|
2018-01-04
|
CVE-2017-5753 |
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis. |
Cortex\-A_firmware,
Cortex\-R_firmware,
Ubuntu_linux,
Debian_linux,
Atom_c,
Atom_e,
Atom_x3,
Atom_z,
Celeron_j,
Celeron_n,
Core_i3,
Core_i5,
Core_i7,
Core_m,
Core_m3,
Core_m5,
Core_m7,
Pentium_j,
Pentium_n,
Xeon,
Xeon_bronze_3104,
Xeon_bronze_3106,
Xeon_e3,
Xeon_e3_1105c_v2,
Xeon_e3_1125c,
Xeon_e3_1125c_v2,
Xeon_e3_1220,
Xeon_e3_12201,
Xeon_e3_12201_v2,
Xeon_e3_1220_v2,
Xeon_e3_1220_v3,
Xeon_e3_1220_v5,
Xeon_e3_1220_v6,
Xeon_e3_1220l_v3,
Xeon_e3_1225,
Xeon_e3_1225_v2,
Xeon_e3_1225_v3,
Xeon_e3_1225_v5,
Xeon_e3_1225_v6,
Xeon_e3_1226_v3,
Xeon_e3_1230,
Xeon_e3_1230_v2,
Xeon_e3_1230_v3,
Xeon_e3_1230_v5,
Xeon_e3_1230_v6,
Xeon_e3_1230l_v3,
Xeon_e3_1231_v3,
Xeon_e3_1235,
Xeon_e3_1235l_v5,
Xeon_e3_1240,
Xeon_e3_1240_v2,
Xeon_e3_1240_v3,
Xeon_e3_1240_v5,
Xeon_e3_1240_v6,
Xeon_e3_1240l_v3,
Xeon_e3_1240l_v5,
Xeon_e3_1241_v3,
Xeon_e3_1245,
Xeon_e3_1245_v2,
Xeon_e3_1245_v3,
Xeon_e3_1245_v5,
Xeon_e3_1245_v6,
Xeon_e3_1246_v3,
Xeon_e3_1258l_v4,
Xeon_e3_1260l,
Xeon_e3_1260l_v5,
Xeon_e3_1265l_v2,
Xeon_e3_1265l_v3,
Xeon_e3_1265l_v4,
Xeon_e3_1268l_v3,
Xeon_e3_1268l_v5,
Xeon_e3_1270,
Xeon_e3_1270_v2,
Xeon_e3_1270_v3,
Xeon_e3_1270_v5,
Xeon_e3_1270_v6,
Xeon_e3_1271_v3,
Xeon_e3_1275,
Xeon_e3_1275_v2,
Xeon_e3_1275_v3,
Xeon_e3_1275_v5,
Xeon_e3_1275_v6,
Xeon_e3_1275l_v3,
Xeon_e3_1276_v3,
Xeon_e3_1278l_v4,
Xeon_e3_1280,
Xeon_e3_1280_v2,
Xeon_e3_1280_v3,
Xeon_e3_1280_v5,
Xeon_e3_1280_v6,
Xeon_e3_1281_v3,
Xeon_e3_1285_v3,
Xeon_e3_1285_v4,
Xeon_e3_1285_v6,
Xeon_e3_1285l_v3,
Xeon_e3_1285l_v4,
Xeon_e3_1286_v3,
Xeon_e3_1286l_v3,
Xeon_e3_1290,
Xeon_e3_1290_v2,
Xeon_e3_1501l_v6,
Xeon_e3_1501m_v6,
Xeon_e3_1505l_v5,
Xeon_e3_1505l_v6,
Xeon_e3_1505m_v5,
Xeon_e5,
Xeon_e5_1428l,
Xeon_e5_1428l_v2,
Xeon_e5_1428l_v3,
Xeon_e5_1620,
Xeon_e5_1620_v2,
Xeon_e5_1620_v3,
Xeon_e5_1620_v4,
Xeon_e5_1630_v3,
Xeon_e5_1630_v4,
Xeon_e5_1650,
Xeon_e5_1650_v2,
Xeon_e5_1650_v3,
Xeon_e5_1650_v4,
Xeon_e5_1660,
Xeon_e5_1660_v2,
Xeon_e5_1660_v3,
Xeon_e5_1660_v4,
Xeon_e5_1680_v3,
Xeon_e5_1680_v4,
Xeon_e5_2403,
Xeon_e5_2403_v2,
Xeon_e5_2407,
Xeon_e5_2407_v2,
Xeon_e5_2408l_v3,
Xeon_e5_2418l,
Xeon_e5_2418l_v2,
Xeon_e5_2418l_v3,
Xeon_e5_2420,
Xeon_e5_2420_v2,
Xeon_e5_2428l,
Xeon_e5_2428l_v2,
Xeon_e5_2428l_v3,
Xeon_e5_2430,
Xeon_e5_2430_v2,
Xeon_e5_2430l,
Xeon_e5_2430l_v2,
Xeon_e5_2438l_v3,
Xeon_e5_2440,
Xeon_e5_2440_v2,
Xeon_e5_2448l,
Xeon_e5_2448l_v2,
Xeon_e5_2450,
Xeon_e5_2450_v2,
Xeon_e5_2450l,
Xeon_e5_2450l_v2,
Xeon_e5_2470,
Xeon_e5_2470_v2,
Xeon_e5_2603,
Xeon_e5_2603_v2,
Xeon_e5_2603_v3,
Xeon_e5_2603_v4,
Xeon_e5_2608l_v3,
Xeon_e5_2608l_v4,
Xeon_e5_2609,
Xeon_e5_2609_v2,
Xeon_e5_2609_v3,
Xeon_e5_2609_v4,
Xeon_e5_2618l_v2,
Xeon_e5_2618l_v3,
Xeon_e5_2618l_v4,
Xeon_e5_2620,
Xeon_e5_2620_v2,
Xeon_e5_2620_v3,
