Linux Foundation 漏洞

时间轴

类型

产品

Linux Foundation Xen124
Linux Foundation ONOS10
Linux Foundation cups-filters4
Linux Foundation XEN2
Linux Foundation zephyr2

修正

Official Fix98
Temporary Fix0
Workaround2
Unavailable2
Not Defined44

易受攻击性

High0
Functional0
Proof-of-Concept10
Unproven26
Not Defined110

访问向量

Not Defined0
Physical0
Local88
Adjacent24
Network34

身份验证

Not Defined0
High2
Low46
None98

用户交互

Not Defined0
Required2
None144

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤424
≤518
≤646
≤732
≤88
≤912
≤106

CVSSv3 Temp

≤10
≤20
≤32
≤426
≤526
≤644
≤726
≤88
≤912
≤102

VulDB

≤10
≤20
≤30
≤424
≤520
≤640
≤736
≤810
≤910
≤106

NVD

≤10
≤20
≤30
≤40
≤56
≤60
≤72
≤80
≤90
≤102

CNA

≤10
≤20
≤30
≤40
≤52
≤60
≤70
≤80
≤90
≤100

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k0
<2k2
<5k28
<10k66
<25k40
<50k10
<100k0
≥100k0

本日攻击

<1k120
<2k2
<5k16
<10k8
<25k0
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Products (10): ONOS (8), ONOS SDN Controller (1), XEN (1), Xen (122), Xen Elf Parser (1), cups-filters (5), foomatic (1), libvchan (1), xen (5), zephyr (1)

Link to Vendor Website: https://www.linuxfoundation.org/

已发布BaseTemp漏洞Prod修正EPSSCTICVE
2021-10-064.34.2Linux Foundation zephyr Key Distribution 拒绝服务未知Not DefinedOfficial Fix0.001020.00CVE-2021-3436
2019-07-228.58.5Linux Foundation ONOS YangLiveCompilerManager.java runJavaCompiler 权限升级未知Not DefinedNot Defined0.004380.00CVE-2019-1010234
2019-07-198.58.4Linux Foundation ONOS SDN Controller YangLiveCompilerManager.java 权限升级未知Not DefinedOfficial Fix0.002840.02CVE-2019-1010245
2019-07-185.65.6Linux Foundation ONOS FlowRuleManager.java apply 权限升级未知Not DefinedNot Defined0.000740.00CVE-2019-1010252
2019-07-185.65.6Linux Foundation ONOS FlowWebResource.java createFlows 权限升级未知Not DefinedNot Defined0.000690.00CVE-2019-1010250
2019-07-184.84.8Linux Foundation ONOS FlowWebResource.java createFlow 内存损坏未知Not DefinedNot Defined0.000700.00CVE-2019-1010249
2017-07-178.58.5Linux Foundation ONOS OAR 权限升级未知Not DefinedNot Defined0.015100.00CVE-2017-1000081
2017-07-177.47.4Linux Foundation ONOS WebSocket 权限升级未知Not DefinedNot Defined0.000960.00CVE-2017-1000080
2017-07-176.46.4Linux Foundation ONOS 拒绝服务未知Not DefinedNot Defined0.001180.00CVE-2017-1000079
2017-07-175.25.2Linux Foundation ONOS Device Registration 跨网站脚本未知Not DefinedNot Defined0.000890.01CVE-2017-1000078
2015-03-105.14.5Linux Foundation Xen x86 Emulation 权限升级Virtualization SoftwareUnprovenOfficial Fix0.000860.00CVE-2015-2151
2015-03-054.03.5Linux Foundation Xen Emulation Routine 信息公开Virtualization SoftwareUnprovenOfficial Fix0.000600.00CVE-2015-2044
2015-03-054.03.5Linux Foundation Xen HYPERVISOR_xen_version 信息公开Virtualization SoftwareUnprovenOfficial Fix0.000620.00CVE-2015-2045
2015-02-126.25.4Linux Foundation Xen Register 权限升级Virtualization SoftwareUnprovenOfficial Fix0.000590.00CVE-2015-0268
2015-01-296.25.4Linux Foundation Xen GIC 拒绝服务Virtualization SoftwareUnprovenOfficial Fix0.000000.02
2015-01-294.03.8Linux Foundation Xen GIC Logging Rate Limit 拒绝服务Virtualization SoftwareNot DefinedOfficial Fix0.000620.02CVE-2015-1563
2015-01-064.03.5Linux Foundation Xen 内存损坏Virtualization SoftwareUnprovenOfficial Fix0.008540.02CVE-2015-0361
2014-12-083.33.2Linux Foundation Xen P2M Lock 拒绝服务Virtualization SoftwareNot DefinedOfficial Fix0.000620.09CVE-2014-9066
2014-12-083.32.9Linux Foundation Xen P2M Lock 拒绝服务Virtualization SoftwareUnprovenOfficial Fix0.000620.02CVE-2014-9065
2014-11-274.03.5Linux Foundation Xen REP MOVS Acceleration Support 拒绝服务Virtualization SoftwareUnprovenOfficial Fix0.000620.00CVE-2014-8867
2014-11-279.08.6Linux Foundation Xen Compatibility Mode 拒绝服务Virtualization SoftwareNot DefinedOfficial Fix0.000620.02CVE-2014-8866
2014-11-203.73.6Linux Foundation Xen MMU_MACHPHYS_UPDATE Processing 权限升级Virtualization SoftwareNot DefinedOfficial Fix0.002940.00CVE-2014-9030
2014-11-204.33.8Linux Foundation Xen 拒绝服务Virtualization SoftwareUnprovenOfficial Fix0.002940.00CVE-2014-9030
2014-11-189.07.8Linux Foundation Xen x86 Emulation Local Privilege EscalationVirtualization SoftwareUnprovenOfficial Fix0.000620.00CVE-2014-8595
2014-11-184.03.5Linux Foundation Xen MMU Virtualization do_mmu_update 权限升级Virtualization SoftwareUnprovenOfficial Fix0.006700.00CVE-2014-8594

121 更多条目未显示

Want to stay up to date on a daily basis?

Enable the mail alert feature now!