Поиск уязвимостей
Количество 14
Количество 14
CVE-2019-18282
The flow_dissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device tracking vulnerability, aka CID-55667441c84f. This occurs because the auto flowlabel of a UDP IPv6 packet relies on a 32-bit hashrnd value as a secret, and because jhash (instead of siphash) is used. The hashrnd value remains the same starting from boot time, and can be inferred by an attacker. This affects net/core/flow_dissector.c and related code.
CVE-2019-18282
The flow_dissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device tracking vulnerability, aka CID-55667441c84f. This occurs because the auto flowlabel of a UDP IPv6 packet relies on a 32-bit hashrnd value as a secret, and because jhash (instead of siphash) is used. The hashrnd value remains the same starting from boot time, and can be inferred by an attacker. This affects net/core/flow_dissector.c and related code.
CVE-2019-18282
The flow_dissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device tracking vulnerability, aka CID-55667441c84f. This occurs because the auto flowlabel of a UDP IPv6 packet relies on a 32-bit hashrnd value as a secret, and because jhash (instead of siphash) is used. The hashrnd value remains the same starting from boot time, and can be inferred by an attacker. This affects net/core/flow_dissector.c and related code.
CVE-2019-18282
The flow_dissector feature in the Linux kernel 4.3 through 5.x before ...
GHSA-gc9j-xjc6-h7v6
The flow_dissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device tracking vulnerability, aka CID-55667441c84f. This occurs because the auto flowlabel of a UDP IPv6 packet relies on a 32-bit hashmd value as a secret, and because jhash (instead of siphash) is used. The hashmd value remains the same starting from boot time, and can be inferred by an attacker. This affects net/core/flow_dissector.c and related code.
BDU:2020-00362
Уязвимость функции flow_dissector ядра операционных систем Linux, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
ELSA-2020-5437
ELSA-2020-5437: kernel security and bug fix update (IMPORTANT)
ELSA-2020-5715
ELSA-2020-5715: Unbreakable Enterprise kernel security update (IMPORTANT)
ALT-PU-2019-3131
ALT-PU-2019-3131: package `kernel-image-un-def` update to version 5.3.11-alt1
ALT-PU-2019-3184
ALT-PU-2019-3184: package `kernel-image-mp` update to version 5.3.12-alt1
ALT-PU-2020-1421
ALT-PU-2020-1421: package `kernel-image-rpi-un` update to version 5.5.5-alt0.2
ALT-PU-2020-1198
ALT-PU-2020-1198: package `kernel-image-std-def` update to version 5.4.17-alt1
ALT-PU-2020-2410
ALT-PU-2020-2410: package `kernel-image-rpi-def` update to version 5.4.51-alt1
ALT-PU-2021-1870
ALT-PU-2021-1870: package `kernel-image-rt` update to version 5.10.35-alt1.rt39
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2019-18282 The flow_dissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device tracking vulnerability, aka CID-55667441c84f. This occurs because the auto flowlabel of a UDP IPv6 packet relies on a 32-bit hashrnd value as a secret, and because jhash (instead of siphash) is used. The hashrnd value remains the same starting from boot time, and can be inferred by an attacker. This affects net/core/flow_dissector.c and related code. | CVSS3: 5.3 | 3% Низкий | почти 7 лет назад |
 | CVE-2019-18282 The flow_dissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device tracking vulnerability, aka CID-55667441c84f. This occurs because the auto flowlabel of a UDP IPv6 packet relies on a 32-bit hashrnd value as a secret, and because jhash (instead of siphash) is used. The hashrnd value remains the same starting from boot time, and can be inferred by an attacker. This affects net/core/flow_dissector.c and related code. | CVSS3: 5.3 | 3% Низкий | около 7 лет назад |
 | CVE-2019-18282 The flow_dissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device tracking vulnerability, aka CID-55667441c84f. This occurs because the auto flowlabel of a UDP IPv6 packet relies on a 32-bit hashrnd value as a secret, and because jhash (instead of siphash) is used. The hashrnd value remains the same starting from boot time, and can be inferred by an attacker. This affects net/core/flow_dissector.c and related code. | CVSS3: 5.3 | 3% Низкий | почти 7 лет назад |
| CVE-2019-18282 The flow_dissector feature in the Linux kernel 4.3 through 5.x before ... | CVSS3: 5.3 | 3% Низкий | почти 7 лет назад |
| GHSA-gc9j-xjc6-h7v6 The flow_dissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device tracking vulnerability, aka CID-55667441c84f. This occurs because the auto flowlabel of a UDP IPv6 packet relies on a 32-bit hashmd value as a secret, and because jhash (instead of siphash) is used. The hashmd value remains the same starting from boot time, and can be inferred by an attacker. This affects net/core/flow_dissector.c and related code. | CVSS3: 5.3 | 3% Низкий | больше 4 лет назад |
 | BDU:2020-00362 Уязвимость функции flow_dissector ядра операционных систем Linux, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 5.3 | 3% Низкий | около 7 лет назад |
| ELSA-2020-5437 ELSA-2020-5437: kernel security and bug fix update (IMPORTANT) | почти 6 лет назад | ||
| ELSA-2020-5715 ELSA-2020-5715: Unbreakable Enterprise kernel security update (IMPORTANT) | больше 6 лет назад | ||
| ALT-PU-2019-3131 ALT-PU-2019-3131: package `kernel-image-un-def` update to version 5.3.11-alt1 | CVSS3: 7.8 | почти 7 лет назад | |
| ALT-PU-2019-3184 ALT-PU-2019-3184: package `kernel-image-mp` update to version 5.3.12-alt1 | CVSS3: 9.8 | почти 7 лет назад | |
| ALT-PU-2020-1421 ALT-PU-2020-1421: package `kernel-image-rpi-un` update to version 5.5.5-alt0.2 | CVSS3: 9.8 | больше 6 лет назад | |
| ALT-PU-2020-1198 ALT-PU-2020-1198: package `kernel-image-std-def` update to version 5.4.17-alt1 | CVSS3: 9.8 | больше 6 лет назад | |
| ALT-PU-2020-2410 ALT-PU-2020-2410: package `kernel-image-rpi-def` update to version 5.4.51-alt1 | CVSS3: 9.8 | больше 6 лет назад | |
| ALT-PU-2021-1870 ALT-PU-2021-1870: package `kernel-image-rt` update to version 5.10.35-alt1.rt39 | CVSS3: 9.8 | больше 5 лет назад |
Уязвимостей на страницу