Linux Luki w zabezpieczeniach

Oś czasu

Rodzaj

Produkt

Linux Kernel3012
Linux Foundation Xen122
Linux Foundation ONOS8
Linux Foundation cups-filters5
Linux Foundation xen5

Przeciwdziałanie

Official Fix2676
Temporary Fix0
Workaround15
Unavailable13
Not Defined484

Wykorzystywanie

High20
Functional3
Proof-of-Concept521
Unproven229
Not Defined2415

Wektor dostępu

Not Defined0
Physical59
Local1842
Adjacent411
Network876

Uwierzytelnianie

Not Defined0
High40
Low1349
None1799

Interakcja z użytkownikiem

Not Defined0
Required64
None3124

C3BM Index

CVSSv3 Base

≤10
≤20
≤324
≤4419
≤5377
≤6735
≤7877
≤8407
≤9227
≤10122

CVSSv3 Temp

≤10
≤20
≤340
≤4432
≤5476
≤6970
≤7657
≤8355
≤9202
≤1056

VulDB

≤10
≤21
≤356
≤4635
≤5215
≤6906
≤7592
≤8433
≤9196
≤10154

NVD

≤10
≤20
≤39
≤425
≤5129
≤6450
≤7165
≤8502
≤931
≤1051

CNA

≤10
≤20
≤35
≤411
≤58
≤617
≤79
≤815
≤90
≤101

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤61
≤70
≤80
≤90
≤100

Exploit 0-day

<1k31
<2k100
<5k858
<10k1176
<25k831
<50k187
<100k4
≥100k1

Wykorzystaj dzisiaj

<1k2471
<2k194
<5k303
<10k161
<25k59
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

🔴 CTI Zajęcia

Affected Products (30): Board-TNK (1), CPU (1), DeepOfix (1), Enterprise Server (1), Heartbeat (2), Kernel (3012), LibThai (1), MySQL (1), MySQLDatabase Admin Tool (1), News-TNK (1), Nslookup (1), OCF Resource Agents (1), ONOS (8), ONOS SDN Controller (1), Sblim-sfcb (2), Traceroute Script (1), UMIP (2), XEN (1), Xen (122), Xen Elf Parser (3), cups-filters (5), foomatic (1), heartbeat (2), libvchan (1), nfs-utils (3), php Download Manager (1), php User Base (1), sblim-sfcb (4), xen (5), zephyr (1)