Xeon_e5_2620_v4,
Xeon_e5_2623_v3,
Xeon_e5_2623_v4,
Xeon_e5_2628l_v2,
Xeon_e5_2628l_v3,
Xeon_e5_2628l_v4,
Xeon_e5_2630,
Xeon_e5_2630_v2,
Xeon_e5_2630_v3,
Xeon_e5_2630_v4,
Xeon_e5_2630l,
Xeon_e5_2630l_v2,
Xeon_e5_2630l_v3,
Xeon_e5_2630l_v4,
Xeon_e5_2637,
Xeon_e5_2637_v2,
Xeon_e5_2637_v3,
Xeon_e5_2637_v4,
Xeon_e5_2640,
Xeon_e5_2640_v2,
Xeon_e5_2640_v3,
Xeon_e5_2640_v4,
Xeon_e5_2643,
Xeon_e5_2643_v2,
Xeon_e5_2643_v3,
Xeon_e5_2643_v4,
Xeon_e5_2648l,
Xeon_e5_2648l_v2,
Xeon_e5_2648l_v3,
Xeon_e5_2648l_v4,
Xeon_e5_2650,
Xeon_e5_2650_v2,
Xeon_e5_2650_v3,
Xeon_e5_2650_v4,
Xeon_e5_2650l,
Xeon_e5_2650l_v2,
Xeon_e5_2650l_v3,
Xeon_e7,
Xeon_e\-1105c,
Xeon_gold,
Xeon_phi,
Xeon_platinum,
Xeon_silver,
Hci,
Solidfire,
Leap,
Communications_local_service_management_system,
Solaris,
Btc12_firmware,
Btc14_firmware,
Visunet_rm_shell,
Bl2_bpc_1000_firmware,
Bl2_bpc_2000_firmware,
Bl2_bpc_7000_firmware,
Bl2_ppc_1000_firmware,
Bl2_ppc_2000_firmware,
Bl2_ppc_7000_firmware,
Bl_bpc_2000_firmware,
Bl_bpc_2001_firmware,
Bl_bpc_3000_firmware,
Bl_bpc_3001_firmware,
Bl_bpc_7000_firmware,
Bl_bpc_7001_firmware,
Bl_ppc12_1000_firmware,
Bl_ppc15_1000_firmware,
Bl_ppc15_3000_firmware,
Bl_ppc15_7000_firmware,
Bl_ppc17_1000_firmware,
Bl_ppc17_3000_firmware,
Bl_ppc17_7000_firmware,
Bl_ppc_1000_firmware,
Bl_ppc_7000_firmware,
Bl_rackmount_2u_firmware,
Bl_rackmount_4u_firmware,
Dl_ppc15_1000_firmware,
Dl_ppc15m_7000_firmware,
Dl_ppc18\.5m_7000_firmware,
Dl_ppc21\.5m_7000_firmware,
El_ppc_1000\/m_firmware,
El_ppc_1000\/wt_firmware,
El_ppc_1000_firmware,
Valueline_ipc_firmware,
Vl2_bpc_1000_firmware,
Vl2_bpc_2000_firmware,
Vl2_bpc_3000_firmware,
Vl2_bpc_7000_firmware,
Vl2_bpc_9000_firmware,
Vl2_ppc12_1000_firmware,
Vl2_ppc7_1000_firmware,
Vl2_ppc9_1000_firmware,
Vl2_ppc_1000_firmware,
Vl2_ppc_2000_firmware,
Vl2_ppc_3000_firmware,
Vl2_ppc_7000_firmware,
Vl2_ppc_9000_firmware,
Vl_bpc_1000_firmware,
Vl_bpc_2000_firmware,
Vl_bpc_3000_firmware,
Vl_ipc_p7000_firmware,
Vl_ppc_2000_firmware,
Vl_ppc_3000_firmware,
Simatic_itc1500_firmware,
Simatic_itc1500_pro_firmware,
Simatic_itc1900_firmware,
Simatic_itc1900_pro_firmware,
Simatic_itc2200_firmware,
Simatic_itc2200_pro_firmware,
Simatic_winac_rtx_\(F\)_2010_firmware,
Suse_linux_enterprise_desktop,
Suse_linux_enterprise_server,
Suse_linux_enterprise_software_development_kit,
Diskstation_manager,
Router_manager,
Skynas,
Virtual_machine_manager,
Vs360hd_firmware,
Vs960hd_firmware,
Esxi,
Fusion,
Workstation
|
N/A
|
|
|
2010-11-17
|
CVE-2010-4008 |
libxml2 before 2.7.8, as used in Google Chrome before 7.0.517.44, Apple Safari 5.0.2 and earlier, and other products, reads from invalid memory locations during processing of malformed XPath expressions, which allows context-dependent attackers to cause a denial of service (application crash) via a crafted XML document. |
