LI
Product
Linux
On CISA KEVExploited in the wild
230
CVEs
8
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 22High 73Medium 62Low 4
Watch
Add Linux to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-4913 | 7.8 | May 23 | The get_rock_ridge_filename function in fs/isofs/rock.c in the Linux kernel before 4.5.5 mishandles NM (aka alternate name) entries containing \0 characters, which allows local… Affected: 6 |
| CVE-2016-4805 | 7.8 | May 23 | Use-after-free vulnerability in drivers/net/ppp/ppp_generic.c in the Linux kernel before 4.5.2 allows local users to cause a denial of service (memory corruption and system crash,… Affected: 6 |
| CVE-2016-2143 | 7.8 | Apr 27 | The fork implementation in the Linux kernel before 4.5 on s390 platforms mishandles the case of four page-table levels, which allows local users to cause a denial of service… Affected: 7 |
| CVE-2018-17962 | 7.5 | Oct 9 | Qemu has a Buffer Overflow in pcnet_receive in hw/net/pcnet.c because an incorrect integer data type is used Affected: 7 |
| CVE-2015-7701 | 7.5 | Aug 7 | Memory leak in the CRYPTO_ASSOC function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (memory consumption) Affected: 6 |
| CVE-2015-7692 | 7.5 | Aug 7 | The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) Affected: 6 |
| CVE-2015-7691 | 7.5 | Aug 7 | The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted packets containing… Affected: 6 |
| CVE-2015-7703 | 7.5 | Jul 24 | The "pidfile" or "driftfile" directives in NTP ntpd 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77, when ntpd is configured to allow remote configuration, allows remote attackers… Affected: 6 |
| CVE-2015-5219 | 7.5 | Jul 21 | The ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions from a precision value to a double, which allows remote attackers to cause a… Affected: 6 |
| CVE-2016-7039 | 7.5 | Oct 16 | The IP stack in the Linux kernel through 4.8.2 allows remote attackers to cause a denial of service (stack consumption and panic) or possibly have unspecified other impact by… Affected: 6; 7 |
| CVE-2016-2776 | 7.5 | Sep 28 | buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause… Affected: 5.0; 6; 7 |
| CVE-2016-5418 | 7.5 | Sep 21 | The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non-zero data size, which might allow remote attackers to write to arbitrary files via a… Affected: 6; 7 |
| CVE-2016-4809 | 7.5 | Sep 21 | The archive_read_format_cpio_read_header function in archive_read_support_format_cpio.c in libarchive before 3.2.1 allows remote attackers to cause a denial of service… Affected: 6; 7 |
| CVE-2016-6302 | 7.5 | Sep 16 | The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the HMAC size during validation of the ticket length, which allows remote attackers to… Affected: 6; 7 |
| CVE-2016-2181 | 7.5 | Sep 16 | The Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use of a new epoch number in conjunction with a large sequence number, which allows… Affected: 6; 7 |
| CVE-2016-2179 | 7.5 | Sep 16 | The DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue entries associated with unused out-of-order messages, which allows remote… Affected: 6; 7 |
| CVE-2016-2180 | 7.5 | Aug 1 | The TS_OBJ_print_bio function in crypto/ts/ts_lib.c in the X.509 Public Key Infrastructure Time-Stamp Protocol (TSP) implementation in OpenSSL through 1.0.2h allows remote… Affected: 6; 7 |
| CVE-2016-4556 | 7.5 | May 10 | Double free vulnerability in Esi.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service (crash) via a crafted Edge Side Includes… Affected: 6; 7 |
| CVE-2016-4555 | 7.5 | May 10 | client_side_request.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to cause a denial of service (crash) via crafted Edge Side Includes (ESI) responses Affected: 6; 7 |
| CVE-2015-3276 | 7.5 | Dec 7 | The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse OpenSSL-style multi-keyword mode cipher strings, which might cause a weaker than… Affected: 7 |
| CVE-2014-3687 | 7.5 | Nov 10 | The sctp_assoc_lookup_asconf_ack function in net/sctp/associola.c in the SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of… Affected: 5; 6; 7 |
| CVE-2014-3673 | 7.5 | Nov 10 | The SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (system crash) via a malformed ASCONF chunk, related to… Affected: 5; 6; 7 |
| CVE-2016-4998 | 7.1 | Jul 3 | The IPT_SO_SET_REPLACE setsockopt implementation in the netfilter subsystem in the Linux kernel before 4.6 allows local users to cause a denial of service (out-of-bounds read) or… Affected: 7 |