Link to Vendor Website: https://www.kernel.org/

OpublikowanoBaseTempSłaby punktProdWykPrzCTIEPSSCVE
2023-04-227.57.2Linux Kernel smb2_is_status_io_timeout memory corruptionOperating SystemNot DefinedNot Defined1.100.00000CVE-2023-1192
2023-04-225.35.1Linux Kernel Bluetooth Subsystem hci_sock.c create_monitor_ctrl_open privilege escalationOperating SystemNot DefinedOfficial Fix0.940.00000CVE-2023-2002
2023-04-223.33.2Linux Kernel XFS Subsystem information disclosureOperating SystemNot DefinedOfficial Fix1.51-0.00000CVE-2023-2124
2023-04-224.44.2Linux Kernel base.c information disclosureOperating SystemProof-of-ConceptOfficial Fix0.63-0.00042CVE-2011-4915
2023-04-215.35.2Linux Kernel systrace Policy race conditionOperating SystemNot DefinedOfficial Fix0.160.00106CVE-2007-4774
2023-04-215.35.1Linux Kernel Spectre Mitigation bugs.c spectre_v2_user_select_mitigation Local Privilege EscalationOperating SystemNot DefinedOfficial Fix0.470.00082CVE-2023-1998
2023-04-215.55.3Linux Kernel SCTP Network Protocol stream_sched.c denial of serviceOperating SystemNot DefinedOfficial Fix0.320.00042CVE-2023-2177
2023-04-217.87.5Linux Kernel RDMA cma.c compare_netdev_and_ip information disclosureOperating SystemNot DefinedOfficial Fix0.460.00042CVE-2023-2176
2023-04-217.87.5Linux Kernel i2c i2c-xgene-slimpro.c slimpro_i2c_blkwr memory corruptionOperating SystemNot DefinedOfficial Fix0.120.00042CVE-2023-2194
2023-04-205.55.3Linux Kernel CAN Frame af_can.c denial of serviceOperating SystemNot DefinedOfficial Fix0.350.00042CVE-2023-2166
2023-04-203.53.5Linux Kernel SCSI Sub-Component iscsi_tcp.c iscsi_sw_tcp_session_create memory corruptionOperating SystemNot DefinedNot Defined0.070.00050CVE-2023-2162
2023-04-163.83.7Linux Kernel Device da9150-charger.c da9150_charger_remove memory corruptionOperating SystemNot DefinedOfficial Fix0.050.00053CVE-2023-30772
2023-04-144.54.3Linux Kernel trans_xen.c xen_9pfs_front_removet memory corruptionOperating SystemNot DefinedOfficial Fix0.080.00000CVE-2023-1859
2023-04-146.76.4Linux Kernel udmabuf udmabuf.c udmabuf_vm_fault memory corruptionOperating SystemNot DefinedOfficial Fix0.000.00050CVE-2023-2008
2023-04-147.06.7Linux Kernel RxRPC race conditionOperating SystemNot DefinedOfficial Fix0.040.00000CVE-2023-2006
2023-04-144.13.9Linux Kernel netdevsim fib.c denial of serviceOperating SystemNot DefinedOfficial Fix0.000.00000CVE-2023-2019
2023-04-142.32.2Linux Kernel DPT I2O Controller race conditionOperating SystemNot DefinedOfficial Fix0.040.00000CVE-2023-2007
2023-04-133.53.4Linux Kernel az6027 Driver az6027.c az6027_i2c_xfer denial of serviceOperating SystemNot DefinedOfficial Fix0.030.00042CVE-2023-28328
2023-04-134.84.6Linux Kernel ndlc.c ndlc_remove memory corruptionOperating SystemNot DefinedOfficial Fix0.030.00043CVE-2023-1990
2023-04-127.87.6Linux Kernel io_uring Subsystem io_uring.c memory corruptionOperating SystemNot DefinedOfficial Fix0.120.00042CVE-2023-1872
2023-04-127.87.5Linux Kernel Traffic Control Index Filter tcindex_delete memory corruptionOperating SystemNot DefinedOfficial Fix0.060.00042CVE-2023-1829
2023-04-124.64.4Linux Kernel btsdio.c btsdio_remove memory corruptionOperating SystemNot DefinedOfficial Fix0.000.00043CVE-2023-1989
2023-04-105.55.3Linux Kernel nVMX nested.c nested_vmx_check_guest_state Privilege EscalationOperating SystemNot DefinedOfficial Fix0.060.00043CVE-2023-30456
2023-04-064.54.5Linux Kernel xgene-hwmon.c xgene_hwmon_remove memory corruptionOperating SystemNot DefinedNot Defined0.000.00042CVE-2023-1855
2023-04-064.74.7Linux Kernel Memory Management Sub-Component task_mmu.c race conditionOperating SystemNot DefinedNot Defined0.100.00042CVE-2023-1582