Openoffice,
Iphone_os,
Itunes,
Mac_os_x,
Safari,
Ubuntu_linux,
Debian_linux,
Chrome,
Opensuse,
Enterprise_linux_desktop,
Enterprise_linux_server,
Enterprise_linux_server_eus,
Enterprise_linux_workstation,
Suse_linux_enterprise_server,
Libxml2
|
N/A
|
|
|
2015-10-19
|
CVE-2015-5707 |
Integer overflow in the sg_start_req function in drivers/scsi/sg.c in the Linux kernel 2.6.x through 4.x before 4.1 allows local users to cause a denial of service or possibly have unspecified other impact via a large iov_count value in a write request. |
Ubuntu_linux,
Debian_linux,
Linux_kernel,
Suse_linux_enterprise_desktop,
Suse_linux_enterprise_server
|
N/A
|
|
|
|
2017-08-09
|
CVE-2015-3405 |
ntp-keygen in ntp 4.2.8px before 4.2.8p2-RC2 and 4.3.x before 4.3.12 does not generate MD5 keys with sufficient entropy on big endian machines when the lowest order byte of the temp variable is between 0x20 and 0x7f and not #, which might allow remote attackers to obtain the value of generated MD5 keys via a brute force attack with the 93 possible keys. |
Debian_linux,
Fedora,
Ntp,
Suse_linux_enterprise_server,
Suse_linux_enterprise_desktop,
Enterprise_linux_desktop,
Enterprise_linux_for_ibm_z_systems,
Enterprise_linux_for_power_big_endian,
Enterprise_linux_for_scientific_computing,
Enterprise_linux_server,
Enterprise_linux_server_from_rhui_6,
Enterprise_linux_workstation,
Suse_linux_enterprise_server
|
7.5
|
|
|
2012-02-16
|
CVE-2011-3026 |
Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an integer truncation. |
Iphone_os,
Mac_os_x,
Mac_os_x_server,
Chrome,
Opensuse,
Linux_enterprise_server,
Suse_linux_enterprise_server
|
N/A
|
|
|
2018-11-29
|
CVE-2018-19655 |
A stack-based buffer overflow in the find_green() function of dcraw through 9.28, as used in ufraw-batch and many other products, may allow a remote attacker to cause a control-flow hijack, denial-of-service, or unspecified other impact via a maliciously crafted raw photo file. |
Dcraw,
Suse_linux_enterprise_desktop,
Suse_linux_enterprise_server
|
8.8
|
|
|
2020-03-23
|
CVE-2020-6449 |
Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
Debian_linux,
Fedora,
Chrome,
Suse_linux_enterprise_desktop,
Suse_linux_enterprise_server
|
N/A
|
|
|
2020-03-23
|
CVE-2020-6429 |
Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
Debian_linux,
Fedora,
Chrome,
Suse_linux_enterprise_desktop,
Suse_linux_enterprise_server
|
N/A
|
|
|
2020-03-23
|
CVE-2020-6428 |
Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
Debian_linux,
Fedora,
Chrome,
Suse_linux_enterprise_desktop,
Suse_linux_enterprise_server
|
N/A
|
|
|
2020-03-23
|
CVE-2020-6427 |
Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
Debian_linux,
Fedora,
Chrome,
Suse_linux_enterprise_desktop,
Suse_linux_enterprise_server
|
N/A
|
|