Vulnerabilities in kernel
5 resultsVexday analysis
O kernel apresenta 5 vulnerabilidades registradas na base, nenhuma delas sob ataque ativo ou com severidade crítica no momento. A fraqueza predominante é estouro de buffer (CWE-122), padrão conhecido em código de baixo nível; a ausência de publicações recentes nos últimos 90 dias indica que o risco atual não é emergente.
CVE-2018-1108MEDIUMkernel drivers before version 4.17-rc1 are vulnerable to a weakness in the Linux kernel's implementation of random seed data. Programs, earlEPSS 1.8%CVE-2018-1087HIGHkernel KVM before versions kernel 4.16, kernel 4.16-rc7, kernel 4.17-rc1, kernel 4.17-rc2 and kernel 4.17-rc3 is vulnerable to a flaw in theEPSS 0.8%CVE-2018-10840MEDIUMLinux kernel is vulnerable to a heap-based buffer overflow in the fs/ext4/xattr.c:ext4_xattr_set_entry() function. An attacker could exploitEPSS 0.7%CVE-2018-1118LOWLinux kernel vhost since version 4.8 does not properly initialize memory in messages passed between virtual guests and the host operating syEPSS 0.4%CVE-2016-9604MEDIUMIt was discovered in the Linux kernel before 4.11-rc8 that root can gain direct access to an internal keyring, such as '.dns_resolver' in RHEPSS 0.3%