2023-04-065.35.1Linux Kernel net.c vhost_net_set_backend memory corruptionOperating SystemNot DefinedOfficial Fix0.000.00042CVE-2023-1838
2023-04-045.75.5Linux Kernel diag.c denial of serviceOperating SystemNot DefinedOfficial Fix0.240.00042CVE-2023-28327
2023-04-044.64.4Linux Kernel IORING_OP_SOCKET io_uring memory corruptionOperating SystemNot DefinedOfficial Fix0.030.00000CVE-2023-1032
2023-04-045.95.8Linux Kernel btrfs ctree.c btrfs_search_slot memory corruptionOperating SystemNot DefinedOfficial Fix0.040.00042CVE-2023-1611
2023-03-316.56.4Linux Kernel hci_conn.c hci_conn_cleanup memory corruptionOperating SystemNot DefinedOfficial Fix0.200.00042CVE-2023-28464
2023-03-316.56.4Linux Kernel Xircom 16-bit PCMCIA Ethernet Driver xirc2ps_cs.c xirc2ps_detach memory corruptionOperating SystemNot DefinedOfficial Fix0.250.00042CVE-2023-1670
2023-03-316.56.4Linux Kernel TUN TAP Device Driver tun.c register_netdevice memory corruptionOperating SystemNot DefinedOfficial Fix0.030.00042CVE-2022-4744
2023-03-306.26.1Linux Kernel NFS Filesystem nfs4proc.c nfsd4_ssc_setup_dul memory corruptionOperating SystemNot DefinedOfficial Fix0.200.00042CVE-2023-1652
2023-03-284.44.3Linux Kernel Speculative Execution cpu.c pm_cpu_check information disclosureOperating SystemNot DefinedOfficial Fix0.390.00042CVE-2023-1637
2023-03-282.82.8Linux Kernel RDMA over Infiniband rdma_cm ib_copy_ah_attr_to_user information disclosureOperating SystemNot DefinedOfficial Fix0.060.00043CVE-2021-3923
2023-03-285.35.2Linux Kernel cfg80211.c brcmf_get_assoc_ies information disclosureOperating SystemNot DefinedOfficial Fix0.050.00042CVE-2023-1380
2023-03-285.45.3Linux Kernel USB Device hid-asus.c asus_kbd_backlight_set memory corruptionOperating SystemNot DefinedOfficial Fix0.030.00053CVE-2023-1079
2023-03-273.53.4Linux Kernel Cache topsrv.c tipc_conn_close denial of serviceOperating SystemNot DefinedOfficial Fix0.030.00043CVE-2023-1382
2023-03-276.05.9Linux Kernel HID Device hid-core.c hid_validate_values privilege escalationOperating SystemNot DefinedOfficial Fix0.080.00042CVE-2023-1073
2023-03-274.44.3Linux Kernel hci_sync.c information disclosureOperating SystemNot DefinedOfficial Fix0.060.00052CVE-2023-28866
2023-03-255.55.4Linux Kernel io_uring Subsystem filetable.c io_file_bitmap_get denial of serviceOperating SystemNot DefinedOfficial Fix0.250.00043CVE-2023-1583
2023-03-245.65.5Linux Kernel Nested Netlink Policy nlattr.c denial of serviceOperating SystemNot DefinedOfficial Fix0.110.00043CVE-2020-36691
2023-03-243.33.2Linux Kernel KVM x86.c kvm_vcpu_ioctl_x86_get_debugregs information disclosureOperating SystemNot DefinedOfficial Fix0.310.00045CVE-2023-1513
2023-03-245.55.4Linux Kernel Core Dump Subsystem fill_files_note memory corruptionOperating SystemNot DefinedOfficial Fix0.030.00042CVE-2023-1249
2023-03-236.66.5Linux Kernel seq_buf.c seq_buf_putmem_hex memory corruptionOperating SystemNot DefinedOfficial Fix0.000.00042CVE-2023-28772
2023-03-236.56.4Linux Kernel OverlayFS Subsystem copy_up.c ovl_copy_up_one Local Privilege EscalationOperating SystemNot DefinedOfficial Fix0.030.00042CVE-2023-0386
2023-03-225.35.1Linux Kernel rtl8712_cmd.c cmd_hdl_filter memory corruptionOperating SystemNot DefinedOfficial Fix0.000.00042CVE-2022-4095
2023-03-227.87.6Linux Kernel tcindex tcf_exts_exec memory corruptionOperating SystemNot DefinedOfficial Fix0.000.00042CVE-2023-1281
2023-03-197.06.9Linux Kernel Metadata inode.c ntfs_read_mft memory corruptionOperating SystemNot DefinedOfficial Fix0.000.00042CVE-2022-48425
2023-03-196.66.5Linux Kernel Attribute Name inode.c memory corruptionOperating SystemNot DefinedOfficial Fix0.230.00043CVE-2022-48424

3138 więcej wpisów nie jest pokazywanych

Do you need the next level of professionalism?

Upgrade your account now!