel | больше 8 лет назад | ||
| SUSE-SU-2018:1080-1 Security update for the Linux Kernel | больше 8 лет назад | ||
| GHSA-pjjf-q5j5-prhg The usb_destroy_configuration function in drivers/usb/core/config.c in the USB core subsystem in the Linux kernel through 4.14.5 does not consider the maximum number of configurations and interfaces before attempting to release resources, which allows local users to cause a denial of service (out-of-bounds write access) or possibly have unspecified other impact via a crafted USB device. | CVSS3: 6.6 | 0% Низкий | больше 4 лет назад |
| SUSE-SU-2018:1172-1 Security update for the Linux Kernel | больше 8 лет назад | ||
| SUSE-SU-2018:3869-1 Security update for the Linux RT Kernel | почти 8 лет назад | ||
| SUSE-SU-2018:3746-1 Security update for the Linux Kernel | почти 8 лет назад | ||
| ELSA-2018-3083 ELSA-2018-3083: kernel security, bug fix, and enhancement update (IMPORTANT) | около 8 лет назад | ||
| SUSE-SU-2019:13937-1 Security update for the Linux Kernel | почти 8 лет назад | ||
| ELSA-2019-4576 ELSA-2019-4576: Unbreakable Enterprise kernel security update (IMPORTANT) | больше 7 лет назад |
Уязвимостей на страницу