Debian

Debian 8 (jessie)

428 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
  • EPSS 4.11%
  • Veröffentlicht 27.05.2015 10:59:07
  • Zuletzt bearbeitet 06.05.2026 22:30:45

The __driver_rfc4106_decrypt function in arch/x86/crypto/aesni-intel_glue.c in the Linux kernel before 3.19.3 does not properly determine the memory locations used for encrypted data, which allows context-dependent attackers to cause a denial of serv...

  • EPSS 0.04%
  • Veröffentlicht 27.05.2015 10:59:06
  • Zuletzt bearbeitet 06.05.2026 22:30:45

arch/x86/kernel/entry_64.S in the Linux kernel before 3.19.2 does not prevent the TS_COMPAT flag from reaching a user-mode task, which might allow local users to bypass the seccomp or audit protection mechanism via a crafted application that uses the...

Exploit
  • EPSS 1.72%
  • Veröffentlicht 27.05.2015 10:59:06
  • Zuletzt bearbeitet 06.05.2026 22:30:45

The ndisc_router_discovery function in net/ipv6/ndisc.c in the Neighbor Discovery (ND) protocol implementation in the IPv6 stack in the Linux kernel before 3.19.6 allows remote attackers to reconfigure a hop-limit setting via a small hop_limit value ...

  • EPSS 0.04%
  • Veröffentlicht 27.05.2015 10:59:02
  • Zuletzt bearbeitet 06.05.2026 22:30:45

include/net/netfilter/nf_conntrack_extend.h in the netfilter subsystem in the Linux kernel before 3.14.5 uses an insufficiently large data type for certain extension data, which allows local users to cause a denial of service (NULL pointer dereferenc...

  • EPSS 0.06%
  • Veröffentlicht 21.04.2015 10:59:02
  • Zuletzt bearbeitet 06.05.2026 22:30:45

net/rds/sysctl.c in the Linux kernel before 3.19 uses an incorrect data type in a sysctl table, which allows local users to obtain potentially sensitive information from kernel memory or possibly have unspecified other impact by accessing a sysctl en...

  • EPSS 0.07%
  • Veröffentlicht 21.04.2015 10:59:01
  • Zuletzt bearbeitet 06.05.2026 22:30:45

net/llc/sysctl_net_llc.c in the Linux kernel before 3.19 uses an incorrect data type in a sysctl table, which allows local users to obtain potentially sensitive information from kernel memory or possibly have unspecified other impact by accessing a s...

  • EPSS 0.14%
  • Veröffentlicht 16.03.2015 10:59:01
  • Zuletzt bearbeitet 06.05.2026 22:30:45

The InfiniBand (IB) implementation in the Linux kernel package before 2.6.32-504.12.2 on Red Hat Enterprise Linux (RHEL) 6 does not properly restrict use of User Verbs for registration of memory regions, which allows local users to access arbitrary p...

  • EPSS 0.11%
  • Veröffentlicht 12.03.2015 14:59:02
  • Zuletzt bearbeitet 06.05.2026 22:30:45

Xen 3.3.x through 4.5.x and the Linux kernel through 3.19.1 do not properly restrict access to PCI command registers, which might allow local guest OS users to cause a denial of service (non-maskable interrupt and host crash) by disabling the (1) mem...