Suse Linux Enterprise High Availability Extension vulnerabilities
3 vulnerabilities
Known vulnerabilities in Suse Linux Enterprise High Availability Extension, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2014-0196canonicalubuntu_linux+57KEV
EPSS score20.33%
The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.CVE-2010-2495canonicalubuntu_linux+4EPSS score2.93%
The pppol2tp_xmit function in drivers/net/pppol2tp.c in the L2TP implementation in the Linux kernel before 2.6.34 does not properly validate certain values associated with an interface, which allows attackers to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via vectors related to a routing change.CVE-2010-3881linuxlinux_kernel+10EPSS score0.46%
arch/x86/kvm/x86.c in the Linux kernel before 2.6.36.2 does not initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel stack memory via read operations on the /dev/kvm device.