Linux Kernel

Every one of the 2,526 is a mark on the map. Named now: 53 to 78, most at risk first.

53. The NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lack certain checks for the end of a buffer, which allows remote attackers to trigger pointer-arithm…CVE-2017-7895Linux · 11% likely

    CWE-119

54. The __driver_rfc4106_decrypt function in arch/x86/crypto/aesni-intel_glue.c in the Linux kernel before 3.19.3 does not properly determine the memory locations used for encrypted d…CVE-2015-3331Linux · 11% likely

    CWE-119

55. The Linux kernel 2.6.20 through 2.6.21.1 allows remote attackers to cause a denial of service (panic) via a certain IPv6 packet, possibly involving the Jumbo Payload hop-by-hop op…CVE-2008-0352Linux · 10% likely

    CWE-119

56. net/netfilter/nf_conntrack_proto_dccp.c in the Linux kernel through 3.13.6 uses a DCCP header pointer incorrectly, which allows remote attackers to cause a denial of service (syst…CVE-2014-2523Linux · 10% likely

    CWE-20

57. ip_conntrack_ftp in the IPTables firewall for Linux 2.4 allows remote attackers to bypass access restrictions for an FTP server via a PORT command that lists an arbitrary IP addre…CVE-2001-0405Linux · 10% likely
58. The ath9k_htc_set_bssid_mask function in drivers/net/wireless/ath/ath9k/htc_drv_main.c in the Linux kernel through 3.12 uses a BSSID masking approach to determine the set of MAC a…CVE-2013-4579Linux · 10% likely

    CWE-310

59. The replace_map_fd_with_map_ptr function in kernel/bpf/verifier.c in the Linux kernel before 4.5.5 does not properly maintain an fd data structure, which allows local users to gai…CVE-2016-4557Linux · 10% likely
60. Use-after-free vulnerability in the kvm_ioctl_create_device function in virt/kvm/kvm_main.c in the Linux kernel before 4.8.13 allows host OS users to cause a denial of service (ho…CVE-2016-10150Linux · 10% likely

    CWE-416

61. An exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3. An attacker could exploit this vulnerability by triggering AP to send IAPP locatio…CVE-2019-5108Linux · CVSS 7.4 · 10% likely

    CWE-440

62. The sctp_sf_ootb function in net/sctp/sm_statefuns.c in the Linux kernel before 4.8.8 lacks chunk-length checking for the first chunk, which allows remote attackers to cause a den…CVE-2016-9555Linux · 10% likely

    CWE-125

63. Use-after-free vulnerability in the sctp_assoc_update function in net/sctp/associola.c in the Linux kernel before 3.18.8 allows remote attackers to cause a denial of service (slab…CVE-2015-1421Linux · 9.8% likely
64. fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, leading to an integer overflow, an Out-of-bounds Write, and…CVE-2021-33909Linux · 9.8% likely

    CWE-190

65. The skb_flow_dissect function in net/core/flow_dissector.c in the Linux kernel through 3.12 allows remote attackers to cause a denial of service (infinite loop) via a small value…CVE-2013-4348Linux · 9.7% likely

    CWE-399

66. The __skb_flow_dissect function in net/core/flow_dissector.c in the Linux kernel before 4.3 does not ensure that n_proto, ip_proto, and thoff are initialized, which allows remote…CVE-2017-13715Linux · 9.7% likely

    CWE-665

67. The NFSv4 server in the Linux kernel before 4.11.3 does not properly validate the layout type when processing the NFSv4 pNFS GETDEVICEINFO or LAYOUTGET operand in a UDP packet fro…CVE-2017-8797Linux · 9.5% likely

    CWE-129

68. The nf_nat_redirect_ipv4 function in net/netfilter/nf_nat_redirect.c in the Linux kernel before 4.4 allows remote attackers to cause a denial of service (NULL pointer dereference…CVE-2015-8787Linux · 9.2% likely

    CWE-476

69. Multiple buffer overflows in fs/nfsd/nfs4xdr.c in the XDR implementation in the NFS server in the Linux kernel before 2.6.34-rc6 allow remote attackers to cause a denial of servic…CVE-2010-2521Linux · 9.0% likely

    CWE-119

70. Integer overflow in the LZ4 algorithm implementation, as used in Yann Collet LZ4 before r118 and in the lz4_uncompress function in lib/lz4/lz4_decompress.c in the Linux kernel bef…CVE-2014-4611Linux · 8.9% likely

    CWE-201 bounty report

71. nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service (panic) because, in the case of an nf_queu…CVE-2022-36946Linux · CVSS 7.5 · 8.9% likely
72. The ROSE protocol implementation in the Linux kernel before 2.6.39 does not verify that certain data-length values are consistent with the amount of data sent, which might allow r…CVE-2011-4914Linux · 8.7% likely

    CWE-20

73. The sctp_assoc_lookup_asconf_ack function in net/sctp/associola.c in the SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of servic…CVE-2014-3687Linux · 8.6% likely

    CWE-400

74. drivers/net/e1000e/netdev.c in the e1000e driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet frame that exceeds the MTU, which allows…CVE-2009-4538Linux · 8.4% likely
75. drivers/staging/ozwpan/ozusbsvc1.c in the OZWPAN driver in the Linux kernel through 4.0.5 does not ensure that certain length values are sufficiently large, which allows remote at…CVE-2015-4002Linux · 8.3% likely

    CWE-119

76. The eisa_eeprom_read function in the parisc isa-eeprom component (drivers/parisc/eisa_eeprom.c) in the Linux kernel before 2.6.31-rc6 allows local users to access restricted memor…CVE-2009-2846Linux · 8.2% likely

    CWE-264

77. The OZWPAN driver in the Linux kernel through 4.0.5 relies on an untrusted length field during packet parsing, which allows remote attackers to obtain sensitive information from k…CVE-2015-4004Linux · 8.1% likely

    CWE-119

78. Heap-based buffer overflow in the udf_load_logicalvol function in fs/udf/super.c in the Linux kernel before 3.4.5 allows remote attackers to cause a denial of service (system cras…CVE-2012-3400Linux · 7.8% likely

    CWE-787

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.